Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8583e379-1578-4044-8426-ddcb4a4a8192/5339e6b4-20a4-3e12-b267-e7013b1ce0d7.roa
File:                     5339e6b4-20a4-3e12-b267-e7013b1ce0d7.roa (raw, json)
Hash identifier:          0xlmdWdWENM8hmkJ/zUxo5rDszr8oewT6WHmV6ILP/A=
Subject key identifier:   60:43:60:4A:74:FD:49:50:29:61:E5:87:EB:BE:C9:77:BD:B2:0E:00
Certificate issuer:       /CN=8583e379-1578-4044-8426-ddcb4a4a8192
Certificate serial:       010D0C9F4328584CFC82335D2F40864FFDA38800
Authority key identifier: 89:C7:5F:3F:CE:A7:5D:0D:C3:10:F9:23:2C:65:92:27:0C:63:1D:62
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8583e379-1578-4044-8426-ddcb4a4a8192.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8583e379-1578-4044-8426-ddcb4a4a8192/5339e6b4-20a4-3e12-b267-e7013b1ce0d7.roa
Signing time:             Thu 26 Feb 2026 02:00:32 +0000
ROA not before:           Thu 26 Feb 2026 02:00:32 +0000
ROA not after:            Wed 27 May 2026 01:00:32 +0000
asID:                     64200
IP address blocks:        67.21.34.0/23 maxlen: 24
                          192.154.192.0/21 maxlen: 24
                          192.154.208.0/22 maxlen: 24
                          192.154.212.0/24 maxlen: 24
                          192.154.215.0/24 maxlen: 24
                          192.154.216.0/21 maxlen: 24
                          192.154.232.0/21 maxlen: 24
                          192.154.240.0/24 maxlen: 24
                          192.154.242.0/23 maxlen: 24
                          192.154.244.0/22 maxlen: 24
                          192.154.249.0/24 maxlen: 24
                          192.154.251.0/24 maxlen: 24
                          192.154.252.0/24 maxlen: 24
                          199.188.88.0/21 maxlen: 24
                          2604:8180::/31 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8583e379-1578-4044-8426-ddcb4a4a8192/8583e379-1578-4044-8426-ddcb4a4a8192.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8583e379-1578-4044-8426-ddcb4a4a8192/8583e379-1578-4044-8426-ddcb4a4a8192.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8583e379-1578-4044-8426-ddcb4a4a8192.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:fc:82:33:5d:2f:40:86:4f:fd:a3:88:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8583e379-1578-4044-8426-ddcb4a4a8192
        Validity
            Not Before: Feb 26 02:00:32 2026 GMT
            Not After : May 27 01:00:32 2026 GMT
        Subject: CN=e564a226-7f4a-4962-88d1-1b1c97b4b3ed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:53:fa:be:c1:e3:71:32:be:c5:70:76:9a:e1:
                    0d:b0:a1:cf:be:43:71:34:51:54:09:b7:5e:a8:32:
                    38:18:e8:e2:11:f4:d9:f8:e1:73:3f:14:ed:ec:f3:
                    b8:63:98:9a:44:00:d8:26:8f:b3:ca:c4:8f:59:ba:
                    af:2a:fd:dd:05:0e:2f:f8:ed:a5:e7:e8:f6:59:4e:
                    58:5d:ee:b9:f9:f3:83:46:09:46:92:18:a5:32:f7:
                    9d:a7:f2:81:c0:ba:bc:21:97:89:01:32:d1:9f:47:
                    b9:81:22:88:c4:cf:36:22:d0:35:53:4b:f0:c0:37:
                    e1:77:60:20:7e:22:9a:39:23:8b:06:07:b8:79:fa:
                    e6:69:03:b0:6a:53:0e:6f:36:a2:69:9d:3a:80:cd:
                    3b:0b:5a:d2:d9:56:49:9e:b9:05:27:c6:30:79:9c:
                    dd:14:b6:e8:a9:16:0c:b4:18:43:e6:e4:7d:f2:42:
                    69:7c:b6:0f:93:84:44:39:cb:90:e1:9a:e2:11:68:
                    45:ec:70:be:14:27:8c:96:7a:8e:a5:1e:d9:b5:2e:
                    00:33:a6:bd:c1:6a:f1:ab:6a:c5:4b:d6:0c:c0:0c:
                    76:fc:8e:39:13:fe:0c:18:fb:09:2b:aa:55:bb:53:
                    b0:b6:6b:69:40:6b:c2:3a:3e:ea:ab:fb:64:37:58:
                    4b:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:43:60:4A:74:FD:49:50:29:61:E5:87:EB:BE:C9:77:BD:B2:0E:00
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8583e379-1578-4044-8426-ddcb4a4a8192/5339e6b4-20a4-3e12-b267-e7013b1ce0d7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8583e379-1578-4044-8426-ddcb4a4a8192/8583e379-1578-4044-8426-ddcb4a4a8192.crl

            X509v3 Authority Key Identifier:
                keyid:89:C7:5F:3F:CE:A7:5D:0D:C3:10:F9:23:2C:65:92:27:0C:63:1D:62

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8583e379-1578-4044-8426-ddcb4a4a8192.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.21.34.0/23
                  192.154.192.0/21
                  192.154.208.0-192.154.212.255
                  192.154.215.0-192.154.223.255
                  192.154.232.0-192.154.240.255
                  192.154.242.0-192.154.247.255
                  192.154.249.0/24
                  192.154.251.0-192.154.252.255
                  199.188.88.0/21
                IPv6:
                  2604:8180::/31

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         48:96:8b:c2:62:eb:3b:44:af:e8:f4:e9:d8:e6:63:83:98:7c:
         49:6f:85:3d:5f:66:b0:0b:03:df:30:25:4b:59:17:07:59:0e:
         c8:42:00:4a:6a:30:d5:23:14:07:77:a2:77:a9:67:13:78:fa:
         16:10:a4:d4:55:a0:97:bb:85:0e:00:1d:bc:fe:78:0e:c0:a1:
         db:be:b8:a5:3e:56:b8:da:42:00:a3:60:36:17:44:e1:10:2c:
         88:5d:6e:33:ec:49:9f:66:65:46:50:dd:d2:58:f9:28:fb:99:
         d6:49:5e:09:3c:fb:2c:d3:93:54:fd:1f:79:6a:89:6d:66:5a:
         60:fe:6b:69:3c:20:40:c1:90:ac:cb:5e:96:22:c5:ea:0a:89:
         f3:25:00:07:ce:95:8d:70:34:3a:0a:85:4b:d4:91:1b:16:24:
         c4:ac:45:6b:f7:8c:44:1d:6b:f4:d8:7f:c4:61:1b:eb:98:85:
         67:fa:ef:e8:89:73:70:3f:f6:15:93:21:66:49:ec:bc:05:da:
         26:97:9d:e8:e5:0d:ea:ad:e0:bc:5b:5b:c0:96:47:f5:82:91:
         cc:53:f7:de:ac:5a:db:f5:f2:61:97:35:df:42:d7:48:f9:21:
         1d:56:e4:87:60:22:a7:0c:96:10:22:6a:4a:29:d6:a4:17:d2:
         5a:d1:50:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 15:30:45 2026 by rpki-client