Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bb385b0b-5ada-48ff-9c34-3440a6550535/ed1edd96-e704-371d-bccf-ba9ebf84cddf.roa
File:                     ed1edd96-e704-371d-bccf-ba9ebf84cddf.roa (raw, json)
Hash identifier:          HONDAAJf7uQJp/ip5nL9+AtdP7g0nA/alQADVuVLih4=
Subject key identifier:   6E:A4:D5:EE:86:A2:BE:40:D1:A0:4A:65:4C:06:CD:B9:66:8A:D2:2A
Certificate issuer:       /CN=bb385b0b-5ada-48ff-9c34-3440a6550535
Certificate serial:       010D0C9F4328584E0C1ED070A4EE43340A3B7200
Authority key identifier: 20:46:74:1D:FD:78:9D:19:30:D4:B8:91:3B:3A:2A:90:05:19:39:51
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bb385b0b-5ada-48ff-9c34-3440a6550535.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bb385b0b-5ada-48ff-9c34-3440a6550535/ed1edd96-e704-371d-bccf-ba9ebf84cddf.roa
Signing time:             Wed 03 Jun 2026 09:00:13 +0000
ROA not before:           Wed 03 Jun 2026 09:00:13 +0000
ROA not after:            Tue 01 Sep 2026 09:00:13 +0000
asID:                     26337
IP address blocks:        162.210.70.0/23 maxlen: 24
                          162.222.225.0/24 maxlen: 24
                          162.222.226.0/23 maxlen: 24
                          162.251.80.0/22 maxlen: 24
                          162.251.84.0/23 maxlen: 24
                          199.79.62.0/23 maxlen: 24
                          204.11.58.0/23 maxlen: 24
                          207.174.212.0/22 maxlen: 24
                          208.91.198.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bb385b0b-5ada-48ff-9c34-3440a6550535/bb385b0b-5ada-48ff-9c34-3440a6550535.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bb385b0b-5ada-48ff-9c34-3440a6550535/bb385b0b-5ada-48ff-9c34-3440a6550535.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bb385b0b-5ada-48ff-9c34-3440a6550535.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 15 Jun 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:0c:1e:d0:70:a4:ee:43:34:0a:3b:72:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bb385b0b-5ada-48ff-9c34-3440a6550535
        Validity
            Not Before: Jun  3 09:00:13 2026 GMT
            Not After : Sep  1 09:00:13 2026 GMT
        Subject: CN=7e9ddae7-8c22-4895-99b8-144fe881617a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:7c:bd:ed:78:2d:8a:54:7e:b1:14:ed:9b:d7:
                    fe:48:0f:03:e4:5e:8e:00:68:1d:7d:59:82:60:99:
                    a1:c3:f9:eb:6d:9f:7b:64:69:91:af:64:8b:d2:8a:
                    c9:09:19:39:b0:2c:f8:52:1a:35:e9:28:7f:7e:16:
                    a0:79:54:e2:8f:3a:3e:46:27:f3:f9:9f:de:60:a2:
                    b3:d0:b4:cf:ca:ed:26:33:99:a9:67:9d:a8:87:c8:
                    20:ea:6c:fc:1b:8a:43:97:86:ad:97:de:dc:41:9e:
                    a0:b7:12:e2:76:6b:49:d6:33:f6:f8:37:95:30:39:
                    87:d8:22:30:97:83:4d:76:94:a4:25:13:0a:e9:63:
                    b1:a9:f2:49:42:22:a4:b4:bc:7e:75:8e:a9:11:ef:
                    16:77:ee:4c:c0:1d:74:ff:5c:78:84:0d:3b:ae:fa:
                    f8:18:c4:67:3f:ee:3f:45:4e:91:63:d4:1b:d8:8a:
                    64:b3:5a:82:a5:09:e7:4d:a4:83:d5:cc:68:04:49:
                    42:64:d8:11:b9:b9:ab:b6:d9:8a:56:09:ac:ef:20:
                    43:d7:e6:60:09:e3:b5:fc:73:58:ba:73:8e:02:18:
                    87:00:8d:3a:99:ad:ea:47:b6:99:99:29:e9:a7:6f:
                    b4:83:fc:1a:07:2f:dd:ca:11:97:e9:72:bf:55:1f:
                    63:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:A4:D5:EE:86:A2:BE:40:D1:A0:4A:65:4C:06:CD:B9:66:8A:D2:2A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bb385b0b-5ada-48ff-9c34-3440a6550535/ed1edd96-e704-371d-bccf-ba9ebf84cddf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bb385b0b-5ada-48ff-9c34-3440a6550535/bb385b0b-5ada-48ff-9c34-3440a6550535.crl

            X509v3 Authority Key Identifier:
                keyid:20:46:74:1D:FD:78:9D:19:30:D4:B8:91:3B:3A:2A:90:05:19:39:51

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bb385b0b-5ada-48ff-9c34-3440a6550535.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.210.70.0/23
                  162.222.225.0-162.222.227.255
                  162.251.80.0-162.251.85.255
                  199.79.62.0/23
                  204.11.58.0/23
                  207.174.212.0/22
                  208.91.198.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1c:31:31:d3:21:00:69:b3:03:68:47:72:95:59:0b:4f:82:bd:
         72:e6:9e:70:be:dc:3c:5b:24:8d:27:c9:b1:d7:7b:33:fa:60:
         3c:c0:a1:08:f8:36:8b:6c:7a:55:55:15:17:68:41:d1:68:b5:
         84:31:83:01:c7:87:85:db:53:d2:61:0d:e2:22:2a:ca:db:4b:
         6f:1a:7c:78:7a:36:80:55:68:12:d4:fc:1d:d6:71:7c:ac:35:
         94:ef:38:b0:b2:6d:fe:17:b8:47:62:82:02:34:7e:9f:cb:56:
         6e:a7:15:3b:ab:3e:74:f8:b1:b6:f4:c9:25:58:d7:20:7c:42:
         86:3e:c2:ac:9f:fa:c4:30:fa:14:bf:85:83:75:f1:c8:9a:5e:
         ec:00:08:d2:86:56:1f:e0:48:e2:76:2b:a7:11:fc:48:99:94:
         e3:89:f8:f7:0e:ed:f8:73:94:76:48:f1:21:3c:c6:7d:e3:eb:
         be:f7:b1:db:22:9c:40:53:8b:39:b4:d9:68:23:a7:fa:c7:8d:
         e2:fc:15:83:51:69:60:05:48:06:53:af:85:91:c1:03:94:19:
         b4:c0:d1:d2:53:0f:f3:b7:16:50:41:3b:1a:bd:4b:42:a3:a7:
         32:87:63:a8:4e:b4:66:94:ff:37:82:2f:8c:24:63:52:4a:ef:
         50:86:e0:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 03:03:21 2026 by rpki-client