Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/480e68d2-5883-4233-9f17-992a2ca71e2b/2c1c1bb6-2ab6-33ad-b7b1-ccc4cf4d0d78.roa
File:                     2c1c1bb6-2ab6-33ad-b7b1-ccc4cf4d0d78.roa (raw, json)
Hash identifier:          3wISjkepXsSPZwY8PMafHSMCdKwPrZLAz4+aX+vpwK0=
Subject key identifier:   3F:8B:77:6A:CE:99:30:D2:CC:42:EB:2F:E2:C2:8C:37:4B:C6:46:FC
Certificate issuer:       /CN=480e68d2-5883-4233-9f17-992a2ca71e2b
Certificate serial:       010D0C9F4328584EA786FFAABCA32B587106CD00
Authority key identifier: 26:9B:1E:68:03:C3:09:69:E3:8A:E5:95:A7:3F:33:33:66:8A:5F:0C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/480e68d2-5883-4233-9f17-992a2ca71e2b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/480e68d2-5883-4233-9f17-992a2ca71e2b/2c1c1bb6-2ab6-33ad-b7b1-ccc4cf4d0d78.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     19531
IP address blocks:        23.92.80.0/20 maxlen: 24
                          23.239.64.0/19 maxlen: 24
                          107.155.128.0/19 maxlen: 24
                          162.216.0.0/22 maxlen: 24
                          162.216.152.0/21 maxlen: 24
                          184.175.192.0/18 maxlen: 24
                          199.48.160.0/21 maxlen: 24
                          208.84.132.0/22 maxlen: 24
                          2604:4600::/28 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/480e68d2-5883-4233-9f17-992a2ca71e2b/480e68d2-5883-4233-9f17-992a2ca71e2b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/480e68d2-5883-4233-9f17-992a2ca71e2b/480e68d2-5883-4233-9f17-992a2ca71e2b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/480e68d2-5883-4233-9f17-992a2ca71e2b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:86:ff:aa:bc:a3:2b:58:71:06:cd:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=480e68d2-5883-4233-9f17-992a2ca71e2b
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=6718b2b3-9bd2-446c-8686-8e5be5d5d94f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:3f:96:ed:44:44:4d:11:66:6d:69:b4:77:1e:
                    1a:c4:44:0a:19:f8:15:3c:b7:45:fd:d2:c2:ff:59:
                    c9:0c:b8:03:e3:c8:c1:fb:2d:fd:da:6b:89:80:b5:
                    fb:1a:1f:74:8d:54:52:e6:ee:bf:5d:b5:3b:30:0e:
                    42:d2:48:ed:69:4b:c4:68:0f:11:cb:49:a6:55:16:
                    9c:5b:c6:15:bd:97:03:9b:61:18:e0:10:a4:d2:c0:
                    f0:34:90:2f:eb:80:ff:44:61:4e:c2:46:d1:69:6d:
                    12:5d:bd:ad:e8:57:dd:e9:f8:9b:7d:22:dc:79:bb:
                    05:bc:cc:e2:f2:2d:27:67:c9:d2:f7:69:0d:1f:9e:
                    a7:6f:b9:65:2b:55:cf:eb:75:6b:ed:25:8a:66:f2:
                    4d:60:ec:9c:75:ae:c5:47:ff:dc:a0:2d:9e:ed:8c:
                    d2:58:a8:c1:62:2b:91:f5:d2:97:60:46:7a:b2:2a:
                    d6:f9:ac:05:07:96:ec:5c:45:f3:35:2b:d8:6b:e0:
                    d2:32:27:81:34:b6:68:7a:30:6a:30:da:10:cc:47:
                    7f:66:36:ca:98:dc:58:12:a7:72:f1:3e:41:b4:e8:
                    02:df:3c:4d:ab:ad:3a:fe:35:30:9e:b8:78:32:74:
                    d9:e7:cd:00:f5:7a:c3:c0:6b:c0:47:92:6b:bb:bc:
                    8f:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:8B:77:6A:CE:99:30:D2:CC:42:EB:2F:E2:C2:8C:37:4B:C6:46:FC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/480e68d2-5883-4233-9f17-992a2ca71e2b/2c1c1bb6-2ab6-33ad-b7b1-ccc4cf4d0d78.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/480e68d2-5883-4233-9f17-992a2ca71e2b/480e68d2-5883-4233-9f17-992a2ca71e2b.crl

            X509v3 Authority Key Identifier:
                keyid:26:9B:1E:68:03:C3:09:69:E3:8A:E5:95:A7:3F:33:33:66:8A:5F:0C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/480e68d2-5883-4233-9f17-992a2ca71e2b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.92.80.0/20
                  23.239.64.0/19
                  107.155.128.0/19
                  162.216.0.0/22
                  162.216.152.0/21
                  184.175.192.0/18
                  199.48.160.0/21
                  208.84.132.0/22
                IPv6:
                  2604:4600::/28

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         e9:8d:9d:69:88:83:58:9f:db:1b:1b:52:22:82:e0:e7:40:01:
         ca:8c:a4:14:c5:71:8c:9d:3e:2c:05:f4:e1:62:98:93:d9:ba:
         e5:35:d0:60:99:0b:51:8d:7f:f8:57:2d:7b:03:c5:f9:25:61:
         51:3f:ee:fb:9e:48:d9:00:93:bd:eb:34:ab:9c:99:0e:ff:7a:
         a0:9c:ae:48:b4:28:a3:94:3a:95:34:0c:7c:97:54:d2:0a:d0:
         6d:29:12:09:8a:e4:7a:75:9d:64:df:f6:a7:3b:55:85:fa:60:
         81:eb:a2:bd:d9:74:e2:37:56:be:99:36:00:44:e9:d3:eb:53:
         63:31:09:58:5c:c3:0a:18:8f:4e:8d:03:92:90:74:75:18:86:
         38:f3:eb:1a:f6:b4:3a:0f:6a:df:65:58:0b:f7:fe:45:91:30:
         c8:34:36:9a:35:cc:f8:f3:64:83:b5:b8:d9:aa:e7:44:d2:25:
         94:12:22:27:35:6e:60:a3:76:be:37:4b:6e:84:9e:71:d1:ce:
         79:7f:af:ca:9e:04:8c:e6:78:03:01:5b:14:c7:c5:f0:47:57:
         08:35:5e:b2:fd:3e:52:8e:05:64:9a:c8:0c:d1:6b:84:d3:f3:
         55:76:d6:7b:b4:cf:24:af:66:3c:2f:0e:f7:c8:03:1f:0a:5a:
         8a:43:35:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 10:09:29 2026 by rpki-client