Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3cc14fdf-ab56-412d-b3de-39cbbd96d12f/82188834-19d0-34be-9f3c-13ee797db6fa.roa
File:                     82188834-19d0-34be-9f3c-13ee797db6fa.roa (raw, json)
Hash identifier:          n4vXZHy5/2WVO9vOaaJN90DcKSbndb0+l4KJXMeLwwU=
Subject key identifier:   64:AC:CC:4A:CB:D0:AF:00:62:10:AD:D7:96:27:36:9B:5B:FA:20:C0
Certificate issuer:       /CN=3cc14fdf-ab56-412d-b3de-39cbbd96d12f
Certificate serial:       010D0C9F4328584F067241190C1B078D4662D280
Authority key identifier: A9:22:22:C2:6D:F6:4E:5A:AB:2E:F4:BC:1E:8A:AF:18:AF:64:AB:CC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3cc14fdf-ab56-412d-b3de-39cbbd96d12f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3cc14fdf-ab56-412d-b3de-39cbbd96d12f/82188834-19d0-34be-9f3c-13ee797db6fa.roa
Signing time:             Tue 01 Sep 2026 01:00:12 +0000
ROA not before:           Tue 01 Sep 2026 01:00:12 +0000
ROA not after:            Mon 30 Nov 2026 02:00:12 +0000
asID:                     54665
IP address blocks:        66.128.128.0/20 maxlen: 20
                          162.220.84.0/22 maxlen: 22
                          192.190.88.0/22 maxlen: 22
                          198.177.52.0/22 maxlen: 22
                          199.59.112.0/22 maxlen: 22
                          2605:4680::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3cc14fdf-ab56-412d-b3de-39cbbd96d12f/3cc14fdf-ab56-412d-b3de-39cbbd96d12f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3cc14fdf-ab56-412d-b3de-39cbbd96d12f/3cc14fdf-ab56-412d-b3de-39cbbd96d12f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3cc14fdf-ab56-412d-b3de-39cbbd96d12f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Sep 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:06:72:41:19:0c:1b:07:8d:46:62:d2:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3cc14fdf-ab56-412d-b3de-39cbbd96d12f
        Validity
            Not Before: Sep  1 01:00:12 2026 GMT
            Not After : Nov 30 02:00:12 2026 GMT
        Subject: CN=b75f6ae6-e822-4b2e-b8a6-119e53b0ca66
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:11:f4:eb:fc:22:d5:3e:82:93:39:f5:df:ad:
                    8f:cb:f4:67:fe:ef:d4:ae:27:b3:49:03:e1:97:13:
                    b8:81:3d:fb:a2:19:19:4f:40:49:d5:d5:e5:ee:de:
                    32:bc:86:b5:b2:1e:b3:6b:b8:2a:05:cf:45:c5:01:
                    e7:09:ed:fc:f9:8b:39:1d:b0:91:db:46:e7:12:a3:
                    f9:7e:a7:4a:99:5d:e5:f1:7f:92:25:ea:e2:53:01:
                    b2:45:2f:5b:77:43:ad:e5:bb:4a:1b:5f:8a:42:51:
                    b4:c2:98:ae:30:81:76:7f:e5:df:b6:06:8b:4e:93:
                    b8:53:17:66:58:40:fe:38:d5:45:38:76:60:84:49:
                    22:d6:61:ed:54:fd:e0:51:e9:f0:e5:b5:25:8f:14:
                    9f:0f:b3:26:c9:84:4b:82:f8:2c:70:0e:28:94:65:
                    a8:ae:e6:81:97:cc:a2:f3:f3:b5:3d:25:7c:24:0c:
                    ac:9d:d7:03:8c:13:95:6f:6f:61:57:d5:c8:a2:af:
                    2d:86:53:a2:39:fd:ab:d7:33:a9:12:2e:72:83:c9:
                    f0:5a:d6:c7:8e:dd:7d:e3:09:44:18:02:64:36:2c:
                    ea:f3:11:29:d0:9f:62:45:47:d0:a9:47:b6:a3:b6:
                    4d:59:f3:c1:64:34:a5:f4:69:fd:dd:e5:d2:c7:6d:
                    aa:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:AC:CC:4A:CB:D0:AF:00:62:10:AD:D7:96:27:36:9B:5B:FA:20:C0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3cc14fdf-ab56-412d-b3de-39cbbd96d12f/82188834-19d0-34be-9f3c-13ee797db6fa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3cc14fdf-ab56-412d-b3de-39cbbd96d12f/3cc14fdf-ab56-412d-b3de-39cbbd96d12f.crl

            X509v3 Authority Key Identifier:
                keyid:A9:22:22:C2:6D:F6:4E:5A:AB:2E:F4:BC:1E:8A:AF:18:AF:64:AB:CC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3cc14fdf-ab56-412d-b3de-39cbbd96d12f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.128.128.0/20
                  162.220.84.0/22
                  192.190.88.0/22
                  198.177.52.0/22
                  199.59.112.0/22
                IPv6:
                  2605:4680::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1a:2a:bb:a0:37:b4:2a:37:41:78:b4:13:79:55:a0:0d:1f:38:
         5c:b2:7e:a5:c7:e7:e0:3b:a1:33:cb:19:1c:a0:a6:bb:08:3f:
         c0:57:7b:36:fb:dd:9e:3b:38:6d:26:b3:b3:7f:8d:18:af:5d:
         8b:61:17:6d:bb:8e:9f:b8:b6:25:3c:dc:59:a3:56:b4:69:36:
         39:4b:26:33:8e:2d:d8:0d:9c:07:1a:1a:6e:38:35:bd:62:17:
         34:53:7e:ce:e2:a3:24:db:3d:a8:6f:d1:37:fb:52:46:15:8e:
         5f:09:9c:cb:ec:a8:b1:97:b0:f2:70:ec:c3:1f:22:ea:24:df:
         32:d2:9b:ea:e7:d0:39:85:84:65:36:43:12:88:80:94:8d:e4:
         7f:a9:23:b8:01:b9:73:e2:5f:14:0d:64:36:f8:f3:65:32:c4:
         d2:75:03:b9:d3:46:cf:31:1e:e4:0a:bc:a9:72:c0:8f:77:bb:
         76:2d:84:4f:4c:02:35:6e:d0:8c:be:18:4a:0f:b7:31:ef:7f:
         da:a1:35:c2:2e:cf:7e:04:98:94:0b:5e:d3:4e:16:36:d4:d5:
         62:27:15:70:10:89:2d:37:09:70:98:32:14:2a:c6:37:34:41:
         62:3a:9d:89:03:28:d8:d6:ef:e5:07:7a:4f:a2:f8:92:57:34:
         f6:1f:c8:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 21:18:49 2026 by rpki-client