Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/42a8a836-8100-4561-9bfc-5462d4161596/e7297b92-13bc-3141-abe3-3ce60a3de965.roa
File:                     e7297b92-13bc-3141-abe3-3ce60a3de965.roa (raw, json)
Hash identifier:          QsbNEYL5qPyo1DBLNy4i5wGKeWi3tCiiKsHVmyzFbHw=
Subject key identifier:   1B:C8:29:A4:4A:84:C5:6E:ED:73:9B:77:E5:0B:E0:00:62:A7:FF:06
Certificate issuer:       /CN=42a8a836-8100-4561-9bfc-5462d4161596
Certificate serial:       010D0C9F4328584F4975B3B5FF6F4EA3BDEADE80
Authority key identifier: 6D:F4:C8:7A:66:1C:CA:E4:AF:0C:F8:4A:C5:4A:68:0D:E1:83:3F:5D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/42a8a836-8100-4561-9bfc-5462d4161596.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/42a8a836-8100-4561-9bfc-5462d4161596/e7297b92-13bc-3141-abe3-3ce60a3de965.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     4474
IP address blocks:        24.51.50.0/23 maxlen: 23
                          24.72.192.0/21 maxlen: 21
                          24.72.200.0/22 maxlen: 22
                          24.223.100.0/22 maxlen: 22
                          67.215.16.0/20 maxlen: 20
                          72.21.64.0/20 maxlen: 20
                          96.31.96.0/19 maxlen: 19
                          104.36.40.0/22 maxlen: 22
                          162.248.136.0/22 maxlen: 22
                          2604:8c00::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/42a8a836-8100-4561-9bfc-5462d4161596/42a8a836-8100-4561-9bfc-5462d4161596.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/42a8a836-8100-4561-9bfc-5462d4161596/42a8a836-8100-4561-9bfc-5462d4161596.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/42a8a836-8100-4561-9bfc-5462d4161596.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 09 Oct 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:75:b3:b5:ff:6f:4e:a3:bd:ea:de:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=42a8a836-8100-4561-9bfc-5462d4161596
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=7afccc50-a051-47f4-a655-9872407bcc0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:5f:5f:2a:fb:e3:4b:80:4f:a8:69:13:1b:ad:
                    03:5a:33:a9:e8:9a:3b:1f:32:94:79:18:21:d5:49:
                    f7:02:1a:dd:ca:fc:fa:78:c2:aa:33:0e:12:bc:6e:
                    60:f0:f4:e1:f0:7f:fe:ce:53:d8:93:25:15:58:bd:
                    82:03:e0:2b:93:97:1f:7c:7f:6a:ae:09:31:d8:ec:
                    fc:d9:88:73:83:4d:68:4a:a2:e3:bb:1d:84:7d:d4:
                    1d:71:44:ec:0b:76:98:9f:41:22:80:a0:65:22:de:
                    b5:32:e4:f8:1f:b9:84:c3:fc:b3:22:cd:bb:59:7c:
                    20:9a:0d:d8:5d:4c:f4:af:2f:c1:a6:f9:81:29:b0:
                    f9:28:5f:e7:cd:18:21:81:bc:51:33:aa:76:7a:ee:
                    45:0d:23:e6:fd:b1:3f:2c:fd:06:7f:04:f0:e4:99:
                    69:de:47:04:59:c5:90:23:ec:cb:fe:68:8a:2d:97:
                    63:2b:83:68:8d:09:ef:d2:ec:5c:cf:1d:46:78:69:
                    6d:f2:39:54:89:76:cb:fe:59:5a:93:d1:8e:e2:39:
                    ed:e0:14:dd:55:95:e8:67:c1:18:ea:b0:15:b5:03:
                    a9:54:98:34:87:7c:c3:cf:64:0e:c3:22:a0:9f:37:
                    20:68:a0:a3:91:2d:5a:84:bc:73:95:21:2d:83:10:
                    a1:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:C8:29:A4:4A:84:C5:6E:ED:73:9B:77:E5:0B:E0:00:62:A7:FF:06
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/42a8a836-8100-4561-9bfc-5462d4161596/e7297b92-13bc-3141-abe3-3ce60a3de965.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/42a8a836-8100-4561-9bfc-5462d4161596/42a8a836-8100-4561-9bfc-5462d4161596.crl

            X509v3 Authority Key Identifier:
                keyid:6D:F4:C8:7A:66:1C:CA:E4:AF:0C:F8:4A:C5:4A:68:0D:E1:83:3F:5D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/42a8a836-8100-4561-9bfc-5462d4161596.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.51.50.0/23
                  24.72.192.0-24.72.203.255
                  24.223.100.0/22
                  67.215.16.0/20
                  72.21.64.0/20
                  96.31.96.0/19
                  104.36.40.0/22
                  162.248.136.0/22
                IPv6:
                  2604:8c00::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4c:55:87:f2:20:40:4b:e8:f9:5e:6e:32:d4:94:0e:b0:16:39:
         bd:27:99:a4:45:e6:f5:d3:df:cc:59:54:2f:1b:55:d9:3f:84:
         7c:32:be:36:a5:fb:52:ad:91:e7:09:37:5b:ca:6a:de:99:99:
         62:1e:e2:1b:91:49:fd:b1:66:e4:35:5e:68:78:c3:b8:57:f3:
         45:f3:d9:67:78:2f:61:26:a5:e8:cc:a6:9a:b5:8d:03:c9:6b:
         ae:6c:c0:31:c4:2a:2c:b0:56:8a:fb:dc:30:98:d3:0e:c7:e9:
         56:fd:47:ae:74:8b:5b:2e:5e:b2:b2:00:3b:78:d4:4f:5b:4f:
         cb:95:a6:61:fa:c2:b6:97:1c:bb:09:05:4f:70:92:67:90:3d:
         11:40:1d:80:0c:75:f7:55:3a:2e:4e:9d:db:fe:53:ba:3b:d1:
         ab:49:4b:65:82:c3:3d:c0:ed:b1:a1:d5:04:ec:fc:5e:54:25:
         95:3f:10:69:e8:0f:73:26:a6:d4:c7:69:90:fc:9d:1d:df:53:
         ed:9f:8e:06:fb:b6:5a:a4:d4:8d:3c:3f:21:d3:c0:3a:67:62:
         3a:33:a6:5d:14:0f:c6:66:49:e8:75:0e:40:fe:9d:15:d9:9c:
         1d:ca:57:22:a3:4c:f0:4f:1b:3c:cc:0a:51:21:d6:1c:29:6c:
         d3:db:f9:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 09:09:34 2026 by rpki-client