Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0339efaa-3121-4a82-8dd8-192f56ab47d1/87d989dd-6dd1-3c13-b2ae-9c86ca9e2b9d.roa
File:                     87d989dd-6dd1-3c13-b2ae-9c86ca9e2b9d.roa (raw, json)
Hash identifier:          /8XlbGz/kYWMjtoem/vMxHSiINsKg4DhrTFSkhjYSf4=
Subject key identifier:   C0:99:96:95:DF:BC:2C:46:ED:B4:1E:60:8F:C5:A9:B0:B5:4A:8C:68
Certificate issuer:       /CN=0339efaa-3121-4a82-8dd8-192f56ab47d1
Certificate serial:       010D0C9F4328584F3FAD353A62B2FDB3DC2ABBA0
Authority key identifier: B7:D4:2E:91:48:02:33:18:5A:64:6C:A5:2B:0C:93:B7:AF:1F:EC:B3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0339efaa-3121-4a82-8dd8-192f56ab47d1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0339efaa-3121-4a82-8dd8-192f56ab47d1/87d989dd-6dd1-3c13-b2ae-9c86ca9e2b9d.roa
Signing time:             Mon 21 Sep 2026 13:00:12 +0000
ROA not before:           Mon 21 Sep 2026 13:00:12 +0000
ROA not after:            Sun 20 Dec 2026 14:00:12 +0000
asID:                     3477
IP address blocks:        198.177.182.0/24 maxlen: 24
                          198.200.151.0/24 maxlen: 24
                          199.104.104.0/24 maxlen: 24
                          199.104.105.0/24 maxlen: 24
                          204.145.202.0/24 maxlen: 24
                          204.228.170.0/24 maxlen: 24
                          204.228.175.0/24 maxlen: 24
                          204.228.176.0/24 maxlen: 24
                          204.228.177.0/24 maxlen: 24
                          204.228.178.0/24 maxlen: 24
                          204.228.179.0/24 maxlen: 24
                          204.228.180.0/24 maxlen: 24
                          204.228.181.0/24 maxlen: 24
                          204.228.182.0/24 maxlen: 24
                          204.228.183.0/24 maxlen: 24
                          204.228.184.0/24 maxlen: 24
                          204.228.185.0/24 maxlen: 24
                          204.228.186.0/24 maxlen: 24
                          204.228.187.0/24 maxlen: 24
                          204.228.188.0/24 maxlen: 24
                          204.228.189.0/24 maxlen: 24
                          204.228.190.0/24 maxlen: 24
                          204.228.191.0/24 maxlen: 24
                          204.238.94.0/24 maxlen: 24
                          204.238.123.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0339efaa-3121-4a82-8dd8-192f56ab47d1/0339efaa-3121-4a82-8dd8-192f56ab47d1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0339efaa-3121-4a82-8dd8-192f56ab47d1/0339efaa-3121-4a82-8dd8-192f56ab47d1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0339efaa-3121-4a82-8dd8-192f56ab47d1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Sep 2026 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:3f:ad:35:3a:62:b2:fd:b3:dc:2a:bb:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0339efaa-3121-4a82-8dd8-192f56ab47d1
        Validity
            Not Before: Sep 21 13:00:12 2026 GMT
            Not After : Dec 20 14:00:12 2026 GMT
        Subject: CN=6673719e-4509-4eac-9757-7137d45f7269
