Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516/5f470726-ba1c-3327-8ebe-1cd7737a8735.roa
File:                     5f470726-ba1c-3327-8ebe-1cd7737a8735.roa (raw, json)
Hash identifier:          ixYW3JDpsjN98M0i4H+awKk+ogs1tvyKAs5buZEaryw=
Subject key identifier:   11:5E:BF:F2:3F:59:CA:4D:7D:AC:CA:58:3D:21:92:48:FC:39:0C:F3
Certificate issuer:       /CN=1add3b23-5fb0-4412-be17-98450d352516
Certificate serial:       010D0C9F4328584F4973D3CD0A90A62FB72B23C0
Authority key identifier: DF:D6:AB:35:08:C4:67:A3:69:8E:4B:5D:EA:87:78:C0:7A:1D:8E:26
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516/5f470726-ba1c-3327-8ebe-1cd7737a8735.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     17054
IP address blocks:        64.72.128.0/19 maxlen: 24
                          64.255.240.0/20 maxlen: 24
                          66.11.0.0/19 maxlen: 24
                          66.159.64.0/19 maxlen: 24
                          66.181.64.0/19 maxlen: 24
                          66.230.64.0/20 maxlen: 24
                          69.7.96.0/20 maxlen: 24
                          206.41.192.0/19 maxlen: 24
                          206.183.0.0/19 maxlen: 24
                          206.210.64.0/19 maxlen: 24
                          206.223.22.0/24 maxlen: 24
                          207.54.128.0/18 maxlen: 24
                          207.114.0.0/17 maxlen: 24
                          208.40.128.0/18 maxlen: 24
                          208.40.192.0/20 maxlen: 24
                          208.40.224.0/19 maxlen: 24
                          209.114.128.0/18 maxlen: 24
                          209.143.64.0/18 maxlen: 24
                          209.166.128.0/18 maxlen: 24
                          209.190.128.0/18 maxlen: 24
                          209.221.0.0/19 maxlen: 24
                          216.37.0.0/18 maxlen: 24
                          216.82.64.0/18 maxlen: 24
                          216.130.0.0/19 maxlen: 24
                          216.151.64.0/18 maxlen: 24
                          216.183.160.0/19 maxlen: 24
                          216.230.96.0/19 maxlen: 24
                          216.239.240.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516/1add3b23-5fb0-4412-be17-98450d352516.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516/1add3b23-5fb0-4412-be17-98450d352516.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 Oct 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:73:d3:cd:0a:90:a6:2f:b7:2b:23:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1add3b23-5fb0-4412-be17-98450d352516
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=cb64aaa6-5336-43f7-b8ec-8899c6bd8aa4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:34:de:8d:4d:71:6d:96:bd:6e:9f:97:17:4d:
                    0e:c1:cf:1a:e7:5e:0d:bb:15:68:8f:08:6a:80:df:
                    02:9a:11:d3:e3:65:c3:36:8c:28:a5:33:6f:d7:37:
                    6c:f3:4b:91:26:4b:84:04:49:76:32:10:f5:b5:5e:
                    ff:c8:9a:ec:58:45:54:9d:6b:a8:4f:96:2f:24:07:
                    ec:f4:11:5f:49:89:ae:c7:78:bf:29:80:55:9c:68:
                    20:07:34:50:62:82:b2:58:ee:3e:ca:2e:df:da:89:
                    b9:b6:1a:2a:fd:1b:2a:5d:00:32:65:6c:78:7c:92:
                    73:5d:46:31:51:4f:a5:55:a9:24:17:9e:c2:9d:1d:
                    dc:f9:9f:06:e1:82:3b:ba:76:f4:99:f2:78:87:f9:
                    67:48:c7:40:2b:7b:47:d2:2d:73:be:7b:a7:c5:8a:
                    f8:5f:0a:13:41:d8:c2:7d:04:36:51:da:82:3d:c9:
                    08:46:1e:1a:d2:cd:dc:78:3e:98:d8:8f:8c:05:eb:
                    1b:99:67:55:b5:2b:3f:c8:81:dc:e6:c3:03:93:85:
                    59:81:68:8c:7b:93:76:70:6a:9f:ce:8c:fb:44:7c:
                    d2:d4:09:e5:3d:cb:ef:03:ff:00:7b:68:c9:61:03:
                    68:24:ae:48:6f:03:26:75:02:4f:3d:1e:8d:44:c7:
                    ef:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:5E:BF:F2:3F:59:CA:4D:7D:AC:CA:58:3D:21:92:48:FC:39:0C:F3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516/5f470726-ba1c-3327-8ebe-1cd7737a8735.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516/1add3b23-5fb0-4412-be17-98450d352516.crl

            X509v3 Authority Key Identifier:
                keyid:DF:D6:AB:35:08:C4:67:A3:69:8E:4B:5D:EA:87:78:C0:7A:1D:8E:26

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.72.128.0/19
                  64.255.240.0/20
                  66.11.0.0/19
                  66.159.64.0/19
                  66.181.64.0/19
                  66.230.64.0/20
                  69.7.96.0/20
                  206.41.192.0/19
                  206.183.0.0/19
                  206.210.64.0/19
                  206.223.22.0/24
                  207.54.128.0/18
                  207.114.0.0/17
                  208.40.128.0-208.40.207.255
                  208.40.224.0/19
                  209.114.128.0/18
                  209.143.64.0/18
                  209.166.128.0/18
                  209.190.128.0/18
                  209.221.0.0/19
                  216.37.0.0/18
                  216.82.64.0/18
                  216.130.0.0/19
                  216.151.64.0/18
                  216.183.160.0/19
                  216.230.96.0/19
                  216.239.240.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         84:4d:ed:55:69:23:da:ca:5e:84:fe:aa:39:f3:02:b0:56:6a:
         d3:e5:55:fe:ac:bf:c1:71:7a:02:8f:01:e0:09:1c:f0:7c:6e:
         a5:21:f3:7b:12:97:d8:8f:77:c5:e1:1b:0c:d4:c6:59:1f:2f:
         81:44:70:9c:25:71:cc:8f:9e:9f:e0:9f:40:b0:94:0d:b8:3d:
         68:e1:93:0a:1b:b2:e8:c4:94:49:f9:1b:fa:51:a1:a3:42:3a:
         92:6f:78:51:a9:69:f5:1a:cc:58:08:7f:aa:fe:9b:4d:82:bb:
         73:66:91:b1:07:14:c9:14:db:42:be:6d:e7:d0:05:b3:85:70:
         a9:12:bc:17:d3:2e:8b:02:f4:39:60:22:a0:02:1e:54:22:ba:
         4c:6a:03:8d:50:06:79:e7:4a:f8:60:09:74:eb:32:fd:6e:bd:
         a2:9a:1c:c2:5e:f8:49:18:73:e9:72:25:da:35:d9:cd:ec:17:
         a5:92:36:5c:b4:20:89:32:0e:1c:be:e0:fa:60:2a:83:97:55:
         49:67:96:a5:03:3c:f3:fa:02:d7:93:a5:98:b7:78:68:b4:c2:
         66:73:80:42:63:ac:ae:d7:b6:8a:dc:b3:15:fc:15:79:88:cd:
         cf:61:4c:a3:d7:46:f7:2d:80:df:27:f9:91:2b:1a:c6:2b:d7:
         53:da:78:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 15:06:11 2026 by rpki-client