Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d43161e4-dac1-407b-8f16-55e6ef100d0a/58742b16-3ba2-343a-8e1b-26d6ee1c7380.roa
File:                     58742b16-3ba2-343a-8e1b-26d6ee1c7380.roa (raw, json)
Hash identifier:          ZRs+iVv2M6UHssrnD8nSA4D4bjwoiZu4mgqvdZJ97aw=
Subject key identifier:   D8:63:A4:BC:2C:41:AF:19:A1:A8:FC:A6:A7:91:7C:36:DA:74:04:18
Certificate issuer:       /CN=d43161e4-dac1-407b-8f16-55e6ef100d0a
Certificate serial:       010D0C9F4328584DC56598DF8FE687E5B3CA8698
Authority key identifier: 0F:AD:FA:40:22:6B:5D:BA:CB:0D:38:35:36:8C:86:20:CC:D9:5E:B3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d43161e4-dac1-407b-8f16-55e6ef100d0a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d43161e4-dac1-407b-8f16-55e6ef100d0a/58742b16-3ba2-343a-8e1b-26d6ee1c7380.roa
Signing time:             Sat 09 May 2026 01:00:25 +0000
ROA not before:           Sat 09 May 2026 01:00:25 +0000
ROA not after:            Fri 07 Aug 2026 01:00:25 +0000
asID:                     134963
IP address blocks:        47.52.0.0/16 maxlen: 24
                          47.56.0.0/16 maxlen: 24
                          47.57.0.0/16 maxlen: 24
                          47.74.0.0/16 maxlen: 24
                          47.75.0.0/16 maxlen: 24
                          47.76.0.0/16 maxlen: 24
                          47.77.0.0/16 maxlen: 24
                          47.78.0.0/16 maxlen: 24
                          47.79.0.0/16 maxlen: 24
                          47.80.0.0/16 maxlen: 24
                          47.81.0.0/16 maxlen: 24
                          47.82.0.0/16 maxlen: 24
                          47.83.0.0/16 maxlen: 24
                          47.84.0.0/16 maxlen: 24
                          47.85.0.0/16 maxlen: 24
                          47.86.0.0/16 maxlen: 24
                          47.87.0.0/16 maxlen: 24
                          47.88.0.0/16 maxlen: 24
                          47.89.0.0/16 maxlen: 24
                          47.90.0.0/16 maxlen: 24
                          47.91.0.0/16 maxlen: 24
                          47.235.0.0/16 maxlen: 24
                          47.236.0.0/16 maxlen: 24
                          47.237.0.0/16 maxlen: 24
                          47.238.0.0/16 maxlen: 24
                          47.239.0.0/16 maxlen: 24
                          47.240.0.0/16 maxlen: 24
                          47.241.0.0/16 maxlen: 24
                          47.242.0.0/16 maxlen: 24
                          47.243.0.0/16 maxlen: 24
                          47.244.0.0/16 maxlen: 24
                          47.245.0.0/16 maxlen: 24
                          47.246.0.0/16 maxlen: 24
                          47.250.0.0/16 maxlen: 24
                          47.251.0.0/16 maxlen: 24
                          47.252.0.0/16 maxlen: 24
                          47.253.0.0/16 maxlen: 24
                          47.254.0.0/16 maxlen: 24
                          72.254.0.0/16 maxlen: 24
                          139.95.0.0/16 maxlen: 24
                          147.139.0.0/16 maxlen: 24
                          155.102.0.0/16 maxlen: 24
                          163.181.0.0/16 maxlen: 24
                          198.11.128.0/18 maxlen: 24
                          205.204.96.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d43161e4-dac1-407b-8f16-55e6ef100d0a/d43161e4-dac1-407b-8f16-55e6ef100d0a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d43161e4-dac1-407b-8f16-55e6ef100d0a/d43161e4-dac1-407b-8f16-55e6ef100d0a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d43161e4-dac1-407b-8f16-55e6ef100d0a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:c5:65:98:df:8f:e6:87:e5:b3:ca:86:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d43161e4-dac1-407b-8f16-55e6ef100d0a
