Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b582df16-c65f-452f-ac4a-a1d3af6f8ad1/05d336eb-ac17-36e8-8c8a-e88aa38ae679.roa
File:                     05d336eb-ac17-36e8-8c8a-e88aa38ae679.roa (raw, json)
Hash identifier:          gJBglLJJT9pKGR+Kk9f9egIpDHkUROS9xMcjEnxg0bA=
Subject key identifier:   9C:6F:6E:6A:85:81:89:85:D6:32:1D:C4:84:74:49:8D:DC:0E:7E:46
Certificate issuer:       /CN=b582df16-c65f-452f-ac4a-a1d3af6f8ad1
Certificate serial:       010D0C9F4328584EE657446D4F5CB95A22910540
Authority key identifier: 0C:A5:67:C6:89:7E:DC:8D:0C:9A:C7:CB:B3:45:F8:EF:39:13:AD:B1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b582df16-c65f-452f-ac4a-a1d3af6f8ad1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b582df16-c65f-452f-ac4a-a1d3af6f8ad1/05d336eb-ac17-36e8-8c8a-e88aa38ae679.roa
Signing time:             Thu 20 Aug 2026 13:00:12 +0000
ROA not before:           Thu 20 Aug 2026 13:00:12 +0000
ROA not after:            Wed 18 Nov 2026 14:00:12 +0000
asID:                     53766
IP address blocks:        64.186.24.0/21 maxlen: 24
                          104.193.28.0/22 maxlen: 24
                          192.40.64.0/24 maxlen: 24
                          216.221.16.0/20 maxlen: 24
                          2605:a7c0::/32 maxlen: 48
                          2620:df:4000::/44 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b582df16-c65f-452f-ac4a-a1d3af6f8ad1/b582df16-c65f-452f-ac4a-a1d3af6f8ad1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b582df16-c65f-452f-ac4a-a1d3af6f8ad1/b582df16-c65f-452f-ac4a-a1d3af6f8ad1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b582df16-c65f-452f-ac4a-a1d3af6f8ad1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 02 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:e6:57:44:6d:4f:5c:b9:5a:22:91:05:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b582df16-c65f-452f-ac4a-a1d3af6f8ad1
        Validity
            Not Before: Aug 20 13:00:12 2026 GMT
            Not After : Nov 18 14:00:12 2026 GMT
        Subject: CN=631fcdcc-b838-40f2-b132-3dac9de6d5b4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:ba:68:6d:32:bb:d0:99:4c:bd:fe:f3:86:67:
                    e8:3b:35:ec:aa:cc:5a:18:08:56:14:cd:36:8e:7a:
                    0a:a9:35:6f:1e:5a:86:11:38:21:e8:4e:ac:4e:a8:
                    96:07:e1:f1:ee:d2:51:09:73:ac:e1:47:ec:40:43:
                    77:79:51:4d:06:16:ef:e7:37:88:46:74:85:ad:59:
                    f8:f4:db:22:ab:a9:15:ba:b8:71:66:fc:3b:aa:59:
                    e6:5d:72:dd:05:07:12:af:5b:f9:40:6b:6b:f4:6f:
                    39:70:84:50:7b:18:da:f1:af:6b:2d:4a:88:4c:78:
                    71:de:dc:f6:a1:bb:6d:52:92:60:fe:35:86:9f:57:
                    e5:74:d8:77:15:15:0c:66:a8:37:e6:80:7b:17:d3:
                    33:8f:5a:23:f3:d9:25:b7:83:0e:ea:89:57:1d:7e:
                    ce:00:2f:ca:e7:82:a4:8c:70:02:24:ea:dd:93:37:
                    02:4e:5f:fb:f0:8c:e9:b5:c2:0c:25:3e:9d:a6:e8:
                    cb:34:ff:d3:4a:3c:65:03:7d:60:9a:46:fd:f3:d4:
                    27:48:cb:54:37:47:ff:89:38:1d:cc:9f:ca:ea:90:
                    e5:3b:9a:fe:47:c9:f6:b1:68:86:cc:15:6d:89:e0:
                    f0:41:da:9e:28:e3:e0:8d:e5:03:33:ad:d5:b8:ee:
                    6d:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:6F:6E:6A:85:81:89:85:D6:32:1D:C4:84:74:49:8D:DC:0E:7E:46
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b582df16-c65f-452f-ac4a-a1d3af6f8ad1/05d336eb-ac17-36e8-8c8a-e88aa38ae679.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b582df16-c65f-452f-ac4a-a1d3af6f8ad1/b582df16-c65f-452f-ac4a-a1d3af6f8ad1.crl

            X509v3 Authority Key Identifier:
                keyid:0C:A5:67:C6:89:7E:DC:8D:0C:9A:C7:CB:B3:45:F8:EF:39:13:AD:B1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b582df16-c65f-452f-ac4a-a1d3af6f8ad1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.186.24.0/21
                  104.193.28.0/22
                  192.40.64.0/24
                  216.221.16.0/20
                IPv6:
                  2605:a7c0::/32
                  2620:df:4000::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         bc:b6:19:28:64:80:f4:17:1b:89:32:a8:1f:42:4f:e0:72:36:
         ce:35:16:23:a8:c2:24:03:17:4b:c0:32:64:ce:2d:99:cf:ec:
         c0:cb:07:c7:4f:93:5a:78:67:6b:ec:7c:c1:8b:c1:dd:fe:60:
         77:db:e6:3d:41:1c:0d:7a:12:79:30:d6:6b:fa:e2:58:2d:fc:
         55:3f:6d:92:c5:83:54:65:66:db:f5:77:53:3a:85:64:ad:78:
         fd:73:3f:0f:bc:9b:d1:10:d1:69:03:4b:be:9e:83:3f:e8:f6:
         d9:9f:eb:a5:71:cd:a8:ec:f0:db:61:fe:fe:eb:ea:3c:4e:09:
         30:8f:be:b8:6d:8b:55:e1:5a:3c:0d:b0:61:59:76:ef:85:9a:
         f1:38:3a:51:17:e7:23:24:33:a6:58:40:47:44:07:65:c6:7b:
         68:f9:32:7f:b6:ba:c4:0b:1f:dd:e6:77:73:71:26:a4:a9:d1:
         e9:38:06:94:93:d0:15:23:56:0e:74:26:8d:ea:77:30:22:8e:
         6f:61:65:8d:0d:b4:bb:d2:ea:7d:07:36:a7:27:d1:eb:78:6d:
         e7:14:3c:a6:e6:88:f5:a5:70:19:5b:4f:eb:b2:5f:fe:6f:e2:
         bd:22:db:c3:0a:46:ac:97:f6:7c:a3:6b:1c:74:2a:3c:1d:f0:
         4a:e1:73:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 1 15:35:16 2026 by rpki-client