Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/90c82b9d-8ae1-3f0f-9368-e65772e7e062.roa
File:                     90c82b9d-8ae1-3f0f-9368-e65772e7e062.roa (raw, json)
Hash identifier:          oKrd+fllI69jo/MT26lMROlEje2csdn472OddxRRbD4=
Subject key identifier:   68:7F:DD:CF:77:60:8D:B3:12:FA:46:CF:D9:AA:C8:E5:57:58:5E:42
Certificate issuer:       /CN=b433f23f-334b-4db9-9fe1-bef76714d97f
Certificate serial:       010D0C9F4328584E016B2480378B906840D67D00
Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/90c82b9d-8ae1-3f0f-9368-e65772e7e062.roa
Signing time:             Sat 30 May 2026 13:00:10 +0000
ROA not before:           Sat 30 May 2026 13:00:10 +0000
ROA not after:            Fri 28 Aug 2026 13:00:10 +0000
asID:                     6424
IP address blocks:        128.242.128.0/19 maxlen: 24
                          128.242.224.0/20 maxlen: 24
                          128.242.240.0/20 maxlen: 24
                          130.94.176.0/20 maxlen: 24
                          130.94.208.0/20 maxlen: 24
                          131.103.0.0/20 maxlen: 24
                          131.103.96.0/20 maxlen: 24
                          168.143.160.0/20 maxlen: 24
                          198.64.80.0/20 maxlen: 24
                          198.64.192.0/19 maxlen: 24
                          204.1.192.0/19 maxlen: 24
                          204.3.32.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:01:6b:24:80:37:8b:90:68:40:d6:7d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f
        Validity
            Not Before: May 30 13:00:10 2026 GMT
            Not After : Aug 28 13:00:10 2026 GMT
        Subject: CN=c5f4ab22-998a-4fc0-8e25-4bdda5cb5529
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:62:6d:e7:f4:54:00:de:48:7c:c9:de:8b:3c:
                    b9:33:67:a1:69:b2:df:63:34:41:35:d2:42:bd:40:
                    7f:39:51:20:0f:0f:3f:98:3e:c2:2c:51:23:bf:61:
                    0b:d6:01:be:35:16:fc:c4:34:9d:89:e8:f8:be:8d:
                    12:9b:b5:8a:8e:41:49:ff:ce:85:c3:19:b1:74:f0:
                    a8:81:18:12:21:9f:92:df:00:7a:eb:3d:6e:63:d3:
                    c8:28:19:18:1b:16:90:1f:42:5e:45:c7:a2:74:26:
                    28:d5:b0:73:7b:bd:09:c8:66:19:c5:35:c5:5c:86:
                    f4:15:f0:98:d9:73:6c:d1:dd:37:d9:7b:19:fb:02:
                    ef:c4:4f:30:16:46:f3:08:d5:45:d1:b8:ed:03:1c:
                    7b:2f:48:b8:ef:39:a7:0f:9d:2d:67:2e:22:a9:ed:
                    d2:c0:c4:eb:c8:91:c2:03:1b:63:64:11:17:6c:f0:
                    37:6b:8d:15:7d:be:4e:a4:07:83:7f:f2:44:92:8a:
                    fa:07:62:e6:66:03:6d:e3:60:5c:6e:0b:2c:3d:5f:
                    de:5c:52:7d:d0:2d:d8:61:55:b0:f7:bb:fd:d5:03:
                    c3:a8:35:6e:f8:d5:6f:b7:aa:a0:e1:f4:15:76:07:
                    03:3d:5b:22:2b:68:f7:95:36:c6:e5:35:63:bf:a8:
                    3f:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:7F:DD:CF:77:60:8D:B3:12:FA:46:CF:D9:AA:C8:E5:57:58:5E:42
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/90c82b9d-8ae1-3f0f-9368-e65772e7e062.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl

            X509v3 Authority Key Identifier:
                keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  128.242.128.0/19