        Validity
            Not Before: May  9 01:00:25 2026 GMT
            Not After : Aug  7 01:00:25 2026 GMT
        Subject: CN=370c7ac8-6d7e-48b6-8527-a79323d8c5ec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:7b:fd:d3:3a:0b:a9:a8:98:aa:18:6b:bd:dd:
                    2a:af:16:45:47:f7:cf:76:a9:0b:d1:d6:19:36:e3:
                    ae:ec:27:29:e0:92:42:27:14:57:0c:78:40:77:5a:
                    b8:c3:6b:7e:b8:11:59:a2:83:8a:0f:a9:fc:fe:46:
                    55:e6:0c:7f:e4:b9:e4:9f:dc:45:5e:a6:52:c3:ca:
                    8c:d1:b2:4e:32:a0:35:dc:d7:3c:c7:fd:5c:a9:30:
                    d3:36:e5:10:af:42:f8:28:2a:1a:49:29:e3:2d:e9:
                    e1:6d:2c:79:63:6e:dc:1c:d4:d5:6e:33:8c:74:5b:
                    7a:25:91:85:b6:5c:c3:b5:cc:04:1d:d2:d5:0f:eb:
                    bc:35:f0:e9:f4:43:9a:00:9b:6e:08:2d:b4:e3:7c:
                    2b:fa:9f:d5:ed:66:c9:79:3a:68:37:57:ce:36:ed:
                    7a:90:11:53:d0:28:c1:4b:64:a4:b0:85:11:22:f9:
                    22:d9:51:93:0f:9b:2b:87:2e:23:df:da:ef:37:2d:
                    b7:da:d9:8b:32:08:b3:e3:7b:ab:79:fe:3e:5f:60:
                    c4:75:fa:d2:f4:e2:71:e2:0f:ee:76:8f:48:2d:b3:
                    c0:85:9d:59:72:4e:14:85:4d:71:7d:38:2f:a4:d5:
                    8f:78:31:61:f3:46:37:4d:f9:91:67:b0:73:d2:7b:
                    bc:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:63:A4:BC:2C:41:AF:19:A1:A8:FC:A6:A7:91:7C:36:DA:74:04:18
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d43161e4-dac1-407b-8f16-55e6ef100d0a/58742b16-3ba2-343a-8e1b-26d6ee1c7380.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d43161e4-dac1-407b-8f16-55e6ef100d0a/d43161e4-dac1-407b-8f16-55e6ef100d0a.crl

            X509v3 Authority Key Identifier:
                keyid:0F:AD:FA:40:22:6B:5D:BA:CB:0D:38:35:36:8C:86:20:CC:D9:5E:B3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d43161e4-dac1-407b-8f16-55e6ef100d0a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  47.52.0.0/16
                  47.56.0.0/15
                  47.74.0.0-47.91.255.255
                  47.235.0.0-47.246.255.255
                  47.250.0.0-47.254.255.255
                  72.254.0.0/16
                  139.95.0.0/16
                  147.139.0.0/16
                  155.102.0.0/16
                  163.181.0.0/16
                  198.11.128.0/18
                  205.204.96.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         73:ed:dd:3c:68:93:57:bb:54:d9:cc:50:70:c2:b7:ee:24:0c:
         8e:5d:64:22:b6:a1:e6:e3:ca:c2:40:36:83:82:5a:d4:8e:89:
         a4:d1:c2:22:e5:17:86:f1:de:c8:41:ad:e5:8a:0d:b8:92:26:
         87:ce:47:08:61:38:4e:bd:13:e7:eb:cc:85:ad:11:40:47:ca:
         6e:4a:24:a9:45:70:54:28:1e:a4:d9:a7:21:ee:a2:60:da:6d:
         44:89:df:49:50:e1:2e:75:27:9b:75:2f:e5:cc:5f:2a:6c:9d:
         41:b8:ed:df:b6:ab:6d:b5:1a:01:8f:9c:29:ac:b5:f5:ac:08:
         90:0c:b5:b1:98:ee:8d:d9:0d:19:45:f2:ea:8d:61:8c:38:a9:
         8b:20:98:8f:f9:ee:37:50:10:1a:6b:43:fc:ed:a1:87:d5:9e:
         f9:43:c1:c1:97:fb:c3:a6:d5:b2:c3:da:64:2b:34:50:fe:bb:
         3d:ac:34:e1:3f:06:40:92:cc:ef:7c:a2:af:35:eb:91:d0:e7:
         62:2b:88:16:ba:4e:cf:13:60:82:18:db:f2:b8:bd:43:09:3e:
         53:91:42:a7:af:34:dc:b5:09:aa:b4:17:2e:3a:62:05:a4:fd:
         a2:9b:2b:28:e2:4f:b7:26:60:b2:81:76:89:6b:f1:9d:a0:8b:
         71:c5:99:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 19:07:32 2026 by rpki-client