Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f5dd2f3b-d544-4a90-84a5-58af0db84dab/4e82ae5d-7c5c-3645-8221-7761cbbab068.roa
File:                     4e82ae5d-7c5c-3645-8221-7761cbbab068.roa (raw, json)
Hash identifier:          TL0qj82kIJldBT77+MkNXrXs3D149Ar9RAx5CcfuaYE=
Subject key identifier:   3A:08:9F:06:5D:2C:3A:C5:92:32:C8:60:68:EC:38:1E:40:03:E8:3B
Certificate issuer:       /CN=f5dd2f3b-d544-4a90-84a5-58af0db84dab
Certificate serial:       010D0C9F4328584CAA2707361B2EFBBB19BE9980
Authority key identifier: 2A:21:7E:D8:28:3A:D2:41:FE:CF:E5:E9:1D:32:3F:C0:B7:8A:F7:0B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f5dd2f3b-d544-4a90-84a5-58af0db84dab.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f5dd2f3b-d544-4a90-84a5-58af0db84dab/4e82ae5d-7c5c-3645-8221-7761cbbab068.roa
Signing time:             Tue 27 Jan 2026 14:00:36 +0000
ROA not before:           Tue 27 Jan 2026 14:00:36 +0000
ROA not after:            Mon 27 Apr 2026 13:00:36 +0000
asID:                     11961
IP address blocks:        64.89.208.0/20 maxlen: 24
                          72.250.128.0/19 maxlen: 24
                          108.59.112.0/20 maxlen: 24
                          216.228.32.0/19 maxlen: 24
                          2607:8380::/32 maxlen: 56
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f5dd2f3b-d544-4a90-84a5-58af0db84dab/f5dd2f3b-d544-4a90-84a5-58af0db84dab.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f5dd2f3b-d544-4a90-84a5-58af0db84dab/f5dd2f3b-d544-4a90-84a5-58af0db84dab.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f5dd2f3b-d544-4a90-84a5-58af0db84dab.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:aa:27:07:36:1b:2e:fb:bb:19:be:99:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f5dd2f3b-d544-4a90-84a5-58af0db84dab
        Validity
            Not Before: Jan 27 14:00:36 2026 GMT
            Not After : Apr 27 13:00:36 2026 GMT
        Subject: CN=89d555c5-f1ec-4ba8-8690-0bc905ed10c5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:0f:97:f0:5d:a4:26:5b:b4:43:9f:77:4d:ac:
                    6b:47:45:c5:6b:81:4c:51:9b:1e:1a:a0:bb:e3:dc:
                    cc:49:f5:29:da:24:6d:c7:9d:db:c9:89:42:2a:69:
                    1e:85:5b:fc:76:b6:7a:cd:bf:95:5e:59:d0:3c:d8:
                    4a:ec:50:6d:04:87:7b:36:90:65:52:55:33:49:48:
                    7b:95:2b:4f:23:a4:5f:47:4b:29:f9:4f:df:3c:89:
                    6f:67:40:1d:b6:4c:cb:7b:b0:03:ff:77:24:5b:26:
                    42:28:c2:7f:ce:43:1c:fc:39:25:1e:73:ea:60:86:
                    a5:59:29:04:6e:05:27:25:60:18:ad:f6:eb:9f:08:
                    43:51:1a:b8:b6:4c:a6:b0:5d:9f:84:6b:df:da:f3:
                    3f:ff:99:dc:44:98:ef:a4:07:1c:c1:59:35:73:9b:
                    af:ca:15:ed:29:dd:1e:fe:98:6d:a0:c7:e7:96:ae:
                    b9:78:f7:7c:a3:ea:3a:58:64:a7:fd:bf:8c:ea:40:
                    f8:f2:b2:23:ef:97:2f:27:07:21:aa:04:5e:70:2f:
                    f3:1c:a4:26:81:d0:19:ab:61:7f:8e:32:35:fb:32:
                    f7:b2:1f:0e:d7:f4:5f:c0:d7:48:12:32:6b:a9:8c:
                    1c:d8:35:dc:79:dc:68:bc:ab:82:a1:d9:a5:52:71:
                    59:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:08:9F:06:5D:2C:3A:C5:92:32:C8:60:68:EC:38:1E:40:03:E8:3B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f5dd2f3b-d544-4a90-84a5-58af0db84dab/4e82ae5d-7c5c-3645-8221-7761cbbab068.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f5dd2f3b-d544-4a90-84a5-58af0db84dab/f5dd2f3b-d544-4a90-84a5-58af0db84dab.crl

            X509v3 Authority Key Identifier:
                keyid:2A:21:7E:D8:28:3A:D2:41:FE:CF:E5:E9:1D:32:3F:C0:B7:8A:F7:0B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f5dd2f3b-d544-4a90-84a5-58af0db84dab.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.89.208.0/20
                  72.250.128.0/19
                  108.59.112.0/20
                  216.228.32.0/19
                IPv6:
                  2607:8380::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         91:c9:89:ef:38:51:3e:0a:f9:99:10:d3:f3:49:80:c1:0e:58:
         99:a0:cc:37:34:6b:a9:95:19:a4:24:74:05:da:6d:4f:d1:d3:
         f0:56:c0:b7:51:c3:e1:a7:f6:9d:14:85:43:55:ac:02:79:29:
         5e:74:03:5b:86:0d:e7:09:24:4e:cb:5a:cc:65:63:7c:c8:99:
         c9:71:db:84:5a:82:a9:68:e6:db:2e:ae:86:d3:d8:26:fa:7c:
         4f:c1:d4:33:b3:db:5b:e9:28:f0:3b:ed:a8:26:35:f0:3e:e1:
         2d:18:58:5c:7e:11:c8:45:a2:f0:88:ff:ea:9a:59:09:f4:99:
         aa:03:6b:bd:d3:cc:4a:d9:1e:1e:f1:0b:01:3a:27:f4:60:a2:
         a3:6b:a1:59:bb:12:ad:d0:9a:bb:20:5a:f4:d3:4b:09:ab:4b:
         05:ee:a9:01:f6:9e:04:45:02:88:13:41:84:60:31:9b:1a:5a:
         d8:13:f4:89:50:42:98:a4:94:01:22:b3:cd:8c:f8:82:66:cb:
         93:98:fc:f6:6a:71:50:fa:4a:7c:2e:e5:5f:5a:79:6c:72:c8:
         4d:66:fd:9b:cc:47:4b:9d:c4:7c:d3:f3:d1:3c:7e:62:a1:31:
         84:16:77:6e:b7:f3:cb:ed:04:42:05:f6:73:e5:a0:2d:c5:66:
         cc:b0:62:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 18:33:27 2026 by rpki-client