Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e2b04e47-5052-4735-8ac7-6c3f429b939a/ec82f193-b8be-335f-bdac-a5d0ba8df2d7.roa
File:                     ec82f193-b8be-335f-bdac-a5d0ba8df2d7.roa (raw, json)
Hash identifier:          jgmTDRTVLsiBeA6HyJVGYtDgSoRRBoVONBrgRRAbAvw=
Subject key identifier:   02:63:A6:C3:44:89:FC:02:8C:04:9C:39:DD:2C:F6:9B:62:8F:98:C0
Certificate issuer:       /CN=e2b04e47-5052-4735-8ac7-6c3f429b939a
Certificate serial:       010D0C9F4328584D237A7209E85EF170C78E9964
Authority key identifier: FF:44:F9:53:6E:FE:5B:AF:C1:37:8B:F1:9A:9E:C6:3B:66:69:69:A3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e2b04e47-5052-4735-8ac7-6c3f429b939a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e2b04e47-5052-4735-8ac7-6c3f429b939a/ec82f193-b8be-335f-bdac-a5d0ba8df2d7.roa
Signing time:             Thu 12 Mar 2026 01:00:32 +0000
ROA not before:           Thu 12 Mar 2026 01:00:32 +0000
ROA not after:            Wed 10 Jun 2026 01:00:32 +0000
asID:                     397332
IP address blocks:        23.90.88.0/22 maxlen: 22
                          45.115.204.0/22 maxlen: 22
                          75.119.180.0/22 maxlen: 22
                          152.228.36.0/22 maxlen: 22
                          168.203.12.0/22 maxlen: 22
                          2602:fdfa::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e2b04e47-5052-4735-8ac7-6c3f429b939a/e2b04e47-5052-4735-8ac7-6c3f429b939a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e2b04e47-5052-4735-8ac7-6c3f429b939a/e2b04e47-5052-4735-8ac7-6c3f429b939a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e2b04e47-5052-4735-8ac7-6c3f429b939a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:23:7a:72:09:e8:5e:f1:70:c7:8e:99:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e2b04e47-5052-4735-8ac7-6c3f429b939a
        Validity
            Not Before: Mar 12 01:00:32 2026 GMT
            Not After : Jun 10 01:00:32 2026 GMT
        Subject: CN=2ad15be9-749a-4143-a3e9-92b8c1b61a4f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:d0:71:81:a6:7b:09:a0:c9:32:05:7a:2b:c7:
                    41:43:a7:89:db:10:c2:d7:4d:5e:03:d3:b1:eb:5c:
                    4a:1e:e6:89:3a:dd:c3:6c:0b:0a:19:32:1f:6e:11:
                    8d:10:8d:0a:e6:6d:3c:21:57:67:bb:0a:6f:bb:ac:
                    d4:ee:f5:c5:4e:44:77:c8:39:fd:5f:44:7d:88:79:
                    de:03:02:28:10:6a:47:59:72:ae:f3:2b:13:f5:d7:
                    1b:c0:2f:8d:47:7a:9b:9c:14:b0:c5:da:e6:76:f9:
                    54:5e:11:c6:5a:66:81:23:fc:a5:91:ef:c4:5c:5e:
                    9c:a1:99:e4:83:4e:48:25:0a:b1:58:71:38:84:39:
                    7e:74:f1:3a:5f:c5:11:65:14:14:22:7a:c6:a8:05:
                    3c:1b:87:d0:d0:a5:60:a1:78:4e:36:37:fe:e4:90:
                    fe:58:25:fc:9f:7c:06:44:92:05:5f:1c:da:eb:65:
                    8f:b5:e8:64:b1:96:72:85:d5:c4:a0:1f:f7:d6:a3:
                    88:e4:6b:a9:ad:53:ab:f0:d4:18:2b:7a:a0:cb:8a:
                    c0:41:19:17:9c:e4:76:c0:24:e7:48:74:22:1d:b1:
                    bc:42:e0:0a:5d:a2:b5:6f:01:62:05:61:3b:af:33:
                    bf:fc:17:2e:3b:0c:98:af:47:78:fe:21:da:c6:42:
                    da:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:63:A6:C3:44:89:FC:02:8C:04:9C:39:DD:2C:F6:9B:62:8F:98:C0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e2b04e47-5052-4735-8ac7-6c3f429b939a/ec82f193-b8be-335f-bdac-a5d0ba8df2d7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e2b04e47-5052-4735-8ac7-6c3f429b939a/e2b04e47-5052-4735-8ac7-6c3f429b939a.crl

            X509v3 Authority Key Identifier:
                keyid:FF:44:F9:53:6E:FE:5B:AF:C1:37:8B:F1:9A:9E:C6:3B:66:69:69:A3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e2b04e47-5052-4735-8ac7-6c3f429b939a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.90.88.0/22
                  45.115.204.0/22
                  75.119.180.0/22
                  152.228.36.0/22
                  168.203.12.0/22
                IPv6:
                  2602:fdfa::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2c:fc:49:a7:23:84:2a:8f:0c:19:c1:25:97:bf:00:97:1e:97:
         02:b3:f4:1a:24:ca:ae:1c:98:4f:29:79:c7:72:d4:ca:65:ca:
         b6:de:ae:7d:93:66:00:dc:74:7a:70:ab:8c:2d:fa:4c:bd:e7:
         a4:02:6c:b3:9d:cd:47:54:cb:5b:81:fc:ec:01:c5:7e:f0:19:
         77:f8:7e:4d:30:b7:fe:a0:1c:c2:82:ff:85:ab:37:ff:aa:94:
         7f:19:2a:79:41:4b:07:1b:07:40:d4:19:ac:e6:f1:3d:32:24:
         bd:5d:dc:e1:ae:51:f5:ed:c9:e0:e7:01:d8:a2:9a:ad:d5:e1:
         14:56:f2:38:bb:95:76:93:25:f0:31:28:bf:95:64:12:87:fd:
         a4:da:85:49:5f:12:33:41:c3:93:e0:31:28:04:98:6e:1a:10:
         13:2c:c6:6c:ad:0e:5b:30:c7:9b:2b:99:d7:4d:39:0c:03:b3:
         c7:e9:ed:eb:0c:f6:32:c7:49:19:60:c6:54:77:c4:cf:42:03:
         6a:5b:73:ac:93:a4:92:02:d2:b6:2a:76:53:49:1a:86:2b:3c:
         c0:77:32:23:9a:24:6e:eb:b3:8d:81:c1:fb:7f:c5:a1:5e:c7:
         4d:a9:ad:00:69:3b:36:c2:8d:bd:8a:6e:90:02:52:cc:c6:4f:
         15:64:20:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 10:14:03 2026 by rpki-client