Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a062a219-9ee8-48a3-897a-8410b6da94a1/a3abfaf3-64a7-328a-ad03-ba37201c413d.roa
File:                     a3abfaf3-64a7-328a-ad03-ba37201c413d.roa (raw, json)
Hash identifier:          wKcvffHSGEvSRePmO1exJ0ad+jAwd1UmcFTb6NgKkwk=
Subject key identifier:   D4:49:90:63:57:A6:8C:3C:24:BD:F9:13:81:4A:FD:70:76:33:3A:A8
Certificate issuer:       /CN=a062a219-9ee8-48a3-897a-8410b6da94a1
Certificate serial:       010D0C9F4328584DAAE0241B0382F86C4625E3C0
Authority key identifier: 14:28:27:66:05:9D:24:A0:B4:F2:88:0F:EF:A9:EC:E0:E9:6E:86:18
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a062a219-9ee8-48a3-897a-8410b6da94a1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a062a219-9ee8-48a3-897a-8410b6da94a1/a3abfaf3-64a7-328a-ad03-ba37201c413d.roa
Signing time:             Wed 29 Apr 2026 13:00:31 +0000
ROA not before:           Wed 29 Apr 2026 13:00:31 +0000
ROA not after:            Tue 28 Jul 2026 13:00:31 +0000
asID:                     803
IP address blocks:        64.110.192.0/18 maxlen: 18
                          64.201.192.0/19 maxlen: 19
                          67.225.0.0/17 maxlen: 17
                          68.69.192.0/19 maxlen: 19
                          69.11.0.0/17 maxlen: 17
                          71.17.0.0/16 maxlen: 16
                          74.113.12.0/22 maxlen: 22
                          2604:1e80::/32 maxlen: 32
                          2607:f4a8::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a062a219-9ee8-48a3-897a-8410b6da94a1/a062a219-9ee8-48a3-897a-8410b6da94a1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a062a219-9ee8-48a3-897a-8410b6da94a1/a062a219-9ee8-48a3-897a-8410b6da94a1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a062a219-9ee8-48a3-897a-8410b6da94a1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:aa:e0:24:1b:03:82:f8:6c:46:25:e3:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a062a219-9ee8-48a3-897a-8410b6da94a1
        Validity
            Not Before: Apr 29 13:00:31 2026 GMT
            Not After : Jul 28 13:00:31 2026 GMT
        Subject: CN=fb2cd907-d107-4fa1-b86b-82b3e4435198
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:f5:50:da:79:21:53:c4:84:c7:e8:f3:d1:ff:
                    0a:67:b5:39:a9:f0:18:e2:fc:78:86:ef:60:10:8f:
                    29:4b:0f:43:44:db:ae:83:aa:2d:39:b4:7f:78:95:
                    75:45:74:53:af:e0:6d:76:62:8e:ee:09:28:25:4a:
                    89:1f:4c:22:19:79:cc:d4:35:94:5b:7e:35:0a:3f:
                    f0:de:71:a9:00:61:9e:53:e6:c7:45:f7:f6:e3:e5:
                    23:ff:9a:01:42:2a:da:a9:96:48:f5:a5:e2:31:81:
                    c1:b5:ee:0a:01:b8:e0:0d:80:4f:08:b5:71:46:e1:
                    28:25:55:75:ee:a9:21:ee:ec:bb:df:01:cb:40:55:
                    00:1a:88:e0:15:39:dc:78:0c:7a:09:46:96:4c:fc:
                    7f:f9:5f:4c:6a:d6:4b:60:df:7f:ef:19:f5:fd:48:
                    fe:a1:1e:9e:85:0d:e3:22:ba:b5:8b:88:d0:ff:58:
                    80:a5:7f:10:d1:37:69:42:cf:a8:17:19:f6:72:51:
                    d1:06:17:57:eb:a1:c6:32:9c:83:7b:be:39:52:3b:
                    0e:03:3d:3d:9e:e9:98:33:50:8a:7c:43:de:2e:e8:
                    84:7f:be:ce:95:3a:bf:c3:3f:22:17:92:79:44:69:
                    b8:e1:79:6d:9b:92:68:3b:39:48:71:70:4b:a6:b0:
                    a4:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:49:90:63:57:A6:8C:3C:24:BD:F9:13:81:4A:FD:70:76:33:3A:A8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a062a219-9ee8-48a3-897a-8410b6da94a1/a3abfaf3-64a7-328a-ad03-ba37201c413d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a062a219-9ee8-48a3-897a-8410b6da94a1/a062a219-9ee8-48a3-897a-8410b6da94a1.crl

            X509v3 Authority Key Identifier:
                keyid:14:28:27:66:05:9D:24:A0:B4:F2:88:0F:EF:A9:EC:E0:E9:6E:86:18

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a062a219-9ee8-48a3-897a-8410b6da94a1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.110.192.0/18
                  64.201.192.0/19
                  67.225.0.0/17
                  68.69.192.0/19
                  69.11.0.0/17
                  71.17.0.0/16
                  74.113.12.0/22
                IPv6:
                  2604:1e80::/32
                  2607:f4a8::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         58:ef:ba:0a:03:c5:0f:c9:1a:66:ff:85:e4:ef:c6:4c:3a:1f:
         7b:8d:4b:31:84:58:23:2d:24:b6:51:2b:62:90:c5:ea:36:7b:
         75:39:eb:f0:72:9a:62:49:ad:9a:b9:64:27:7f:3b:9d:0f:a0:
         d9:e6:f4:83:3d:3d:ed:29:6d:00:fe:83:4c:60:87:01:4b:94:
         94:d3:f0:50:55:58:b7:4a:c3:22:b3:7f:76:9c:3b:a0:33:b0:
         f9:6d:7e:af:cd:02:c9:f8:ad:03:fe:ac:29:1e:4f:7b:cb:ff:
         fe:c2:91:23:07:ef:7a:bf:cd:98:3f:30:b2:0b:a3:2b:9e:3e:
         eb:2c:4f:fc:4e:de:6f:87:18:2f:db:82:90:d8:12:7a:f8:be:
         02:41:83:97:8a:40:c6:ff:27:87:e2:1d:72:be:7b:68:68:20:
         0b:14:76:22:78:ff:f3:d8:ed:42:3e:a3:74:2a:fc:3a:a6:10:
         d1:d8:90:d1:27:1c:ec:e7:c7:4b:5c:80:65:04:ca:28:64:08:
         d3:cb:f8:da:2b:9f:08:c6:0d:4d:bc:b6:20:b5:58:65:63:fe:
         f9:e7:8d:56:a4:e8:56:3d:7d:d5:73:5d:90:33:4e:1d:06:8d:
         4a:0a:2d:be:ef:0f:fa:d5:07:db:13:09:16:66:a8:10:f6:a9:
         58:e3:4a:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 10:02:49 2026 by rpki-client