Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e4592d18-89a2-4b31-a14b-b5ea3eae2c4a/ac772392-4d48-3209-9774-c2c292191994.roa
File:                     ac772392-4d48-3209-9774-c2c292191994.roa (raw, json)
Hash identifier:          MDi2TzrWxeP3aX6Gc4HiBZfbxFVBfHbZuV35H99FZ9o=
Subject key identifier:   32:0C:19:E8:B6:6D:3A:3F:27:E3:41:3B:B6:F8:DC:FD:A0:0E:FE:CA
Certificate issuer:       /CN=e4592d18-89a2-4b31-a14b-b5ea3eae2c4a
Certificate serial:       010D0C9F4328584DF640A50F995F5901E0E2A2C0
Authority key identifier: 87:5F:A2:FF:E5:93:3B:B5:16:DE:44:BF:B9:3E:AF:BF:FD:FD:59:85
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e4592d18-89a2-4b31-a14b-b5ea3eae2c4a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e4592d18-89a2-4b31-a14b-b5ea3eae2c4a/ac772392-4d48-3209-9774-c2c292191994.roa
Signing time:             Tue 26 May 2026 13:00:31 +0000
ROA not before:           Tue 26 May 2026 13:00:31 +0000
ROA not after:            Mon 24 Aug 2026 13:00:31 +0000
asID:                     53755
IP address blocks:        23.226.64.0/20 maxlen: 32
                          104.161.16.0/20 maxlen: 32
                          104.161.32.0/19 maxlen: 32
                          104.161.64.0/18 maxlen: 32
                          107.167.64.0/19 maxlen: 32
                          107.178.64.0/18 maxlen: 32
                          107.189.128.0/18 maxlen: 32
                          148.163.0.0/17 maxlen: 32
                          162.213.208.0/22 maxlen: 32
                          162.218.112.0/21 maxlen: 32
                          184.164.64.0/19 maxlen: 32
                          192.30.136.0/22 maxlen: 32
                          192.110.160.0/21 maxlen: 32
                          199.231.84.0/22 maxlen: 32
                          2604:6280::/32 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e4592d18-89a2-4b31-a14b-b5ea3eae2c4a/e4592d18-89a2-4b31-a14b-b5ea3eae2c4a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e4592d18-89a2-4b31-a14b-b5ea3eae2c4a/e4592d18-89a2-4b31-a14b-b5ea3eae2c4a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e4592d18-89a2-4b31-a14b-b5ea3eae2c4a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 16 Jun 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:f6:40:a5:0f:99:5f:59:01:e0:e2:a2:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e4592d18-89a2-4b31-a14b-b5ea3eae2c4a
        Validity
            Not Before: May 26 13:00:31 2026 GMT
            Not After : Aug 24 13:00:31 2026 GMT
        Subject: CN=bd9fafd8-e3d4-4de7-a87a-88a14232f620
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:70:89:5d:94:a4:b6:34:03:fe:97:c7:5b:f3:
                    05:54:fb:5a:f5:90:8c:c0:58:8d:4e:e2:9a:ad:8e:
                    3e:92:97:c7:19:9f:5a:e8:18:78:56:d8:61:3c:68:
                    af:dd:8e:d2:fa:d4:48:49:77:07:56:0c:20:47:ec:
                    f7:5b:21:79:9a:19:93:5e:77:62:70:cc:e0:45:96:
                    c1:64:22:e4:0d:8c:40:25:18:19:10:ae:8f:1b:ef:
                    91:b0:dc:b9:b9:ae:7e:cc:91:98:e8:51:4f:73:66:
                    a8:3c:31:14:f4:63:5d:96:e7:c4:c6:11:fc:6c:8d:
                    49:3a:61:56:24:79:62:95:f4:f7:96:3d:02:1b:ba:
                    8b:e5:4d:a4:f1:77:df:36:97:c4:85:1e:ef:75:37:
                    e9:ce:dd:e4:f4:cf:3a:f4:0f:c7:b4:c5:ca:ca:28:
                    b6:b7:1b:fd:e8:4a:23:ec:28:69:60:a2:0c:d6:f4:
                    bf:aa:ea:5b:e2:95:8f:96:16:ca:fb:c3:42:f6:fb:
                    c5:5f:9a:3e:cf:4f:c9:bf:bb:8e:ae:57:e9:03:9c:
                    aa:2e:65:b9:a5:0a:f7:a7:0f:bb:7d:8b:0e:1c:81:
                    33:ec:1f:9a:27:4a:60:b9:77:c4:24:e2:d4:b1:38:
                    3c:e8:37:83:40:3c:06:7e:0c:5a:71:54:d5:79:2b:
                    83:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:0C:19:E8:B6:6D:3A:3F:27:E3:41:3B:B6:F8:DC:FD:A0:0E:FE:CA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e4592d18-89a2-4b31-a14b-b5ea3eae2c4a/ac772392-4d48-3209-9774-c2c292191994.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e4592d18-89a2-4b31-a14b-b5ea3eae2c4a/e4592d18-89a2-4b31-a14b-b5ea3eae2c4a.crl

            X509v3 Authority Key Identifier:
                keyid:87:5F:A2:FF:E5:93:3B:B5:16:DE:44:BF:B9:3E:AF:BF:FD:FD:59:85

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e4592d18-89a2-4b31-a14b-b5ea3eae2c4a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.226.64.0/20
                  104.161.16.0-104.161.127.255
                  107.167.64.0/19
                  107.178.64.0/18
                  107.189.128.0/18
                  148.163.0.0/17
                  162.213.208.0/22
                  162.218.112.0/21
                  184.164.64.0/19
                  192.30.136.0/22
                  192.110.160.0/21
                  199.231.84.0/22
                IPv6:
                  2604:6280::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         aa:9d:84:c5:1c:b2:53:e6:80:5c:62:85:4e:12:c8:14:05:d8:
         11:f5:1a:09:52:16:d5:51:9b:af:55:53:ed:4f:ea:1b:7a:c4:
         ea:2a:21:a4:b1:67:8b:c7:3f:ad:b8:bf:63:86:2b:96:d7:a8:
         69:d2:18:9c:d5:dd:b6:75:d2:77:1c:db:2e:2f:1d:87:1f:98:
         62:96:74:45:aa:7f:08:f4:7b:79:ac:6d:54:ff:b7:fd:09:c9:
         ea:d1:d6:9e:5e:d4:13:0f:43:e4:95:b3:5d:cf:c6:70:cc:71:
         21:d3:45:36:90:0e:13:b1:e6:b4:0e:be:24:94:3c:37:12:79:
         cb:7d:cf:9c:c6:aa:93:b3:38:e7:cc:db:07:10:c6:36:a7:01:
         8e:a5:08:7d:55:24:fc:80:41:53:f9:a5:d8:77:e6:3f:9e:b0:
         cd:c4:b7:5e:39:df:4d:13:e2:71:c8:9c:e1:c3:2b:cc:02:5a:
         dc:71:39:b6:40:26:b8:1c:73:57:bf:f8:ce:c4:9b:24:d3:40:
         1f:cd:27:3b:e4:ff:1d:66:42:35:5e:2e:fe:4c:3b:94:9c:c3:
         ce:b1:53:01:45:98:b6:d7:05:ba:42:2c:46:88:e9:eb:0e:2a:
         d2:63:01:2c:e3:89:c3:30:ca:99:3d:4a:c0:57:fe:3c:8a:c1:
         f0:cb:f9:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 21:31:18 2026 by rpki-client