Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/63817736-7e5e-4740-8ee1-ac6f2317f08d/ec051f15-d646-3325-aabb-bdf581238792.roa
File:                     ec051f15-d646-3325-aabb-bdf581238792.roa (raw, json)
Hash identifier:          tQhZMBvalKy1efHhIFtN+r3b9VMg3/lxWzDR+C0Eq1w=
Subject key identifier:   24:A4:40:44:57:7F:1B:09:ED:53:28:4F:D0:60:3A:DA:5C:6A:5E:A6
Certificate issuer:       /CN=63817736-7e5e-4740-8ee1-ac6f2317f08d
Certificate serial:       010D0C9F4328584CCD0CA54BC4E0693A0F661280
Authority key identifier: B5:F4:FF:81:CB:E0:A0:26:F5:12:35:A7:B3:44:73:D0:89:4F:FC:77
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/63817736-7e5e-4740-8ee1-ac6f2317f08d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/63817736-7e5e-4740-8ee1-ac6f2317f08d/ec051f15-d646-3325-aabb-bdf581238792.roa
Signing time:             Mon 09 Feb 2026 02:00:31 +0000
ROA not before:           Mon 09 Feb 2026 02:00:31 +0000
ROA not after:            Sun 10 May 2026 01:00:31 +0000
asID:                     20473
IP address blocks:        107.191.32.0/19 maxlen: 32
                          108.61.0.0/16 maxlen: 32
                          140.82.0.0/18 maxlen: 32
                          144.202.0.0/17 maxlen: 32
                          149.28.8.0/21 maxlen: 32
                          149.28.16.0/20 maxlen: 32
                          149.28.32.0/19 maxlen: 32
                          149.28.64.0/18 maxlen: 32
                          149.28.128.0/17 maxlen: 32
                          149.248.0.0/18 maxlen: 32
                          173.199.64.0/18 maxlen: 32
                          198.13.32.0/19 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/63817736-7e5e-4740-8ee1-ac6f2317f08d/63817736-7e5e-4740-8ee1-ac6f2317f08d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/63817736-7e5e-4740-8ee1-ac6f2317f08d/63817736-7e5e-4740-8ee1-ac6f2317f08d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/63817736-7e5e-4740-8ee1-ac6f2317f08d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:cd:0c:a5:4b:c4:e0:69:3a:0f:66:12:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63817736-7e5e-4740-8ee1-ac6f2317f08d
        Validity
            Not Before: Feb  9 02:00:31 2026 GMT
            Not After : May 10 01:00:31 2026 GMT
        Subject: CN=83c4dea6-9233-4d6d-ae9d-e6b783c68259
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:84:6a:69:63:a7:8c:a2:fd:db:b6:f8:83:14:
                    af:da:58:99:c7:84:54:97:34:01:ac:1c:8b:7b:fe:
                    35:6a:4f:1e:d6:3c:3b:d2:a8:24:51:9b:dc:c9:15:
                    12:7c:ac:47:a8:45:2a:c5:b9:e9:9d:88:67:c2:8c:
                    63:a6:c3:b1:5d:a1:5b:d6:6c:2d:8a:40:0f:ef:0b:
                    bb:ee:57:58:c3:a8:ed:85:78:42:bb:89:04:42:fc:
                    20:62:af:9e:9c:b9:46:cc:e9:87:14:5f:21:4a:b7:
                    2c:41:4d:55:3e:b2:79:eb:31:56:b4:69:32:06:86:
                    61:c5:5e:8d:91:54:75:17:bd:6f:13:f6:2c:c1:8c:
                    f7:b5:7a:c3:17:f1:e2:63:61:51:f6:30:ca:04:77:
                    31:b1:be:e1:ff:3b:e8:69:84:b9:08:1a:2d:bd:24:
                    ce:8f:12:ee:27:bc:b1:d4:1c:2c:27:74:76:48:e8:
                    c9:1a:26:83:ad:12:14:22:4f:86:0a:3f:62:79:a3:
                    c3:60:bc:2c:85:04:28:bf:c1:8b:7a:d2:fb:42:48:
                    2f:48:b8:79:8b:99:9d:ed:52:43:8c:da:b0:c5:b7:
                    09:c8:cc:02:bd:08:e3:7c:8a:6f:b3:f0:9e:b4:7b:
                    a2:9c:a7:30:a6:6b:31:f2:55:21:c9:87:3c:e4:38:
                    2a:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:A4:40:44:57:7F:1B:09:ED:53:28:4F:D0:60:3A:DA:5C:6A:5E:A6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/63817736-7e5e-4740-8ee1-ac6f2317f08d/ec051f15-d646-3325-aabb-bdf581238792.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/63817736-7e5e-4740-8ee1-ac6f2317f08d/63817736-7e5e-4740-8ee1-ac6f2317f08d.crl

            X509v3 Authority Key Identifier:
                keyid:B5:F4:FF:81:CB:E0:A0:26:F5:12:35:A7:B3:44:73:D0:89:4F:FC:77

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/63817736-7e5e-4740-8ee1-ac6f2317f08d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  107.191.32.0/19
                  108.61.0.0/16
                  140.82.0.0/18
                  144.202.0.0/17
                  149.28.8.0-149.28.255.255
                  149.248.0.0/18
                  173.199.64.0/18
                  198.13.32.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3d:38:d7:84:94:9b:41:95:42:b4:29:3d:c3:92:1f:f2:cb:a6:
         9f:d5:26:25:95:5b:fb:16:e2:ec:57:52:56:9e:29:83:9f:1c:
         21:25:e4:06:f9:58:c5:d0:e5:10:9e:62:15:6e:c5:1c:bf:63:
         b8:2f:9d:4a:d0:68:04:6a:55:7d:26:90:01:dd:0c:62:ea:cb:
         9c:43:0a:ba:90:7d:c7:6b:8d:da:a4:79:ac:9e:fa:8b:72:1f:
         9d:6e:22:b9:35:81:3a:22:c6:8f:3c:1f:d8:0f:2a:e8:db:a0:
         10:72:1e:a8:2a:79:53:7c:15:4f:9a:52:68:74:2a:c6:62:59:
         50:9b:ae:d9:c5:63:ce:37:d3:34:42:e5:3b:c0:3d:40:7e:13:
         a5:66:f9:e0:29:10:e9:5c:2a:19:89:ca:51:6a:a2:10:83:a1:
         dc:df:7b:e1:21:5c:2d:89:9d:f8:76:c1:9e:03:47:95:98:e9:
         51:a4:e7:ef:22:21:5d:ef:39:25:98:c2:09:43:58:48:d3:2c:
         43:b4:b9:7f:8d:fe:bc:07:e5:8d:6d:af:b7:27:12:00:00:2c:
         34:f8:1c:9c:1a:20:0d:16:63:12:8e:ed:29:22:64:46:1f:4e:
         8f:c4:01:ce:4d:8c:c9:70:d9:36:db:02:b1:9c:4f:3b:c8:1b:
         ac:37:5a:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 23:10:04 2026 by rpki-client