Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f/2f128b9d-1500-3392-9a71-877eea156886.roa
File:                     2f128b9d-1500-3392-9a71-877eea156886.roa (raw, json)
Hash identifier:          SZv6V3oGD/aXObIZTx4H2nGRM13qY0kdIP0SS3qElQA=
Subject key identifier:   53:12:BA:1F:0F:3E:60:19:00:25:03:D9:20:63:55:0D:78:D7:4D:E0
Certificate issuer:       /CN=9ed5ce80-224e-46ab-94f1-1afce8ccf13f
Certificate serial:       010D0C9F4328584E9BE5108B45E22863286212FE
Authority key identifier: 38:1D:9F:A6:BA:7C:C1:A8:44:AE:09:FE:5A:00:96:9D:3B:FC:E1:0F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f/2f128b9d-1500-3392-9a71-877eea156886.roa
Signing time:             Fri 24 Jul 2026 21:00:12 +0000
ROA not before:           Fri 24 Jul 2026 21:00:12 +0000
ROA not after:            Thu 22 Oct 2026 21:00:12 +0000
asID:                     26496
IP address blocks:        64.13.192.0/18 maxlen: 24
                          64.207.128.0/18 maxlen: 24
                          70.32.64.0/18 maxlen: 24
                          72.10.32.0/19 maxlen: 24
                          72.47.192.0/18 maxlen: 24
                          205.186.128.0/18 maxlen: 24
                          216.70.64.0/18 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f/9ed5ce80-224e-46ab-94f1-1afce8ccf13f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f/9ed5ce80-224e-46ab-94f1-1afce8ccf13f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:9b:e5:10:8b:45:e2:28:63:28:62:12:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9ed5ce80-224e-46ab-94f1-1afce8ccf13f
        Validity
            Not Before: Jul 24 21:00:12 2026 GMT
            Not After : Oct 22 21:00:12 2026 GMT
        Subject: CN=322b1b42-9fb2-4ff8-84f5-bcd113402eef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:f3:9c:c9:67:1d:f5:f1:a7:41:69:63:f2:07:
                    80:a0:83:c8:7c:14:67:55:a2:cf:5b:bd:f5:96:47:
                    a0:21:68:cd:dd:3f:fa:03:fc:c0:e3:0c:9e:eb:45:
                    33:ae:0f:77:9a:2a:18:72:88:11:0d:80:4f:23:f6:
                    39:62:33:94:fa:40:c9:43:80:88:63:c3:df:0f:6c:
                    0c:65:6f:fd:36:39:f7:7a:a1:e7:8c:5b:ec:e3:f7:
                    2e:4b:d7:a4:6e:52:d3:9f:20:25:94:b1:71:54:6b:
                    f5:ce:50:13:71:37:60:52:e3:b1:25:c0:e4:d8:f8:
                    f6:e3:5e:a9:f1:b3:77:54:9f:e7:b5:3a:43:83:99:
                    35:5b:9e:28:5b:b9:a1:e6:a6:3e:d4:b6:33:e4:80:
                    51:fc:62:c4:d0:cb:43:79:3c:2c:c0:82:2c:3d:11:
                    86:c5:f8:aa:bb:52:08:3e:43:91:c1:20:6c:c7:db:
                    ca:f0:fa:be:de:51:6c:d4:39:8c:fd:99:e8:11:15:
                    f6:a2:92:12:fb:65:d5:35:90:7a:23:fc:99:b7:32:
                    69:6c:d2:61:3e:d6:bd:1d:9a:a0:87:80:35:15:53:
                    e1:47:49:f5:41:2d:d9:8d:14:68:fa:31:34:e5:25:
                    9d:97:db:f0:cd:12:a2:c0:0b:e7:f8:45:9b:0c:0d:
                    50:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:12:BA:1F:0F:3E:60:19:00:25:03:D9:20:63:55:0D:78:D7:4D:E0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f/2f128b9d-1500-3392-9a71-877eea156886.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f/9ed5ce80-224e-46ab-94f1-1afce8ccf13f.crl

            X509v3 Authority Key Identifier:
                keyid:38:1D:9F:A6:BA:7C:C1:A8:44:AE:09:FE:5A:00:96:9D:3B:FC:E1:0F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.13.192.0/18
                  64.207.128.0/18
                  70.32.64.0/18
                  72.10.32.0/19
                  72.47.192.0/18
                  205.186.128.0/18
                  216.70.64.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         46:94:92:21:77:c0:12:79:2a:20:8c:0c:61:04:19:47:0f:b5:
         71:0f:8c:94:8e:fe:73:fd:64:4d:10:f5:5a:d5:77:9e:dd:7f:
         5d:31:ca:6e:8d:1f:6a:97:f0:b4:01:fb:7d:a0:90:5b:e9:cc:
         1c:a0:8a:d8:e5:80:9f:1a:21:d6:2c:2a:39:94:be:1d:a7:dc:
         a3:30:9a:c2:14:e9:54:cb:e8:23:37:a5:75:c6:8b:21:58:36:
         d9:eb:b5:09:b3:7f:f8:5e:dd:65:56:e3:f4:0a:72:f8:03:5c:
         cc:19:52:e5:96:ff:2a:07:5a:eb:b7:46:9e:bb:f0:59:62:58:
         85:41:ea:53:69:e6:3a:55:d6:f1:fa:ae:e0:fc:a7:9c:2a:4d:
         8b:09:64:6a:3a:fe:5f:30:ed:7a:04:04:47:2f:51:0a:b3:16:
         b4:75:4f:49:f3:8f:ce:f2:1b:ce:30:e9:ad:a9:24:3a:ed:77:
         e0:47:98:43:15:c3:b0:b8:22:58:ae:4a:63:b9:36:65:b1:d4:
         a0:6c:c1:9c:6e:26:93:c6:45:6d:ad:1c:4f:bd:29:fc:92:c0:
         79:3f:36:c1:3f:f1:d3:9e:02:e4:d2:f9:9d:55:61:1d:58:a5:
         a0:dd:68:ed:1b:71:f4:c8:95:65:25:73:48:42:61:dd:32:f8:
         c8:08:8d:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 12:07:24 2026 by rpki-client