Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/0506839b-7bd0-317e-9d0b-2962f87aa814.roa
File:                     0506839b-7bd0-317e-9d0b-2962f87aa814.roa (raw, json)
Hash identifier:          iF42hZlMK9sb0bqRbyXRr3G3U4zPfzWVGsHEaW+SQaY=
Subject key identifier:   45:1E:85:A5:0D:6A:8B:2E:68:DD:8E:27:FF:D2:02:75:DD:64:EB:A4
Certificate issuer:       /CN=da370214-1d61-48bf-84a0-a60096ccaae7
Certificate serial:       010D0C9F4328584DFA706EAC544191A3B4BC4BB0
Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/0506839b-7bd0-317e-9d0b-2962f87aa814.roa
Signing time:             Thu 28 May 2026 01:00:10 +0000
ROA not before:           Thu 28 May 2026 01:00:10 +0000
ROA not after:            Wed 26 Aug 2026 01:00:10 +0000
asID:                     7459
IP address blocks:        64.8.192.0/19 maxlen: 24
                          64.32.128.0/20 maxlen: 24
                          64.32.192.0/18 maxlen: 24
                          64.105.64.0/21 maxlen: 24
                          64.105.76.0/22 maxlen: 24
                          64.139.16.0/20 maxlen: 24
                          66.80.8.0/21 maxlen: 24
                          66.80.48.0/21 maxlen: 24
                          66.80.104.0/21 maxlen: 24
                          66.80.136.0/21 maxlen: 24
                          66.80.144.0/20 maxlen: 24
                          66.80.160.0/21 maxlen: 24
                          66.80.176.0/20 maxlen: 24
                          67.102.224.0/20 maxlen: 24
                          69.3.192.0/20 maxlen: 24
                          207.145.32.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 15 Jun 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:fa:70:6e:ac:54:41:91:a3:b4:bc:4b:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7
        Validity
            Not Before: May 28 01:00:10 2026 GMT
            Not After : Aug 26 01:00:10 2026 GMT
        Subject: CN=4ca71bb2-4ad5-4d39-be11-c2c4021497f1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:2f:e8:51:d8:db:23:7d:a3:17:c1:d8:3d:c3:
                    0e:e7:95:35:fe:82:7c:ab:3c:da:73:e8:6b:44:53:
                    d8:3c:67:d1:05:6e:a7:87:a9:61:9b:e4:9b:45:e8:
                    a1:90:1a:8f:e1:8e:f4:cf:c8:d4:a3:37:65:54:41:
                    cc:66:00:a0:c1:98:72:8a:54:6c:66:19:51:ab:21:
                    dd:89:6a:0a:7d:fb:f0:4e:ff:35:b3:44:5e:b3:71:
                    f9:4b:9f:a4:77:e2:3f:9b:d9:1a:60:08:ad:9b:02:
                    a1:96:d8:41:17:2c:9d:de:42:90:c0:d9:88:58:b3:
                    cc:c9:92:79:1c:e8:78:ee:2a:2d:21:fa:49:a6:c4:
                    76:80:ae:61:b9:af:97:99:2d:60:3a:dc:50:09:af:
                    57:9a:63:6e:50:1b:82:a4:3d:e7:83:0c:02:b4:c3:
                    4d:62:e4:ee:0b:b1:b6:64:9b:43:a2:6d:44:4f:e5:
                    a7:5c:28:9e:ba:e1:44:4b:72:c8:8c:a2:64:a6:c1:
                    4f:4a:73:b6:b3:e6:c9:e0:38:b9:05:a2:fa:92:15:
                    46:aa:7c:97:41:91:e6:f4:2d:e4:19:cb:ff:f9:77:
                    ac:21:88:f3:0f:9a:fb:94:47:d7:ed:a6:16:e0:bf:
                    78:9a:f1:8f:5e:84:63:e4:89:1e:9e:59:bf:56:86:
                    cd:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:1E:85:A5:0D:6A:8B:2E:68:DD:8E:27:FF:D2:02:75:DD:64:EB:A4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/0506839b-7bd0-317e-9d0b-2962f87aa814.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl

            X509v3 Authority Key Identifier:
                keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.8.192.0/19
                  64.32.128.0/20
                  64.32.192.0/18
                  64.105.64.0/21
                  64.105.76.0/22
                  64.139.16.0/20
                  66.80.8.0/21
                  66.80.48.0/21
                  66.80.104.0/21
                  66.80.136.0-66.80.167.255
                  66.80.176.0/20
                  67.102.224.0/20
                  69.3.192.0/20
                  207.145.32.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         35:20:5c:1f:28:92:c9:c2:2e:f6:8a:4e:e5:49:7c:1f:bc:92:
         0b:71:ac:15:5c:9c:aa:a9:fb:b0:38:30:0c:ca:fd:49:46:fa:
         6b:69:58:c6:ff:93:c4:c2:6d:d6:e8:93:34:33:09:29:bd:99:
         6f:12:fa:fc:ab:88:7e:d1:22:e4:44:ed:8b:d4:22:ff:0d:c3:
         df:70:93:ad:41:4c:0d:ac:fc:99:18:68:78:5c:c1:ae:60:23:
         d2:be:61:dd:e2:d1:98:ab:89:57:83:30:a2:23:95:ba:27:b0:
         4e:26:6c:0c:2f:9c:3c:bf:95:61:93:f9:a3:9d:94:83:25:21:
         0c:51:75:c5:9b:60:7d:cf:b8:9e:a0:2b:f1:12:b4:5d:5d:d6:
         2e:7c:7b:0f:73:9b:dd:e1:6e:92:c7:1b:c6:3a:ab:47:f3:cd:
         19:3c:a7:9a:1d:0d:ba:60:d5:27:14:cc:bb:1c:82:ce:41:0f:
         80:2d:a8:b0:2e:f3:bb:86:e1:0c:74:f3:d5:a4:ed:30:18:11:
         e8:38:4b:73:88:73:6e:3b:81:72:87:c7:4e:11:db:0d:0c:2c:
         f1:6e:47:16:0b:da:64:ad:71:e5:a3:0a:b7:5d:89:b4:bd:e3:
         a6:16:cf:0e:5a:c2:bc:1f:45:73:35:50:8b:c5:11:89:85:7d:
         6c:ad:b8:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 00:23:35 2026 by rpki-client