Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388/74043b36-4da5-3e84-b21c-ebd4075cbecb.roa
File:                     74043b36-4da5-3e84-b21c-ebd4075cbecb.roa (raw, json)
Hash identifier:          XI2kqlm0y/fpixI8UvVinUbp0NctLAD9kMkb+FGBZm4=
Subject key identifier:   07:A9:95:4B:1D:0C:C3:36:A0:91:08:00:68:C9:10:FC:0E:3E:D1:24
Certificate issuer:       /CN=86fea470-b380-45c0-9f6b-033b7d884388
Certificate serial:       010D0C9F4328584E296F13828FE9749F3696D970
Authority key identifier: 08:74:8A:31:09:3C:2C:49:44:A1:2E:8A:D6:5C:9E:92:04:01:CF:16
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388/74043b36-4da5-3e84-b21c-ebd4075cbecb.roa
Signing time:             Sat 13 Jun 2026 21:00:12 +0000
ROA not before:           Sat 13 Jun 2026 21:00:12 +0000
ROA not after:            Fri 11 Sep 2026 21:00:12 +0000
asID:                     33333
IP address blocks:        67.220.64.0/19 maxlen: 24
                          68.168.16.0/20 maxlen: 24
                          69.42.208.0/20 maxlen: 24
                          186.190.208.0/20 maxlen: 24
                          2607:3b40::/32 maxlen: 48
                          2607:f5a0::/32 maxlen: 48
                          2607:ffd8::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388/86fea470-b380-45c0-9f6b-033b7d884388.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388/86fea470-b380-45c0-9f6b-033b7d884388.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 16 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:29:6f:13:82:8f:e9:74:9f:36:96:d9:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=86fea470-b380-45c0-9f6b-033b7d884388
        Validity
            Not Before: Jun 13 21:00:12 2026 GMT
            Not After : Sep 11 21:00:12 2026 GMT
        Subject: CN=eb5935c8-c1ee-48b5-829e-0445d55ae4bf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:77:cd:51:2d:b0:a7:b5:e2:0d:f2:c8:c4:d2:
                    41:8a:49:f2:92:06:23:4a:ff:00:e4:af:28:02:e3:
                    00:c4:e7:2c:54:ec:72:e7:f2:cf:96:7e:47:3b:02:
                    51:1e:45:5a:ba:3a:01:4b:98:b3:13:b9:14:9b:46:
                    cb:e2:7e:41:ba:43:4d:ef:be:cd:f1:ee:d6:b4:2f:
                    e0:97:e3:f7:df:29:ce:48:ea:ba:04:78:bc:79:9f:
                    d2:3b:3e:65:fb:f1:6f:58:21:5e:ca:db:58:75:9e:
                    c5:19:95:f5:9a:91:0a:80:26:8f:81:a7:b4:5b:06:
                    5e:25:3d:96:a0:02:7e:2d:5a:ef:55:59:cc:08:0e:
                    13:77:3d:21:8c:30:6f:b3:9d:87:8f:9d:d0:72:3e:
                    d7:d7:97:58:68:16:4c:82:53:63:50:d3:3d:5f:f3:
                    e8:38:74:ab:fc:36:e6:88:6a:66:bb:11:bf:6c:19:
                    86:2b:49:47:ac:d9:cd:a7:38:93:d9:08:b5:c4:57:
                    e4:60:0a:ce:5b:29:e5:6f:88:6a:48:76:47:9d:2b:
                    8b:67:73:11:55:d9:dc:d1:69:f1:c6:1e:5b:65:ca:
                    37:20:fc:ff:fb:95:ce:87:f2:c8:af:db:47:d6:53:
                    45:79:dc:54:49:06:4e:ce:9c:56:40:6e:0c:58:aa:
                    5d:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:A9:95:4B:1D:0C:C3:36:A0:91:08:00:68:C9:10:FC:0E:3E:D1:24
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388/74043b36-4da5-3e84-b21c-ebd4075cbecb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388/86fea470-b380-45c0-9f6b-033b7d884388.crl

            X509v3 Authority Key Identifier:
                keyid:08:74:8A:31:09:3C:2C:49:44:A1:2E:8A:D6:5C:9E:92:04:01:CF:16

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.220.64.0/19
                  68.168.16.0/20
                  69.42.208.0/20
                  186.190.208.0/20
                IPv6:
                  2607:3b40::/32
                  2607:f5a0::/32
                  2607:ffd8::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         65:28:8a:07:ed:03:9a:4e:ce:da:88:04:88:39:fe:12:4d:d8:
         1a:aa:de:0b:64:72:de:cd:8a:ea:45:59:df:af:55:ea:6f:d3:
         bc:77:3c:a8:af:f2:c4:61:a9:91:0e:b4:3f:43:a6:9e:73:7c:
         b9:ec:26:3b:59:a6:be:64:9f:18:ef:e8:6a:16:5c:31:48:cc:
         74:1b:97:f6:e3:ed:7e:56:c9:78:14:1f:69:53:15:96:fe:7d:
         67:a4:57:7c:cb:12:44:e8:90:dc:96:f0:d1:42:d7:72:be:90:
         e0:5b:d7:c3:e2:4f:b9:6c:74:72:2d:22:72:03:50:c1:53:bd:
         f1:2a:a8:84:bf:20:d7:90:7c:98:91:ab:e1:4d:a5:94:ea:aa:
         a0:31:45:ec:49:f8:d0:12:e7:da:ee:cc:01:15:e7:4a:f9:d0:
         e8:75:5f:db:c9:4f:ec:89:dd:32:f0:11:ec:81:40:58:f3:ae:
         1c:62:17:95:be:58:66:b1:92:ff:76:19:d5:1a:54:ae:90:7a:
         fe:f3:ba:36:6b:50:f3:ec:55:10:ae:06:a0:55:8a:0c:79:84:
         d8:f5:e6:bb:66:bb:00:9f:b9:de:cf:a2:12:ff:8b:0c:38:5a:
         46:7a:f7:89:8c:d2:0c:84:ef:0d:76:84:7e:b9:80:aa:b7:66:
         fa:29:4e:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 03:30:14 2026 by rpki-client