Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8/bb12e068-974d-3f9d-afd2-9beed92e7d2e.roa
File:                     bb12e068-974d-3f9d-afd2-9beed92e7d2e.roa (raw, json)
Hash identifier:          u/PQnF7O4F1GmHHUOkyAZTr89WSje06ZyFYEN4AOL+c=
Subject key identifier:   74:C5:52:CD:B8:9B:1F:E5:11:98:FF:98:17:8B:57:BA:0D:CF:4A:26
Certificate issuer:       /CN=314186df-87ba-4dd5-adbf-1c6c2bbe04a8
Certificate serial:       010D0C9F4328584CEDC53AD95A3FBA7B8268EC00
Authority key identifier: 52:15:C8:9B:51:37:0E:94:F1:AB:C2:AF:7D:C8:F6:BB:E1:F2:E5:6F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8/bb12e068-974d-3f9d-afd2-9beed92e7d2e.roa
Signing time:             Sun 11 Jan 2026 14:00:39 +0000
ROA not before:           Sun 11 Jan 2026 14:00:39 +0000
ROA not after:            Sat 11 Apr 2026 13:00:39 +0000
asID:                     7018
IP address blocks:        23.112.0.0/12 maxlen: 12
                          45.16.0.0/12 maxlen: 12
                          99.0.0.0/13 maxlen: 13
                          99.32.0.0/12 maxlen: 12
                          99.96.0.0/13 maxlen: 13
                          99.112.0.0/12 maxlen: 12
                          104.0.0.0/12 maxlen: 12
                          104.48.0.0/12 maxlen: 12
                          104.176.0.0/12 maxlen: 12
                          107.128.0.0/12 maxlen: 12
                          107.192.0.0/12 maxlen: 12
                          107.208.0.0/12 maxlen: 12
                          162.224.0.0/12 maxlen: 12
                          172.0.0.0/12 maxlen: 12
                          184.128.0.0/12 maxlen: 12
                          2600:1700::/28 maxlen: 28
                          2602:300::/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:ed:c5:3a:d9:5a:3f:ba:7b:82:68:ec:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=314186df-87ba-4dd5-adbf-1c6c2bbe04a8
        Validity
            Not Before: Jan 11 14:00:39 2026 GMT
            Not After : Apr 11 13:00:39 2026 GMT
        Subject: CN=7e02bd32-93bb-4a76-acfc-914739b6267f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:1f:46:d8:2b:fe:ad:53:cd:1b:73:4d:a1:7c:
                    c4:49:cf:56:ab:91:0b:a0:15:36:95:b9:f6:c0:df:
                    7e:e3:fb:ba:89:c4:c6:3a:63:10:a1:18:f4:18:7a:
                    e9:ba:e5:15:42:45:58:bf:d9:f6:77:36:e6:ba:36:
                    52:06:48:53:e6:2d:4a:d5:93:8a:ca:0f:79:d2:71:
                    47:68:25:01:f5:5f:65:f3:f2:22:c2:38:42:96:40:
                    f3:ef:2b:78:f8:e1:d5:f7:7c:a3:08:2c:e8:04:68:
                    78:fb:1e:7d:b3:6b:fc:02:74:f1:45:6b:40:f1:7a:
                    4f:ca:02:c3:a2:4d:e1:8c:63:2c:35:00:1c:b8:d7:
                    15:54:e7:27:f4:3a:74:e7:79:e9:9e:82:da:14:76:
                    81:c6:ee:bf:7a:2e:7b:35:18:99:00:c1:2d:55:dc:
                    d0:d7:c3:a4:25:e1:e8:e6:15:ae:b0:82:2c:02:a2:
                    e7:4c:27:2b:0d:b3:d4:bf:3a:04:c6:b3:7e:2f:1d:
                    75:22:b7:c0:46:52:70:5d:47:d2:89:ba:51:85:18:
                    5f:08:90:98:3d:b5:b0:94:12:7a:6a:e8:17:a3:60:
                    8b:c9:07:35:38:e4:72:2e:5e:e6:54:82:5b:41:8f:
                    c4:5b:e3:cb:39:08:93:76:db:66:3b:4d:47:62:bb:
                    08:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:C5:52:CD:B8:9B:1F:E5:11:98:FF:98:17:8B:57:BA:0D:CF:4A:26
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8/bb12e068-974d-3f9d-afd2-9beed92e7d2e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8.crl

            X509v3 Authority Key Identifier:
                keyid:52:15:C8:9B:51:37:0E:94:F1:AB:C2:AF:7D:C8:F6:BB:E1:F2:E5:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.112.0.0/12
                  45.16.0.0/12
                  99.0.0.0/13
                  99.32.0.0/12
                  99.96.0.0/13
                  99.112.0.0/12
                  104.0.0.0/12
                  104.48.0.0/12
                  104.176.0.0/12
                  107.128.0.0/12
                  107.192.0.0/11
                  162.224.0.0/12
                  172.0.0.0/12
                  184.128.0.0/12
                IPv6:
                  2600:1700::/28
                  2602:300::/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         07:dd:eb:d5:a4:36:de:50:0c:f9:3c:04:3b:76:48:04:d1:ae:
         4b:7c:ec:69:62:d9:b9:d8:e9:58:64:d8:7e:82:eb:c5:7c:a4:
         24:14:4c:70:ac:2b:79:7c:63:de:96:1c:18:c5:6f:f8:c7:03:
         2f:84:e4:2d:da:e6:2e:2d:25:87:49:f2:40:fe:ee:92:cf:25:
         f6:e8:a1:c7:7b:e6:eb:42:4b:ab:9c:09:df:b2:f3:e7:5c:2d:
         84:dc:4b:63:5c:3f:5f:57:42:94:81:be:8e:08:d3:da:c9:78:
         15:7e:52:f9:14:21:6c:4c:c2:fe:01:00:4b:6d:cf:b3:52:77:
         06:42:d4:43:14:5d:89:91:dc:ce:af:2a:9d:36:0f:ff:47:03:
         76:a8:90:7e:58:a5:4e:d5:d0:e9:49:e1:82:43:c4:0b:93:1e:
         14:d5:e1:3f:29:43:56:12:dd:79:ed:e4:ef:6d:ae:a3:68:4a:
         29:6b:0d:dc:30:3a:ba:00:0a:2b:7d:9a:13:d7:c5:ff:a6:73:
         c6:e9:09:f2:32:c6:67:a0:94:59:d8:58:54:9a:74:26:c6:e8:
         f5:8f:8d:77:32:94:0b:30:a8:b7:8e:fd:f6:ee:97:8d:32:25:
         a0:f9:99:34:1f:84:ea:cb:f1:73:36:21:f5:8d:07:dc:fb:55:
         a8:b7:a9:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 18:30:25 2026 by rpki-client