Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b6f28d10-5739-4e40-a446-935c60d79169/1321ac84-55e5-32cc-9b4b-9d8b72e1473d.roa
File:                     1321ac84-55e5-32cc-9b4b-9d8b72e1473d.roa (raw, json)
Hash identifier:          lrSx55jKkZYUTQxBTqMioZMTVVSBGqw5cQxDFLiRRKg=
Subject key identifier:   15:CC:49:9E:40:77:6B:AF:52:79:B0:B1:15:5B:75:BE:04:06:04:3F
Certificate issuer:       /CN=b6f28d10-5739-4e40-a446-935c60d79169
Certificate serial:       010D0C9F4328584DD625C7B4F816062A1ED53460
Authority key identifier: E8:EA:CF:14:D1:FD:74:AB:31:C2:B1:A6:F0:7E:AF:A6:44:84:08:14
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b6f28d10-5739-4e40-a446-935c60d79169.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b6f28d10-5739-4e40-a446-935c60d79169/1321ac84-55e5-32cc-9b4b-9d8b72e1473d.roa
Signing time:             Fri 15 May 2026 01:00:24 +0000
ROA not before:           Fri 15 May 2026 01:00:24 +0000
ROA not after:            Thu 13 Aug 2026 01:00:24 +0000
asID:                     1403
IP address blocks:        66.129.132.0/24 maxlen: 24
                          66.129.134.0/24 maxlen: 24
                          66.129.135.0/24 maxlen: 24
                          66.129.138.0/24 maxlen: 24
                          66.129.139.0/24 maxlen: 24
                          66.129.140.0/24 maxlen: 24
                          66.129.141.0/24 maxlen: 24
                          66.129.142.0/24 maxlen: 24
                          66.129.144.0/24 maxlen: 24
                          66.129.148.0/24 maxlen: 24
                          66.129.149.0/24 maxlen: 24
                          66.129.150.0/24 maxlen: 24
                          66.129.151.0/24 maxlen: 24
                          66.129.152.0/22 maxlen: 24
                          66.129.156.0/24 maxlen: 24
                          66.129.157.0/24 maxlen: 24
                          66.129.158.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b6f28d10-5739-4e40-a446-935c60d79169/b6f28d10-5739-4e40-a446-935c60d79169.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b6f28d10-5739-4e40-a446-935c60d79169/b6f28d10-5739-4e40-a446-935c60d79169.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b6f28d10-5739-4e40-a446-935c60d79169.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 15 Jun 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:d6:25:c7:b4:f8:16:06:2a:1e:d5:34:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b6f28d10-5739-4e40-a446-935c60d79169
        Validity
            Not Before: May 15 01:00:24 2026 GMT
            Not After : Aug 13 01:00:24 2026 GMT
        Subject: CN=4695549b-801d-4f1e-b12f-2477b62fc852
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:c9:e8:da:3a:28:1e:88:b8:22:eb:53:e9:9d:
                    b3:4b:49:9f:eb:b7:14:79:21:21:ad:b2:b0:d5:a9:
                    f5:e7:6b:3d:0b:ab:49:31:d9:65:ce:21:d8:a6:c7:
                    a4:18:bb:6d:f7:5e:e0:db:fa:dd:63:28:e9:bf:d7:
                    25:1b:ed:72:7b:08:ac:3c:85:e9:33:14:8e:ef:f6:
                    84:5c:a1:85:61:85:f7:d0:dc:3f:c1:38:08:62:81:
                    51:30:49:09:36:16:2e:86:a8:5b:7b:aa:e6:7a:09:
                    41:50:00:7f:81:e9:66:dd:6d:40:63:cd:1e:d2:15:
                    33:08:49:6e:3b:63:5d:98:3a:3a:b6:c7:6d:fb:6d:
                    70:da:97:7f:55:a9:f3:fc:26:cf:f9:fc:7e:9b:b2:
                    53:cc:3f:db:38:49:a7:6d:46:28:bd:f1:09:b9:1b:
                    f2:6f:1c:a7:a9:74:22:52:1d:bf:dc:5f:4e:0c:0d:
                    44:d3:b8:bd:28:6b:b4:9d:d4:13:c1:64:7d:63:d4:
                    03:01:9b:52:53:fa:11:e8:98:0f:36:30:3f:f3:7f:
                    c9:bf:a9:8a:fa:4d:08:16:a3:b9:e6:fe:17:58:ca:
                    a8:87:1e:2f:a1:1e:dd:d5:ae:40:e6:41:31:54:11:
                    8e:2c:e2:65:24:f0:81:64:c3:6c:f4:a4:11:7c:ba:
                    60:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:CC:49:9E:40:77:6B:AF:52:79:B0:B1:15:5B:75:BE:04:06:04:3F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b6f28d10-5739-4e40-a446-935c60d79169/1321ac84-55e5-32cc-9b4b-9d8b72e1473d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b6f28d10-5739-4e40-a446-935c60d79169/b6f28d10-5739-4e40-a446-935c60d79169.crl

            X509v3 Authority Key Identifier:
                keyid:E8:EA:CF:14:D1:FD:74:AB:31:C2:B1:A6:F0:7E:AF:A6:44:84:08:14

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b6f28d10-5739-4e40-a446-935c60d79169.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.129.132.0/24
                  66.129.134.0/23
                  66.129.138.0-66.129.142.255
                  66.129.144.0/24
                  66.129.148.0-66.129.158.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5c:f3:f2:8f:ba:33:7d:58:5d:35:a5:f4:c2:c0:22:cb:1a:bb:
         59:60:41:60:e4:69:fc:0f:63:6a:69:ea:2b:d2:f5:94:87:49:
         40:7d:af:8b:c2:6f:de:a4:75:01:50:e5:2d:21:c9:a7:87:cb:
         ca:ae:bf:c8:68:86:8e:36:89:b7:3a:22:11:06:5a:d7:b0:fe:
         4a:d4:51:93:fa:2c:95:58:e1:ce:28:d3:9b:26:cd:7a:0e:71:
         c7:46:6b:7d:ef:2d:a7:75:52:82:93:0d:b5:16:14:0f:57:70:
         de:47:3a:2b:2e:9e:da:a7:1b:c4:68:25:17:8a:01:48:45:fa:
         d4:21:86:02:35:ba:44:81:eb:14:73:b9:67:05:c4:22:5b:72:
         44:c8:3e:7c:46:bb:10:08:92:8f:3c:19:7e:63:45:40:75:b4:
         06:9f:07:13:78:17:8d:25:a8:97:e3:e5:8a:fe:eb:05:97:0f:
         99:34:42:d5:9c:23:cb:30:b9:b5:74:cb:e3:19:ba:cc:b7:cc:
         4d:0d:77:33:81:63:69:1f:5c:2e:3b:a3:23:8a:cb:f6:2d:53:
         db:93:0f:81:5b:fd:93:d9:2c:b7:8b:08:5e:e7:a9:79:b7:8d:
         f8:62:6b:08:5f:eb:ba:0e:44:3f:b2:a0:e3:ae:04:90:22:da:
         4c:9b:5e:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 21:43:11 2026 by rpki-client