Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32e3a3ad-b1ac-413d-8f98-a69429a6ca98/28664a9a-e120-3701-b0b7-b5858658be81.roa
File:                     28664a9a-e120-3701-b0b7-b5858658be81.roa (raw, json)
Hash identifier:          DlLtwR94t5DKGttF/G4QYDPleLnyA54j5VCCFEdF/3I=
Subject key identifier:   13:42:13:A5:DF:4A:8C:B5:5C:DD:70:84:7D:5F:D4:CA:B7:87:2E:80
Certificate issuer:       /CN=32e3a3ad-b1ac-413d-8f98-a69429a6ca98
Certificate serial:       010D0C9F4328584E5619ECE01EFDD4D8DC338380
Authority key identifier: C9:95:54:7B:39:F5:77:ED:0B:E3:8A:70:7B:F6:77:43:FA:AC:C9:7D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32e3a3ad-b1ac-413d-8f98-a69429a6ca98.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32e3a3ad-b1ac-413d-8f98-a69429a6ca98/28664a9a-e120-3701-b0b7-b5858658be81.roa
Signing time:             Mon 29 Jun 2026 21:00:12 +0000
ROA not before:           Mon 29 Jun 2026 21:00:12 +0000
ROA not after:            Sun 27 Sep 2026 21:00:12 +0000
asID:                     14618
IP address blocks:        52.144.58.0/24 maxlen: 24
                          168.245.151.0/24 maxlen: 24
                          192.139.134.0/24 maxlen: 24
                          199.19.89.0/24 maxlen: 24
                          199.19.90.0/24 maxlen: 24
                          199.19.91.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32e3a3ad-b1ac-413d-8f98-a69429a6ca98/32e3a3ad-b1ac-413d-8f98-a69429a6ca98.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32e3a3ad-b1ac-413d-8f98-a69429a6ca98/32e3a3ad-b1ac-413d-8f98-a69429a6ca98.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32e3a3ad-b1ac-413d-8f98-a69429a6ca98.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:56:19:ec:e0:1e:fd:d4:d8:dc:33:83:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=32e3a3ad-b1ac-413d-8f98-a69429a6ca98
        Validity
            Not Before: Jun 29 21:00:12 2026 GMT
            Not After : Sep 27 21:00:12 2026 GMT
        Subject: CN=dc26ca53-d849-434a-9870-c7c19d50efe1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:37:10:3b:cb:9b:77:d7:c6:29:23:2f:37:c9:
                    55:be:c0:e0:32:ac:96:fd:e2:c5:bb:69:c8:80:be:
                    43:04:79:77:53:8f:19:ba:57:bf:3a:0c:14:8f:82:
                    3f:5b:fd:cf:e2:81:d7:96:f1:2a:4c:b0:44:bb:e7:
                    a7:78:ea:fe:c2:3a:b1:55:f0:b8:9e:a2:97:63:c5:
                    87:3f:4d:a9:ec:88:59:c8:3a:b7:59:50:ed:a3:1b:
                    ed:f1:eb:11:cf:00:e1:78:52:1b:e4:a3:94:e5:63:
                    a9:b6:ab:aa:7c:f8:6a:88:ee:e8:49:3c:18:8b:13:
                    0e:bc:e8:c5:bd:4a:8c:55:89:8e:af:6f:16:65:1a:
                    61:88:2f:9e:b6:1a:da:2e:68:77:4c:30:d4:ed:8d:
                    39:f5:c0:a9:23:9f:a6:ea:8e:e5:15:93:7e:0e:25:
                    11:e3:c6:96:e6:9d:47:fe:07:5d:7b:bf:03:ba:84:
                    ab:b4:25:5f:f4:cf:2a:29:9d:fa:03:f9:70:15:05:
                    9f:50:1c:aa:73:a7:43:d2:65:e7:8c:a7:99:41:73:
                    53:07:fc:6a:34:e0:43:d7:d2:d9:94:56:e9:a0:7a:
                    3f:ca:bd:e6:f1:be:18:90:ec:88:3c:23:2b:c7:fe:
                    db:69:ac:aa:8c:eb:f2:6d:4a:9a:53:41:84:b9:4d:
                    71:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:42:13:A5:DF:4A:8C:B5:5C:DD:70:84:7D:5F:D4:CA:B7:87:2E:80
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32e3a3ad-b1ac-413d-8f98-a69429a6ca98/28664a9a-e120-3701-b0b7-b5858658be81.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32e3a3ad-b1ac-413d-8f98-a69429a6ca98/32e3a3ad-b1ac-413d-8f98-a69429a6ca98.crl

            X509v3 Authority Key Identifier:
                keyid:C9:95:54:7B:39:F5:77:ED:0B:E3:8A:70:7B:F6:77:43:FA:AC:C9:7D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32e3a3ad-b1ac-413d-8f98-a69429a6ca98.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  52.144.58.0/24
                  168.245.151.0/24
                  192.139.134.0/24
                  199.19.89.0-199.19.91.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         56:cd:81:2b:89:25:00:7e:1b:ea:f7:68:a6:b4:bf:0f:f3:0d:
         08:14:83:7b:da:ba:5b:07:94:48:25:b4:25:8a:e8:7e:cd:57:
         b9:c0:5f:86:77:bb:d8:a4:87:36:b5:2d:7d:dd:5c:75:c4:06:
         c3:c3:5e:c8:c4:53:99:b9:9e:7e:9c:66:6f:e5:fa:d5:5d:dc:
         f2:63:04:a9:f2:ea:2a:cc:61:5d:0c:cd:7c:7b:f0:69:85:19:
         c3:8a:98:2e:b4:a7:ca:5f:c4:8f:51:46:f5:58:4f:56:90:4c:
         78:e2:4e:5d:3d:a0:33:6d:0d:76:3b:59:cf:a5:8f:31:a3:92:
         53:b9:d4:91:91:d6:a0:29:58:7d:4d:11:bd:6d:e9:60:1a:91:
         9e:ea:55:45:35:98:a0:52:da:e2:6c:b9:58:e7:e2:d2:48:f5:
         55:c4:dd:af:33:b7:80:16:b6:ca:ba:17:bc:d4:1c:b8:36:04:
         2f:3b:ac:64:75:91:0e:07:8d:b0:76:f6:86:d0:ac:c3:82:db:
         28:4b:7a:02:f3:8b:d6:ad:85:cb:23:ba:c9:af:eb:2b:57:9b:
         1e:ee:83:66:03:dc:cf:33:30:7b:c2:86:60:6a:e6:cd:bc:33:
         d4:f1:ce:6f:f9:e0:65:b5:c1:50:63:c7:92:92:82:b8:ac:a6:
         ba:83:2f:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 15:13:08 2026 by rpki-client