Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/30be0583-c369-4138-b01f-80edadf288fc/372d7012-6ee5-35ce-8cfe-b782cf89315b.roa
File:                     372d7012-6ee5-35ce-8cfe-b782cf89315b.roa (raw, json)
Hash identifier:          k9hFd2ZWEt9duBTtJuQtctAwX2TZkNtOXbEIXm7x7LY=
Subject key identifier:   D1:A7:E5:E1:37:CC:3C:8A:3D:AA:20:58:34:9D:E1:4A:28:AF:D8:1E
Certificate issuer:       /CN=30be0583-c369-4138-b01f-80edadf288fc
Certificate serial:       010D0C9F4328584CF8996B400C1E2FB8FEF8B120
Authority key identifier: 46:E4:2F:1F:4C:B8:98:5F:8C:11:5A:54:C1:B9:08:F1:88:C0:5F:E8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/30be0583-c369-4138-b01f-80edadf288fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/30be0583-c369-4138-b01f-80edadf288fc/372d7012-6ee5-35ce-8cfe-b782cf89315b.roa
Signing time:             Tue 06 Jan 2026 02:00:31 +0000
ROA not before:           Tue 06 Jan 2026 02:00:31 +0000
ROA not after:            Mon 06 Apr 2026 01:00:31 +0000
asID:                     19751
IP address blocks:        64.18.140.0/22 maxlen: 24
                          75.103.128.0/18 maxlen: 24
                          75.103.192.0/19 maxlen: 24
                          137.49.224.0/19 maxlen: 19
                          172.96.132.0/22 maxlen: 24
                          209.132.160.0/20 maxlen: 24
                          2606:b500::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/30be0583-c369-4138-b01f-80edadf288fc/30be0583-c369-4138-b01f-80edadf288fc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/30be0583-c369-4138-b01f-80edadf288fc/30be0583-c369-4138-b01f-80edadf288fc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/30be0583-c369-4138-b01f-80edadf288fc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 02 Mar 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:f8:99:6b:40:0c:1e:2f:b8:fe:f8:b1:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=30be0583-c369-4138-b01f-80edadf288fc
        Validity
            Not Before: Jan  6 02:00:31 2026 GMT
            Not After : Apr  6 01:00:31 2026 GMT
        Subject: CN=30af56cd-f8ab-489e-8080-3a709111c0dc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:59:61:9d:75:ce:00:e4:d9:0c:a2:be:a6:ad:
                    6f:73:31:f8:f6:8d:3f:0e:06:6e:e8:15:54:49:0b:
                    5a:e0:ad:b7:94:ac:15:f5:31:61:79:72:03:3b:25:
                    3d:a0:15:aa:cf:fa:8d:4f:c3:12:30:90:78:d4:83:
                    2a:b8:e9:49:5b:53:15:f1:4b:33:18:53:cb:28:f5:
                    17:a5:8a:e1:e4:b8:a7:25:8c:1e:07:25:35:c4:43:
                    37:4a:1d:66:22:e5:a2:18:09:d0:db:ee:b2:dd:27:
                    0c:83:d8:d3:a0:dd:43:bf:fc:4f:0f:df:e1:fa:6b:
                    be:73:8d:a6:3e:2e:6d:31:8f:5f:b9:93:15:2a:5f:
                    98:68:3f:81:c6:00:5d:10:58:a3:52:a3:f5:15:ba:
                    25:72:dd:c5:9a:c8:ea:18:7f:da:c5:d7:a5:e2:e4:
                    f8:20:7e:23:e1:ce:80:92:8d:1b:c9:7f:e3:6b:9d:
                    38:88:e1:55:45:69:d6:9d:a8:0a:17:c6:65:42:78:
                    da:ad:31:2d:ed:7a:60:6e:13:80:20:ee:85:27:3a:
                    6d:e5:80:49:c7:8a:2d:a6:f2:6e:ad:0b:4a:4b:8b:
                    bd:51:f8:ca:30:c1:86:70:2a:8b:ba:f2:f3:d7:47:
                    b2:d5:aa:c6:1e:f9:ec:64:51:b9:2d:d0:30:05:01:
                    24:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:A7:E5:E1:37:CC:3C:8A:3D:AA:20:58:34:9D:E1:4A:28:AF:D8:1E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/30be0583-c369-4138-b01f-80edadf288fc/372d7012-6ee5-35ce-8cfe-b782cf89315b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/30be0583-c369-4138-b01f-80edadf288fc/30be0583-c369-4138-b01f-80edadf288fc.crl

            X509v3 Authority Key Identifier:
                keyid:46:E4:2F:1F:4C:B8:98:5F:8C:11:5A:54:C1:B9:08:F1:88:C0:5F:E8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/30be0583-c369-4138-b01f-80edadf288fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.18.140.0/22
                  75.103.128.0-75.103.223.255
                  137.49.224.0/19
                  172.96.132.0/22
                  209.132.160.0/20
                IPv6:
                  2606:b500::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5d:cf:a7:05:0c:66:81:83:50:a3:87:02:43:41:ba:c3:c8:c8:
         22:7e:16:43:7d:a3:8c:98:bc:32:8d:10:07:ff:cc:69:b7:72:
         80:21:b8:d2:84:39:fb:9c:28:e0:de:e7:02:ff:88:5a:a2:8c:
         4b:fd:51:12:9a:98:33:8d:ff:86:44:b3:7c:d2:29:00:23:29:
         67:73:48:35:db:6a:07:2e:da:23:91:b6:c0:a8:e9:47:cd:dd:
         98:86:ce:3e:59:6f:cf:b0:51:44:ea:cd:24:72:c4:26:73:ed:
         38:e7:8d:b7:a1:25:f9:8d:af:16:bd:01:a4:c1:5e:5f:87:55:
         2c:8f:af:c4:b2:e0:7f:7b:c7:85:6f:47:8b:d9:1e:3e:46:1d:
         40:f1:71:79:3d:7c:4a:15:89:45:51:af:55:aa:80:34:a1:8a:
         c7:12:10:7a:0f:38:c0:6d:12:80:23:09:d3:07:0c:d8:17:d1:
         03:87:e0:03:2f:0d:69:79:a2:bd:69:f7:7c:17:c3:e2:e8:94:
         16:23:0f:e1:d3:c6:29:04:92:13:f2:9e:7a:f5:0b:1d:ca:69:
         0a:9e:3d:a8:70:0d:ae:f9:2c:ce:39:c7:2a:3f:2d:2f:fe:fc:
         4a:0a:60:dc:67:22:52:a5:50:8c:f8:8f:1c:f8:3a:e9:f6:2e:
         18:fd:17:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 16:29:54 2026 by rpki-client