Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/688e17b8-edd1-3fb9-b08e-d1d657a447a8.roa
File:                     688e17b8-edd1-3fb9-b08e-d1d657a447a8.roa (raw, json)
Hash identifier:          uaGrt5jk4oPb8obGHnVZDVdWrviDVa0Pj7zA6XrkK1A=
Subject key identifier:   10:2C:93:2C:D9:61:90:FE:40:5C:BB:D1:E7:E3:C5:BC:E5:0D:A6:93
Certificate issuer:       /CN=da370214-1d61-48bf-84a0-a60096ccaae7
Certificate serial:       010D0C9F4328584DB77020C8A8988CB7637E3D80
Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/688e17b8-edd1-3fb9-b08e-d1d657a447a8.roa
Signing time:             Mon 04 May 2026 01:00:25 +0000
ROA not before:           Mon 04 May 2026 01:00:25 +0000
ROA not after:            Sun 02 Aug 2026 01:00:25 +0000
asID:                     21859
IP address blocks:        66.167.144.0/24 maxlen: 24
                          66.167.151.0/24 maxlen: 24
                          66.167.201.0/24 maxlen: 24
                          66.167.204.0/24 maxlen: 24
                          68.165.104.0/24 maxlen: 24
                          209.101.27.0/24 maxlen: 24
                          209.101.51.0/24 maxlen: 24
                          209.101.60.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:b7:70:20:c8:a8:98:8c:b7:63:7e:3d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7
        Validity
            Not Before: May  4 01:00:25 2026 GMT
            Not After : Aug  2 01:00:25 2026 GMT
        Subject: CN=225d3fcd-692e-48d2-8c29-7dd4b8197c75
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:07:22:35:32:fe:78:b7:80:de:97:58:70:c3:
                    2d:ae:8b:a6:87:72:f3:6c:82:af:7c:29:df:b4:55:
                    20:f7:87:e5:fd:8a:41:1b:cd:5b:0c:d6:0e:c8:a5:
                    d9:ca:a4:92:7a:13:f6:f2:1c:83:b2:6c:20:3d:d4:
                    1f:c5:05:27:01:a2:88:90:ba:53:1d:6b:3f:f4:69:
                    34:42:79:ef:ef:38:50:02:dd:3a:5e:32:65:cc:16:
                    c1:e7:71:c7:33:12:03:d2:36:06:61:38:90:1e:e9:
                    fe:68:ad:4e:ef:b6:4d:e0:1a:07:46:55:91:ce:99:
                    7b:35:fd:b5:84:a3:8d:e0:ce:ee:ac:da:f7:01:93:
                    0d:ee:b3:13:4f:b9:2d:4b:d7:e9:b9:6b:9d:9b:3e:
                    b1:d3:40:38:e7:58:65:06:8c:ce:6e:91:5e:e7:6a:
                    7d:a0:55:9a:38:e4:05:d0:fa:36:90:2b:49:65:8b:
                    0f:46:ae:6e:fd:1b:2b:57:ad:24:ef:e4:4b:d7:43:
                    22:e3:86:e4:b0:a6:46:2a:29:07:98:43:33:34:fa:
                    2f:30:ca:ab:ea:2a:f1:e5:54:5f:6d:12:57:f3:17:
                    22:dc:ef:fa:57:05:2c:39:9b:60:63:82:bd:ac:fd:
                    a3:8d:5e:5b:6b:c4:ff:f1:90:25:3e:75:1b:2f:be:
                    40:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:2C:93:2C:D9:61:90:FE:40:5C:BB:D1:E7:E3:C5:BC:E5:0D:A6:93
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/688e17b8-edd1-3fb9-b08e-d1d657a447a8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl

            X509v3 Authority Key Identifier:
                keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.167.144.0/24
                  66.167.151.0/24
                  66.167.201.0/24
                  66.167.204.0/24
                  68.165.104.0/24
                  209.101.27.0/24
                  209.101.51.0/24
                  209.101.60.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         bd:f8:f6:c8:7c:81:0f:ca:99:05:ba:ba:65:fd:49:70:37:1b:
         16:09:2f:3a:5d:87:81:68:45:bd:d2:b9:73:de:cd:3b:28:3a:
         68:13:7c:2a:1f:a3:c7:be:89:17:f5:f6:f7:6a:e6:07:82:75:
         fa:d1:f7:00:38:9e:f5:e3:da:0f:b4:f0:5a:11:30:4a:30:a4:
         1a:13:52:08:16:7f:8c:4f:cc:46:d2:4f:a9:eb:cf:96:b9:20:
         09:8d:f7:d9:e8:60:9a:72:e0:d1:aa:61:24:e6:28:00:35:a6:
         c5:ab:8a:04:e4:28:47:ff:4e:4d:e2:be:a1:a1:6f:2b:d7:9c:
         1e:bb:01:9d:92:f2:22:c1:e4:ce:bb:35:2a:08:d5:6b:2e:34:
         d7:bd:12:1a:20:68:bb:df:02:db:d0:05:e7:f8:f2:5e:65:d8:
         d7:e9:19:b6:5f:f9:ac:94:4b:7d:a6:9c:04:75:f6:f3:4a:39:
         ed:96:33:e9:82:75:f7:e8:2a:82:09:55:8a:9e:0a:e4:85:25:
         20:42:0c:a4:56:25:e7:b2:14:e7:cf:53:23:f1:c0:3f:95:58:
         fd:52:63:52:02:14:6b:81:06:88:a4:39:49:82:ec:83:f0:7d:
         32:c2:a3:76:6a:e4:37:e5:11:97:01:52:70:e5:88:b0:69:a8:
         fc:38:6b:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:07:59 2026 by rpki-client