Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/87a7a98d-6ed8-48cc-953b-32292e94edde/e5ba450e-22a7-3fa3-9c36-a634b08a7158.roa
File:                     e5ba450e-22a7-3fa3-9c36-a634b08a7158.roa (raw, json)
Hash identifier:          O7lyNMYJAK4C03/nVWwDGldo/MH7NAgKKkGyv1W8FS4=
Subject key identifier:   81:BD:84:C4:44:E1:0A:F9:91:9B:A9:DB:6C:92:10:D3:91:DE:39:58
Certificate issuer:       /CN=87a7a98d-6ed8-48cc-953b-32292e94edde
Certificate serial:       010D0C9F4328584DA58FED343BBADA7A4CCA6380
Authority key identifier: B3:48:FE:63:A1:FE:47:57:64:FF:44:53:06:55:C0:57:45:25:DF:CD
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/87a7a98d-6ed8-48cc-953b-32292e94edde.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/87a7a98d-6ed8-48cc-953b-32292e94edde/e5ba450e-22a7-3fa3-9c36-a634b08a7158.roa
Signing time:             Mon 27 Apr 2026 15:19:57 +0000
ROA not before:           Mon 27 Apr 2026 15:19:57 +0000
ROA not after:            Thu 04 Jun 2026 13:00:40 +0000
asID:                     53830
IP address blocks:        74.123.84.0/22 maxlen: 24
                          97.64.0.0/23 maxlen: 24
                          162.251.88.0/22 maxlen: 24
                          192.81.64.0/23 maxlen: 24
                          192.135.200.0/22 maxlen: 24
                          192.199.178.0/23 maxlen: 24
                          192.234.255.0/24 maxlen: 24
                          199.66.132.0/22 maxlen: 24
                          199.119.104.0/21 maxlen: 24
                          199.188.152.0/22 maxlen: 24
                          204.13.180.0/22 maxlen: 24
                          208.68.132.0/22 maxlen: 24
                          216.71.190.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/87a7a98d-6ed8-48cc-953b-32292e94edde/87a7a98d-6ed8-48cc-953b-32292e94edde.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/87a7a98d-6ed8-48cc-953b-32292e94edde/87a7a98d-6ed8-48cc-953b-32292e94edde.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/87a7a98d-6ed8-48cc-953b-32292e94edde.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:a5:8f:ed:34:3b:ba:da:7a:4c:ca:63:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=87a7a98d-6ed8-48cc-953b-32292e94edde
        Validity
            Not Before: Apr 27 15:19:57 2026 GMT
            Not After : Jun  4 13:00:40 2026 GMT
        Subject: CN=c268c07c-a9c2-4dfb-931b-d4320fdfe8a9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:6b:ed:10:ba:92:79:69:4e:71:47:e9:e5:23:
                    fb:67:46:ea:18:a2:ae:b5:0c:d8:26:81:6d:5b:21:
                    15:16:59:d4:6d:bf:42:71:91:f1:1a:f6:fc:fa:b7:
                    4b:f4:ff:a5:a7:67:bb:ee:34:2e:60:90:71:e8:e6:
                    1a:e9:da:6b:ca:59:a0:1b:e7:32:53:19:bb:e5:bd:
                    9b:06:3b:ab:3e:29:b6:f9:f9:48:01:be:b7:26:75:
                    05:01:bd:31:0c:7a:dc:91:94:fd:fc:ea:0b:82:8c:
                    43:4e:e4:20:40:3f:61:3b:91:09:f6:aa:e7:60:65:
                    b9:0a:f9:71:d1:b6:04:d1:32:2a:b5:e8:44:84:a6:
                    c0:0d:2b:0b:46:bb:59:fe:d9:5b:03:ed:e8:d2:eb:
                    11:e0:64:11:3a:f9:d9:e6:45:fa:2d:9c:06:db:6d:
                    6d:e8:90:46:0b:8a:22:5e:d6:9c:07:46:a4:25:77:
                    c1:15:61:58:49:98:0e:11:83:cd:80:95:f6:24:b2:
                    e4:50:c8:22:22:bb:d3:98:80:ca:96:da:5d:bb:73:
                    f9:b8:c6:2d:f6:d1:32:bb:60:61:ca:4c:69:4b:51:
                    4c:63:41:8c:9d:74:d4:e5:18:53:9f:97:7b:ab:38:
                    58:8e:b7:e4:b0:a6:e7:24:24:fa:e2:35:1b:8a:ec:
                    98:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:BD:84:C4:44:E1:0A:F9:91:9B:A9:DB:6C:92:10:D3:91:DE:39:58
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/87a7a98d-6ed8-48cc-953b-32292e94edde/e5ba450e-22a7-3fa3-9c36-a634b08a7158.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/87a7a98d-6ed8-48cc-953b-32292e94edde/87a7a98d-6ed8-48cc-953b-32292e94edde.crl

            X509v3 Authority Key Identifier:
                keyid:B3:48:FE:63:A1:FE:47:57:64:FF:44:53:06:55:C0:57:45:25:DF:CD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/87a7a98d-6ed8-48cc-953b-32292e94edde.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.123.84.0/22
                  97.64.0.0/23
                  162.251.88.0/22
                  192.81.64.0/23
                  192.135.200.0/22
                  192.199.178.0/23
                  192.234.255.0/24
                  199.66.132.0/22
                  199.119.104.0/21
                  199.188.152.0/22
                  204.13.180.0/22
                  208.68.132.0/22
                  216.71.190.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2d:2d:0a:3e:38:16:7f:cf:51:a6:a3:6f:51:ef:f2:a6:b7:71:
         8a:85:bd:c3:b3:7b:64:d0:b7:74:e1:af:e1:1e:93:57:4d:5f:
         39:fa:b6:2c:64:8f:b3:c3:31:e0:f2:57:f2:ee:e6:ca:4e:4d:
         da:b8:e6:ed:49:59:41:56:35:19:2d:61:d2:8c:74:29:f2:2f:
         ef:b6:2d:03:bf:3e:77:b9:cd:4e:42:74:82:a7:19:f5:77:7c:
         d2:5e:49:01:cd:44:ec:81:d4:6a:05:eb:e4:ec:6a:7b:9b:84:
         c4:81:7f:08:00:5e:5c:64:f2:46:08:2e:24:8a:d8:d4:2e:98:
         5b:6e:48:da:26:56:77:49:f3:0b:59:47:df:82:03:6f:38:7c:
         d1:5e:02:26:60:dd:e6:0c:8b:a1:eb:06:18:4d:34:73:4e:8e:
         68:55:09:75:fb:f1:27:fa:06:a4:b5:df:e0:79:28:d8:03:1c:
         da:ee:ef:11:37:95:15:0d:b6:bf:ba:a2:21:11:ad:56:25:eb:
         eb:d9:81:4e:72:c6:81:02:f1:d3:5b:66:81:0a:81:df:b4:c4:
         74:e8:32:7b:47:7d:10:44:fa:6a:56:ef:68:96:96:2c:5b:d2:
         6a:be:af:31:04:37:56:35:1c:b5:61:52:6f:69:45:e0:e4:0b:
         6f:08:ed:78
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed May 13 08:21:36 2026 by rpki-client