                  128.242.224.0/19
                  130.94.176.0/20
                  130.94.208.0/20
                  131.103.0.0/20
                  131.103.96.0/20
                  168.143.160.0/20
                  198.64.80.0/20
                  198.64.192.0/19
                  204.1.192.0/19
                  204.3.32.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         36:be:54:6d:91:42:ad:51:37:72:84:8a:00:ee:27:b4:b0:3c:
         d5:56:1b:1c:22:2c:44:de:b8:84:d6:e5:ca:33:2d:00:c5:ed:
         68:e4:5b:d3:4a:bb:c3:cd:7c:0c:ac:df:bb:2a:73:c5:24:87:
         08:61:47:b6:78:44:02:e9:1e:42:59:0c:6f:15:20:44:ad:a7:
         21:cb:76:f9:e4:18:6e:cf:2c:1a:e3:7a:b5:3c:7a:aa:d1:1c:
         ae:d7:cc:b1:cf:2e:37:ff:18:24:78:98:42:f6:3b:ee:cd:37:
         1f:d5:a7:e8:e4:6b:64:47:6c:53:39:7e:99:b0:89:d4:a0:5f:
         7a:0a:9e:b4:99:10:80:02:43:99:b6:0c:dd:79:2e:29:b7:f4:
         62:74:d8:16:be:f5:1b:d0:67:f8:8b:df:eb:fe:05:84:d5:f1:
         0b:4e:5a:4e:f1:14:e9:89:d5:51:20:2a:05:5c:55:54:2f:c3:
         89:d9:d5:e7:aa:3f:26:6f:e6:e0:e3:0c:5a:07:ac:40:00:6b:
         3a:88:85:33:a1:9a:20:f0:bd:3f:07:1e:d5:fa:17:76:44:df:
         a7:84:4b:34:f0:ab:95:51:7a:58:5e:4c:fa:18:de:c1:bd:82:
         ea:93:06:d3:79:55:f2:26:f1:ee:db:2a:c5:b4:be:25:40:fd:
         0e:9f:f3:e0
-----BEGIN CERTIFICATE-----
MIIGfzCCBWegAwIBAgIUAQ0Mn0MoWE4BaySAN4uQaEDWfQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjQzM2YyM2YtMzM0Yi00ZGI5LTlmZTEtYmVmNzY3MTRk
OTdmMB4XDTI2MDUzMDEzMDAxMFoXDTI2MDgyODEzMDAxMFowLzEtMCsGA1UEAxMk
YzVmNGFiMjItOTk4YS00ZmMwLThlMjUtNGJkZGE1Y2I1NTI5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl2Jt5/RUAN5IfMneizy5M2ehabLfYzRBNdJC
vUB/OVEgDw8/mD7CLFEjv2EL1gG+NRb8xDSdiej4vo0Sm7WKjkFJ/86FwxmxdPCo
gRgSIZ+S3wB66z1uY9PIKBkYGxaQH0JeRceidCYo1bBze70JyGYZxTXFXIb0FfCY
2XNs0d032XsZ+wLvxE8wFkbzCNVF0bjtAxx7L0i47zmnD50tZy4iqe3SwMTryJHC
AxtjZBEXbPA3a40Vfb5OpAeDf/JEkor6B2LmZgNt42BcbgssPV/eXFJ90C3YYVWw
97v91QPDqDVu+NVvt6qg4fQVdgcDPVsiK2j3lTbG5TVjv6g/wQIDAQABo4IDkTCC
A40wHQYDVR0OBBYEFGh/3c93YI2zEvpGz9mqyOVXWF5CMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMz
ZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3NjcxNGQ5N2YvOTBjODJiOWQtOGFlMS0z
ZjBmLTkzNjgtZTY1NzcyZTdlMDYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjQzM2YyM2YtMzM0Yi00ZGI5LTlm
ZTEtYmVmNzY3MTRkOTdmL2I0MzNmMjNmLTMzNGItNGRiOS05ZmUxLWJlZjc2NzE0
ZDk3Zi5jcmwwHwYDVR0jBBgwFoAUjKtdxzLC2PPlk2Fq7ri1ILL5E7owDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMzZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3
NjcxNGQ5N2YuY2VyMFsGCCsGAQUFBwEHAQH/BEwwSjBIBAIAATBCAwQFgPKAAwQF
gPLgAwQEgl6wAwQEgl7QAwQEg2cAAwQEg2dgAwQEqI+gAwQExkBQAwQFxkDAAwQF
zAHAAwQFzAMgMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcC
ARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWww
DQYJKoZIhvcNAQELBQADggEBADa+VG2RQq1RN3KEigDuJ7SwPNVWGxwiLETeuITW
5cozLQDF7WjkW9NKu8PNfAys37sqc8UkhwhhR7Z4RALpHkJZDG8VIEStpyHLdvnk
GG7PLBrjerU8eqrRHK7XzLHPLjf/GCR4mEL2O+7NNx/Vp+jka2RHbFM5fpmwidSg
X3oKnrSZEIACQ5m2DN15Lim39GJ02Ba+9RvQZ/iL3+v+BYTV8QtOWk7xFOmJ1VEg
KgVcVVQvw4nZ1eeqPyZv5uDjDFoHrEAAazqIhTOhmiDwvT8HHtX6F3ZE36eESzTw
q5VRelheTPoY3sG9guqTBtN5VfIm8e7bKsW0viVA/Q6f8+A=
-----END CERTIFICATE-----
Generated at Sat Jun 13 08:39:14 2026 by rpki-client