Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a6786e5b-4aff-49f4-81e1-1dca8a1dfdc0/d3cdd8b8-a5e2-3355-9c49-e239e28e4e87.roa
File:                     d3cdd8b8-a5e2-3355-9c49-e239e28e4e87.roa (raw, json)
Hash identifier:          2H0h858Wz+Kh/OaXC2dNlNryOvF6DdVaLC3yJpJc/co=
Subject key identifier:   9C:4C:CF:36:E6:23:1C:65:39:EA:32:48:86:6F:61:E3:A4:97:94:A3
Certificate issuer:       /CN=a6786e5b-4aff-49f4-81e1-1dca8a1dfdc0
Certificate serial:       010D0C9F4328584E210EF5676612723453B5F080
Authority key identifier: B3:3C:FA:77:C0:A6:7D:0A:F6:F9:19:8E:41:82:EE:A9:3B:6B:D2:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a6786e5b-4aff-49f4-81e1-1dca8a1dfdc0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a6786e5b-4aff-49f4-81e1-1dca8a1dfdc0/d3cdd8b8-a5e2-3355-9c49-e239e28e4e87.roa
Signing time:             Wed 10 Jun 2026 21:00:11 +0000
ROA not before:           Wed 10 Jun 2026 21:00:11 +0000
ROA not after:            Tue 08 Sep 2026 21:00:11 +0000
asID:                     19171
IP address blocks:        64.253.128.0/19 maxlen: 24
                          98.143.80.0/20 maxlen: 24
                          162.245.56.0/22 maxlen: 24
                          192.189.36.0/22 maxlen: 24
                          199.182.220.0/22 maxlen: 24
                          208.65.232.0/22 maxlen: 24
                          208.118.128.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a6786e5b-4aff-49f4-81e1-1dca8a1dfdc0/a6786e5b-4aff-49f4-81e1-1dca8a1dfdc0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a6786e5b-4aff-49f4-81e1-1dca8a1dfdc0/a6786e5b-4aff-49f4-81e1-1dca8a1dfdc0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a6786e5b-4aff-49f4-81e1-1dca8a1dfdc0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:21:0e:f5:67:66:12:72:34:53:b5:f0:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a6786e5b-4aff-49f4-81e1-1dca8a1dfdc0
        Validity
            Not Before: Jun 10 21:00:11 2026 GMT
            Not After : Sep  8 21:00:11 2026 GMT
        Subject: CN=a2e2b92a-c78a-4830-9034-b016d57e6d4e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:bc:fe:c8:17:5e:0f:86:9c:ed:68:79:91:f7:
                    64:14:07:65:4c:d0:7b:77:c5:20:e3:e4:3b:31:4a:
                    8f:51:e5:a9:5b:66:eb:1e:ac:41:a2:52:94:6a:96:
                    bc:7d:98:1c:d2:4d:80:90:87:05:22:d9:ac:79:02:
                    fb:93:ea:0e:0f:d6:50:44:2e:8f:40:1b:ff:a0:b5:
                    d4:dc:94:9b:09:bf:cb:38:40:5e:2f:87:d2:cd:70:
                    d8:8e:1a:b7:07:22:9d:b3:73:06:a2:d9:49:90:68:
                    ff:f1:0d:89:13:37:f4:2d:5f:4f:67:38:2e:1f:6f:
                    3b:7d:1a:7c:33:d2:fe:81:03:d9:9f:8f:e0:fd:11:
                    69:e2:da:51:95:11:5d:ef:b8:08:84:bd:35:2d:b3:
                    3c:4f:90:14:fc:49:2d:e4:0e:b9:51:3e:d1:f7:6f:
                    a6:a0:ca:5f:27:dc:d3:8b:42:85:ae:84:82:3a:f7:
                    ec:4f:70:56:ef:2f:5d:13:fe:64:d5:14:e7:88:e1:
                    b3:cb:59:f4:c1:65:55:bf:82:b1:9f:77:98:5b:bc:
                    09:2e:c4:eb:91:02:b5:99:53:2e:0f:38:0b:36:08:
                    9f:96:49:be:79:e5:3b:17:14:57:9a:95:67:07:99:
                    03:00:7f:4f:33:19:1e:c2:0c:b2:dd:2b:89:3c:30:
                    da:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:4C:CF:36:E6:23:1C:65:39:EA:32:48:86:6F:61:E3:A4:97:94:A3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a6786e5b-4aff-49f4-81e1-1dca8a1dfdc0/d3cdd8b8-a5e2-3355-9c49-e239e28e4e87.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a6786e5b-4aff-49f4-81e1-1dca8a1dfdc0/a6786e5b-4aff-49f4-81e1-1dca8a1dfdc0.crl

            X509v3 Authority Key Identifier:
                keyid:B3:3C:FA:77:C0:A6:7D:0A:F6:F9:19:8E:41:82:EE:A9:3B:6B:D2:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a6786e5b-4aff-49f4-81e1-1dca8a1dfdc0.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.253.128.0/19
                  98.143.80.0/20
                  162.245.56.0/22
                  192.189.36.0/22
                  199.182.220.0/22
                  208.65.232.0/22
                  208.118.128.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         11:be:b1:e9:1b:5f:31:35:04:3b:a6:c8:64:f5:dc:d6:e4:d0:
         55:c2:9b:63:b7:32:df:88:54:ac:dd:5a:63:18:52:b4:b0:40:
         53:a0:4a:49:59:bc:38:15:03:a5:f5:b9:a4:29:6c:37:db:8a:
         58:57:ca:8e:25:07:89:ea:6e:5e:2b:27:e6:8c:9c:46:ea:a1:
         cb:e5:d7:e8:db:c1:b3:e0:d6:03:e1:ba:91:8d:da:9f:49:d4:
         04:52:ee:77:72:42:b4:36:fd:cf:d5:a2:63:4d:2d:8c:df:f9:
         ff:2e:f1:7d:ae:bf:f3:75:3b:3d:4b:83:61:a0:3f:f2:7c:ea:
         28:ea:1c:54:e3:03:c3:f6:e8:55:41:8c:8b:11:24:a2:50:fc:
         1a:cb:04:5b:36:12:f7:62:c6:73:69:80:0e:02:c8:ca:4a:f8:
         00:8b:2c:9a:8f:f2:c2:75:e7:86:50:61:4a:b1:9c:34:61:b7:
         23:57:3f:40:bc:40:81:af:c9:ba:81:cc:0f:c3:12:0f:c7:18:
         2a:72:e6:30:94:6f:21:a2:3e:e8:a9:80:31:75:b5:fa:f6:0b:
         52:3e:7c:a5:8e:75:19:62:18:79:a7:18:b0:a0:49:97:ce:67:
         32:83:ed:9e:13:d1:3f:11:c4:b2:95:3c:6e:dc:b0:ff:b2:f8:
         7c:5a:10:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 14:13:20 2026 by rpki-client