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:75:c9:e5:7a:89:27:5a:40:16:1b:72:eb:c2:
                    09:d2:19:3a:dc:c6:1f:b8:59:76:4a:0e:9e:61:5d:
                    20:d5:fb:05:01:f0:c2:4c:27:b7:73:42:c8:df:f4:
                    5c:94:1c:2e:f7:2b:a6:2c:9e:cc:40:6d:e8:9a:b9:
                    eb:4a:15:8b:c5:5d:59:10:c4:75:20:9f:91:ab:13:
                    61:55:52:2c:f8:7a:97:bb:1e:9b:99:ad:c0:c5:d1:
                    50:32:f0:bd:58:da:61:5e:d5:42:f3:ac:ee:bf:f9:
                    37:be:58:f9:f6:d9:32:f8:00:56:15:1f:15:73:55:
                    b3:78:62:24:af:dd:46:78:c1:27:7b:dc:ab:ad:a0:
                    88:a2:a3:92:8f:f7:cb:fd:a8:b1:4e:c5:a5:ab:5e:
                    82:a3:90:28:02:0a:4a:2d:bc:29:cf:a3:78:47:5a:
                    df:9e:4f:88:b1:55:38:9e:e6:d3:1a:ff:bc:92:02:
                    ea:06:48:b9:c0:e5:fd:e0:57:d5:b6:d8:a8:9c:35:
                    90:a9:64:8d:9b:81:07:e1:c7:87:bf:6b:83:54:f1:
                    ce:26:4a:c1:67:e8:84:cd:e2:be:fb:1b:e5:9c:83:
                    0d:d8:a5:af:3d:6c:72:a8:a2:6a:e1:f8:04:2a:d2:
                    55:ff:3a:49:e7:42:69:cf:73:1e:cd:f5:09:2d:57:
                    16:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:99:96:95:DF:BC:2C:46:ED:B4:1E:60:8F:C5:A9:B0:B5:4A:8C:68
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0339efaa-3121-4a82-8dd8-192f56ab47d1/87d989dd-6dd1-3c13-b2ae-9c86ca9e2b9d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0339efaa-3121-4a82-8dd8-192f56ab47d1/0339efaa-3121-4a82-8dd8-192f56ab47d1.crl

            X509v3 Authority Key Identifier:
                keyid:B7:D4:2E:91:48:02:33:18:5A:64:6C:A5:2B:0C:93:B7:AF:1F:EC:B3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0339efaa-3121-4a82-8dd8-192f56ab47d1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.177.182.0/24
                  198.200.151.0/24
                  199.104.104.0/23
                  204.145.202.0/24
                  204.228.170.0/24
                  204.228.175.0-204.228.191.255
                  204.238.94.0/24
                  204.238.123.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2c:67:54:b4:07:55:31:ba:59:a9:f5:64:6f:d2:34:8d:2f:af:
         03:ce:d3:55:e1:1c:52:c1:89:1b:4d:de:61:a3:79:93:24:50:
         35:5b:16:69:25:44:7b:c6:08:88:9f:a5:7b:6c:19:03:1e:2e:
         c4:8b:92:6c:36:ea:23:b6:d5:b1:1d:53:f2:7e:49:73:25:c4:
         c1:c1:6c:14:93:84:94:d7:cc:87:82:e7:d2:5d:f7:84:1a:e7:
         cc:0b:33:5b:2e:db:de:89:d7:79:39:8e:f7:80:af:90:3e:4f:
         30:5c:21:82:62:f2:e9:48:4b:40:17:06:94:fb:4d:a3:e3:79:
         52:ef:94:28:1d:31:09:85:56:a3:23:a3:52:90:b8:34:eb:4f:
         3e:df:8d:75:65:3a:9e:5e:c0:f9:6c:f2:b9:e0:5f:e9:e9:76:
         6e:95:5a:fa:4b:ab:70:f2:6e:0a:0d:14:03:3a:fa:a7:49:a2:
         c5:25:e8:d8:b7:5d:1c:10:91:7f:b2:93:f8:5e:71:72:da:a4:
         1e:33:dd:e2:09:ce:63:fa:e0:ed:87:c0:a3:8d:24:fe:c6:53:
         75:9e:86:df:63:4e:90:5f:ae:18:e4:67:08:32:e7:96:dc:f8:
         35:b3:26:5f:dd:2a:fe:37:3f:5d:83:e5:7b:4d:30:13:81:ba:
         eb:2a:ba:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 14:59:07 2026 by rpki-client