Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dbc41d55-9cbd-403e-9fa7-a3334f1ede3d/91fa3f7f-9f28-3835-a2a7-45df52217cfd.roa
File:                     91fa3f7f-9f28-3835-a2a7-45df52217cfd.roa (raw, json)
Hash identifier:          TAty77sk7nu676qhciZfNiz2NNeF5OrNEjjH3ueJiCI=
Subject key identifier:   69:65:13:B7:96:9D:ED:42:6E:8F:EE:A9:9E:E6:AA:CE:CC:43:20:8F
Certificate issuer:       /CN=dbc41d55-9cbd-403e-9fa7-a3334f1ede3d
Certificate serial:       010D0C9F4328584E9A7FD0DA603909525231E2F0
Authority key identifier: BD:09:90:7A:2D:9A:2F:56:65:B6:16:4C:EC:24:63:8A:F2:D2:09:9C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dbc41d55-9cbd-403e-9fa7-a3334f1ede3d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dbc41d55-9cbd-403e-9fa7-a3334f1ede3d/91fa3f7f-9f28-3835-a2a7-45df52217cfd.roa
Signing time:             Fri 24 Jul 2026 09:00:12 +0000
ROA not before:           Fri 24 Jul 2026 09:00:12 +0000
ROA not after:            Thu 22 Oct 2026 09:00:12 +0000
asID:                     33362
IP address blocks:        198.174.212.0/23 maxlen: 24
                          198.174.214.0/23 maxlen: 24
                          204.221.17.0/24 maxlen: 24
                          204.221.18.0/23 maxlen: 24
                          204.221.144.0/22 maxlen: 24
                          206.9.80.0/24 maxlen: 24
                          206.145.178.0/23 maxlen: 24
                          206.145.224.0/23 maxlen: 24
                          206.146.48.0/22 maxlen: 24
                          209.32.64.0/21 maxlen: 24
                          209.32.112.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dbc41d55-9cbd-403e-9fa7-a3334f1ede3d/dbc41d55-9cbd-403e-9fa7-a3334f1ede3d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dbc41d55-9cbd-403e-9fa7-a3334f1ede3d/dbc41d55-9cbd-403e-9fa7-a3334f1ede3d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dbc41d55-9cbd-403e-9fa7-a3334f1ede3d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 05:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:9a:7f:d0:da:60:39:09:52:52:31:e2:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dbc41d55-9cbd-403e-9fa7-a3334f1ede3d
        Validity
            Not Before: Jul 24 09:00:12 2026 GMT
            Not After : Oct 22 09:00:12 2026 GMT
        Subject: CN=70527b4b-3462-465e-9191-237ccf0eafa3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:15:62:58:2d:4d:98:11:cd:ef:f4:fe:c9:f2:
                    05:a8:87:b4:cd:74:ef:45:fc:da:16:6f:ad:36:a1:
                    f9:52:74:4f:f7:cc:fb:62:5c:1e:53:b3:49:74:fd:
                    a9:24:a2:db:a1:fc:af:6c:14:55:41:14:27:88:b9:
                    b1:f8:5d:34:24:04:08:06:cf:5e:dc:fc:0f:b7:57:
                    2a:3b:4f:62:01:3d:16:74:29:b1:bb:84:72:7f:63:
                    34:68:47:1d:9a:d1:97:ce:bd:66:7e:15:7c:6d:a1:
                    58:05:7a:ee:fb:b4:42:56:f7:b2:39:4c:7e:0d:ed:
                    7c:0e:d7:c8:28:76:c2:4d:12:68:60:70:d3:05:51:
                    ae:70:5d:1a:b4:7f:81:66:70:ef:b3:cf:ca:12:3a:
                    24:f4:d4:5d:b5:90:d2:b9:2f:f5:df:ac:c1:cf:3d:
                    b0:a2:24:62:24:72:18:59:e2:31:ae:0c:61:e6:a7:
                    b7:77:ec:88:7a:b8:ce:0d:5c:c4:6c:b0:52:ab:b2:
                    8c:73:11:76:1d:22:7e:66:c0:3e:85:de:aa:22:1f:
                    98:e1:4c:d2:cd:63:ba:c1:ec:4e:4f:cb:40:07:f2:
                    af:fb:30:14:e9:8c:89:ae:3a:7c:e7:16:69:a5:92:
                    4f:a0:44:9e:79:ef:d9:ba:55:d0:5f:76:87:03:ec:
                    ab:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:65:13:B7:96:9D:ED:42:6E:8F:EE:A9:9E:E6:AA:CE:CC:43:20:8F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dbc41d55-9cbd-403e-9fa7-a3334f1ede3d/91fa3f7f-9f28-3835-a2a7-45df52217cfd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dbc41d55-9cbd-403e-9fa7-a3334f1ede3d/dbc41d55-9cbd-403e-9fa7-a3334f1ede3d.crl

            X509v3 Authority Key Identifier:
                keyid:BD:09:90:7A:2D:9A:2F:56:65:B6:16:4C:EC:24:63:8A:F2:D2:09:9C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dbc41d55-9cbd-403e-9fa7-a3334f1ede3d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.174.212.0/22
                  204.221.17.0-204.221.19.255
                  204.221.144.0/22
                  206.9.80.0/24
                  206.145.178.0/23
                  206.145.224.0/23
                  206.146.48.0/22
                  209.32.64.0/21
                  209.32.112.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         74:13:9a:3b:8c:d8:eb:ec:b9:e4:40:4b:d9:43:a6:8c:60:89:
         9e:01:27:c9:7b:77:ba:a8:a3:a4:4b:7b:28:7d:48:e2:47:3a:
         8d:f7:4a:5b:06:aa:fc:b0:fc:82:38:16:b7:cd:78:c4:3f:ca:
         d6:2d:41:a5:91:e2:26:c1:1c:73:3c:ae:99:d7:79:e2:e4:3a:
         63:8f:8c:68:52:72:ab:b4:a3:d8:ab:f8:75:19:42:79:92:39:
         df:41:45:78:81:f8:ff:b4:f1:a4:3e:72:94:c3:fb:ce:83:80:
         a0:2e:79:ed:09:c7:2a:3c:85:2c:1b:34:74:0e:d0:d7:41:7b:
         74:57:85:c7:59:83:c3:00:12:3b:a4:88:b1:cf:9b:fb:db:59:
         d4:6c:28:d1:e4:ba:87:4d:9f:6a:80:06:8d:8e:84:49:70:65:
         d7:e7:5a:8e:3f:a4:38:12:a5:2b:9f:8c:07:77:13:69:30:85:
         c0:9a:6a:c1:a2:0b:c9:db:42:51:58:7b:85:c7:56:3b:c3:b9:
         bd:01:cd:b2:71:e6:35:92:9e:3e:4a:dc:42:ef:49:2d:fc:86:
         32:a8:9c:37:48:56:5e:7e:22:bb:ec:32:a8:b4:8f:b4:64:02:
         da:73:d1:ea:b0:fc:f4:2b:96:14:e0:e5:59:71:60:e4:07:b6:
         a8:20:a0:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 15:56:37 2026 by rpki-client