Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/bd8b6863-ef81-4de4-bc9e-ae9d1d2e11e8/63d7507e-771b-31b7-9ea9-6f50c64d9d2f.roa
File:                     63d7507e-771b-31b7-9ea9-6f50c64d9d2f.roa (raw, json)
Hash identifier:          XKa/0dzBgJjYTRmAzQCeFdCAQJwwCKMvwmIp/SnFDX8=
Subject key identifier:   13:59:8F:10:14:A5:3C:33:D9:79:A7:1E:8D:D9:3E:A2:67:C6:E9:EE
Certificate issuer:       /CN=bd8b6863-ef81-4de4-bc9e-ae9d1d2e11e8
Certificate serial:       010D0C9F4328584DD8F06362E8CF21022AFF7280
Authority key identifier: 47:99:F5:27:E4:1F:04:74:5A:3F:3B:D7:81:C9:80:18:59:E9:75:66
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/bd8b6863-ef81-4de4-bc9e-ae9d1d2e11e8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/bd8b6863-ef81-4de4-bc9e-ae9d1d2e11e8/63d7507e-771b-31b7-9ea9-6f50c64d9d2f.roa
Signing time:             Sat 16 May 2026 01:00:26 +0000
ROA not before:           Sat 16 May 2026 01:00:26 +0000
ROA not after:            Fri 14 Aug 2026 01:00:26 +0000
asID:                     19935
IP address blocks:        159.112.233.0/24 maxlen: 24
                          173.224.240.0/20 maxlen: 20
                          173.224.240.0/24 maxlen: 24
                          173.224.241.0/24 maxlen: 24
                          173.224.242.0/24 maxlen: 24
                          173.224.243.0/24 maxlen: 24
                          173.224.244.0/24 maxlen: 24
                          173.224.245.0/24 maxlen: 24
                          173.224.246.0/24 maxlen: 24
                          173.224.247.0/24 maxlen: 24
                          173.224.248.0/24 maxlen: 24
                          173.224.249.0/24 maxlen: 24
                          173.224.250.0/24 maxlen: 24
                          173.224.251.0/24 maxlen: 24
                          173.224.252.0/24 maxlen: 24
                          173.224.253.0/24 maxlen: 24
                          173.224.254.0/24 maxlen: 24
                          173.224.255.0/24 maxlen: 24
                          205.178.191.0/24 maxlen: 24
                          208.52.144.0/24 maxlen: 24
                          208.103.184.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/bd8b6863-ef81-4de4-bc9e-ae9d1d2e11e8/bd8b6863-ef81-4de4-bc9e-ae9d1d2e11e8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/bd8b6863-ef81-4de4-bc9e-ae9d1d2e11e8/bd8b6863-ef81-4de4-bc9e-ae9d1d2e11e8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/bd8b6863-ef81-4de4-bc9e-ae9d1d2e11e8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:d8:f0:63:62:e8:cf:21:02:2a:ff:72:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bd8b6863-ef81-4de4-bc9e-ae9d1d2e11e8
        Validity
            Not Before: May 16 01:00:26 2026 GMT
            Not After : Aug 14 01:00:26 2026 GMT
        Subject: CN=a966c8e0-c7f7-4ebc-a3ad-64782c6cc46b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:09:e1:fd:c6:8e:dd:03:c8:7c:f8:b7:a6:56:
                    a6:01:d6:d1:4a:bc:d2:83:8e:e3:e7:99:e8:74:64:
                    65:c5:66:44:8c:02:7d:86:ed:6c:fa:94:62:5d:63:
                    2f:ae:85:3d:81:8d:e4:f6:c5:38:65:61:59:e7:9d:
                    04:7f:69:ca:63:c8:0d:54:fd:03:84:a7:38:cf:88:
                    78:88:34:9b:f5:4d:48:3f:d2:d0:8c:9d:28:a8:7d:
                    30:08:71:7d:38:dc:07:4d:34:e6:5e:3c:10:e6:95:
                    d1:85:9a:ba:6c:9f:bf:59:20:12:20:66:29:4d:fa:
                    c2:11:1d:35:21:c2:f4:e6:81:43:ea:e0:75:0b:26:
                    20:73:28:67:20:18:35:17:f9:b3:b1:3d:5c:f3:b2:
                    a0:4b:2d:59:72:4e:b3:24:4a:c8:b4:41:9f:74:10:
                    77:f2:0e:60:70:24:c8:10:42:0a:3e:cd:fa:38:2e:
                    76:52:ea:24:57:08:5d:75:ba:8e:3c:12:d0:72:67:
                    02:6c:6e:4a:97:e7:0e:fa:60:bf:87:3d:88:9d:db:
                    75:7a:46:32:90:5b:bd:ee:64:c6:cc:31:ae:39:b3:
                    86:57:a5:84:c7:44:b7:40:d3:46:29:50:cf:82:61:
                    5d:a4:6e:a3:3b:4f:14:fe:ca:79:76:e6:cc:cd:c5:
                    64:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:59:8F:10:14:A5:3C:33:D9:79:A7:1E:8D:D9:3E:A2:67:C6:E9:EE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/bd8b6863-ef81-4de4-bc9e-ae9d1d2e11e8/63d7507e-771b-31b7-9ea9-6f50c64d9d2f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/bd8b6863-ef81-4de4-bc9e-ae9d1d2e11e8/bd8b6863-ef81-4de4-bc9e-ae9d1d2e11e8.crl

            X509v3 Authority Key Identifier:
                keyid:47:99:F5:27:E4:1F:04:74:5A:3F:3B:D7:81:C9:80:18:59:E9:75:66

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/bd8b6863-ef81-4de4-bc9e-ae9d1d2e11e8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  159.112.233.0/24
                  173.224.240.0/20
                  205.178.191.0/24
                  208.52.144.0/24
                  208.103.184.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0a:49:e3:59:d6:8d:11:c7:68:4a:08:a5:57:3f:66:69:8f:2e:
         61:d6:f4:6d:db:3a:12:c0:2b:b2:8e:f1:87:d7:dc:a1:25:14:
         44:7d:ba:cd:d9:dc:54:86:2e:5e:32:fa:cb:a4:9d:1f:6b:31:
         9d:86:70:2c:ec:6a:94:ca:9a:a2:71:14:64:5b:d9:06:89:11:
         5a:c4:43:e1:e5:0a:e7:b9:5e:05:9b:65:bc:85:95:5a:9e:7f:
         31:b2:f9:f3:40:f5:11:23:43:dc:43:bf:35:ea:ef:6a:ca:47:
         43:db:90:e2:5a:e0:9b:fc:e5:54:7f:7c:2a:c4:68:2f:2c:b6:
         a9:9e:e2:db:da:48:3e:a2:f0:a5:db:f1:55:df:55:49:53:13:
         b4:34:67:15:2e:09:63:9a:0f:8d:5a:fa:0b:cf:ba:23:a9:86:
         05:2b:2d:90:53:f1:1e:8f:2a:b6:52:be:1d:b2:b2:7d:59:78:
         fe:b9:36:00:61:37:c2:f7:dd:ff:6e:9e:2c:4e:cd:a9:0c:75:
         b4:09:be:a9:22:88:7d:b0:f6:75:f2:6b:c0:90:49:10:98:b9:
         b3:21:35:2b:31:71:3e:5b:7c:21:d2:ef:ee:1e:02:10:53:50:
         e5:5c:03:30:84:9b:09:26:87:6c:62:90:fe:43:1e:42:a0:5e:
         d6:1c:c7:fa
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Jun 13 09:55:38 2026 by rpki-client