Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3bb72fa3-359e-464d-be35-978a12d62998/c5c1ab9a-f99d-3b75-b7f4-98fbef315809.roa
File:                     c5c1ab9a-f99d-3b75-b7f4-98fbef315809.roa (raw, json)
Hash identifier:          sZR+hS/oSldgdqgtB7Jp9DJfzCfluAR2YllDa7Pj3i4=
Subject key identifier:   10:94:EE:DD:A1:12:FD:0E:8C:4A:20:8F:6C:61:80:FA:BF:5D:2B:99
Certificate issuer:       /CN=3bb72fa3-359e-464d-be35-978a12d62998
Certificate serial:       010D0C9F4328584CC34746898B214C53B6F06280
Authority key identifier: E8:AA:4D:0D:AB:D9:92:99:F3:0F:A0:FF:30:AB:DA:03:66:45:90:F3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3bb72fa3-359e-464d-be35-978a12d62998.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3bb72fa3-359e-464d-be35-978a12d62998/c5c1ab9a-f99d-3b75-b7f4-98fbef315809.roa
Signing time:             Thu 05 Feb 2026 14:00:40 +0000
ROA not before:           Thu 05 Feb 2026 14:00:40 +0000
ROA not after:            Wed 06 May 2026 13:00:40 +0000
asID:                     5009
IP address blocks:        64.56.0.0/19 maxlen: 24
                          64.237.64.0/19 maxlen: 24
                          66.186.224.0/19 maxlen: 24
                          108.179.160.0/19 maxlen: 24
                          159.48.192.0/19 maxlen: 24
                          160.223.208.0/20 maxlen: 24
                          205.233.40.0/22 maxlen: 24
                          206.124.192.0/19 maxlen: 24
                          206.204.112.0/20 maxlen: 24
                          208.97.32.0/20 maxlen: 24
                          209.62.192.0/19 maxlen: 24
                          209.124.192.0/19 maxlen: 24
                          209.124.224.0/19 maxlen: 24
                          216.115.128.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3bb72fa3-359e-464d-be35-978a12d62998/3bb72fa3-359e-464d-be35-978a12d62998.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3bb72fa3-359e-464d-be35-978a12d62998/3bb72fa3-359e-464d-be35-978a12d62998.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3bb72fa3-359e-464d-be35-978a12d62998.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:c3:47:46:89:8b:21:4c:53:b6:f0:62:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3bb72fa3-359e-464d-be35-978a12d62998
        Validity
            Not Before: Feb  5 14:00:40 2026 GMT
            Not After : May  6 13:00:40 2026 GMT
        Subject: CN=abab48fd-ca9e-4795-bcf8-8672a539d49c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:40:64:c1:e4:3f:7a:ed:6f:de:5e:f4:78:9d:
                    d8:8d:38:34:9e:22:28:62:99:56:f3:ef:09:95:13:
                    87:07:b0:5a:c5:72:85:12:7f:e4:17:da:96:1e:23:
                    56:30:77:69:cf:b1:b7:54:66:04:c6:59:df:8d:54:
                    ea:8b:be:f4:e3:00:fa:2a:ab:50:6e:4a:d4:ca:7e:
                    47:0e:fc:50:07:4c:a1:d1:a4:4c:43:f6:54:87:d3:
                    c1:11:28:2c:15:d1:99:74:25:ab:86:25:db:82:7a:
                    56:5e:52:2b:22:f5:5b:83:75:16:4b:f7:e0:57:6e:
                    07:7d:a4:53:a0:50:9e:a4:b2:39:2a:17:02:2a:dd:
                    2d:e8:6b:76:27:74:b3:81:f5:9c:b2:53:e0:8c:0b:
                    9c:ed:3e:63:56:94:d4:69:89:38:52:b4:17:ab:47:
                    49:a5:ee:3f:ab:43:c6:56:7e:62:76:8c:82:17:a6:
                    6d:fa:37:22:30:a4:ee:e4:18:3c:07:d1:98:b8:1c:
                    ff:46:a0:ac:7f:e9:32:97:72:ca:a6:8c:ee:e8:cf:
                    b1:73:4c:e9:e2:bc:c1:98:be:ed:82:10:46:71:60:
                    9a:60:f1:95:c3:9b:c1:20:69:21:74:37:c7:87:ca:
                    71:b2:75:70:d3:22:27:7f:fb:5f:54:d0:ab:3e:59:
                    e3:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:94:EE:DD:A1:12:FD:0E:8C:4A:20:8F:6C:61:80:FA:BF:5D:2B:99
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3bb72fa3-359e-464d-be35-978a12d62998/c5c1ab9a-f99d-3b75-b7f4-98fbef315809.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3bb72fa3-359e-464d-be35-978a12d62998/3bb72fa3-359e-464d-be35-978a12d62998.crl

            X509v3 Authority Key Identifier:
                keyid:E8:AA:4D:0D:AB:D9:92:99:F3:0F:A0:FF:30:AB:DA:03:66:45:90:F3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3bb72fa3-359e-464d-be35-978a12d62998.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.56.0.0/19
                  64.237.64.0/19
                  66.186.224.0/19
                  108.179.160.0/19
                  159.48.192.0/19
                  160.223.208.0/20
                  205.233.40.0/22
                  206.124.192.0/19
                  206.204.112.0/20
                  208.97.32.0/20
                  209.62.192.0/19
                  209.124.192.0/18
                  216.115.128.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         98:1e:fa:6a:5e:74:f8:8d:1a:cc:1f:54:8c:bc:52:70:10:f8:
         4d:4c:09:21:cd:f9:8f:22:96:00:2c:58:7d:c9:e5:e4:20:22:
         14:21:c2:e5:87:ba:1c:d4:c0:b9:09:97:b4:3c:9a:b7:ad:8a:
         6c:a9:78:9a:6f:10:de:18:c7:42:79:af:47:23:1f:a9:f2:09:
         a5:78:68:52:b0:ec:2a:76:6b:9b:11:4c:77:f3:25:76:50:77:
         ab:55:55:62:51:52:e9:e9:ff:9d:d9:a0:1f:f1:b3:16:ca:b2:
         ac:61:ca:5c:bd:01:7a:70:b5:64:22:75:f7:02:e3:fb:54:9c:
         20:ba:7a:24:51:11:c8:8d:87:91:9e:5f:e3:00:77:0a:78:23:
         7f:43:38:f8:c2:66:3e:bc:27:59:ce:21:82:2e:cf:68:17:61:
         72:87:f1:97:db:a7:79:e5:e6:9d:78:49:17:82:ec:e1:01:23:
         d8:dd:87:da:5b:85:07:4a:84:61:58:b7:68:fd:75:c9:45:70:
         02:9b:4a:89:0c:63:de:5b:b0:a3:45:e5:fb:f1:9a:e8:bd:ec:
         bd:51:d2:c0:34:a7:0b:f1:9a:e9:ca:51:5b:9c:ad:94:65:19:
         6b:50:71:ca:e0:9c:aa:51:17:d2:ac:71:07:1e:cb:ac:54:a0:
         cc:30:55:df
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Mar 2 17:11:03 2026 by rpki-client