Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a1db5c09-4590-44b5-8023-fa4bdd8d5bac/3fe8f075-bd7a-3a38-ac88-4927e92f276b.roa
File:                     3fe8f075-bd7a-3a38-ac88-4927e92f276b.roa (raw, json)
Hash identifier:          n9MDH1yw88NPrnquZ6DuBX1Sc5CY+ri+cFmOQ0j5u64=
Subject key identifier:   07:23:78:9C:89:AC:B8:87:D8:0E:09:21:11:9B:6D:3A:04:B7:4B:1D
Certificate issuer:       /CN=a1db5c09-4590-44b5-8023-fa4bdd8d5bac
Certificate serial:       010D0C9F4328584CA5F7022C594079F35B71C3C0
Authority key identifier: EE:BC:02:B2:23:67:F2:6A:51:5A:16:7F:5E:72:23:BC:96:0D:40:A2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a1db5c09-4590-44b5-8023-fa4bdd8d5bac.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a1db5c09-4590-44b5-8023-fa4bdd8d5bac/3fe8f075-bd7a-3a38-ac88-4927e92f276b.roa
Signing time:             Mon 26 Jan 2026 02:00:32 +0000
ROA not before:           Mon 26 Jan 2026 02:00:32 +0000
ROA not after:            Sun 26 Apr 2026 01:00:32 +0000
asID:                     63134
IP address blocks:        61.8.176.0/20 maxlen: 24
                          76.164.216.0/22 maxlen: 24
                          169.150.4.0/22 maxlen: 24
                          199.91.240.0/21 maxlen: 24
                          199.204.184.0/22 maxlen: 24
                          205.173.160.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a1db5c09-4590-44b5-8023-fa4bdd8d5bac/a1db5c09-4590-44b5-8023-fa4bdd8d5bac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a1db5c09-4590-44b5-8023-fa4bdd8d5bac/a1db5c09-4590-44b5-8023-fa4bdd8d5bac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a1db5c09-4590-44b5-8023-fa4bdd8d5bac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:a5:f7:02:2c:59:40:79:f3:5b:71:c3:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a1db5c09-4590-44b5-8023-fa4bdd8d5bac
        Validity
            Not Before: Jan 26 02:00:32 2026 GMT
            Not After : Apr 26 01:00:32 2026 GMT
        Subject: CN=2b1146c2-eee0-409d-bb3b-1d58dda1b13e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:43:08:88:30:07:52:f0:20:14:5e:a7:f7:00:
                    8a:5b:b9:bf:ac:f8:54:d6:41:9e:82:ec:c2:4c:27:
                    69:75:f8:11:53:f0:bf:62:eb:88:d4:2a:ba:cd:f4:
                    b6:08:2b:fa:38:d0:2f:b4:9f:7f:24:0b:83:d1:dd:
                    19:f7:13:34:44:78:53:74:6e:8f:b1:30:44:93:11:
                    58:1e:5d:f3:bf:a7:d8:f6:f5:8a:bf:2f:93:22:0b:
                    9c:35:ed:f9:13:1b:bb:b7:07:7c:ae:b2:50:85:77:
                    94:2f:61:42:c5:ea:b8:60:83:11:ee:eb:28:8d:b1:
                    fb:a6:f7:db:f2:a5:03:a6:49:08:ee:4b:f2:93:09:
                    53:a1:0d:3d:29:17:a6:be:80:2a:10:58:61:58:f1:
                    dd:2f:1a:9a:57:b1:61:60:e6:6e:54:1d:4d:2a:fb:
                    ff:9c:81:e3:6c:ae:ee:a7:bd:fe:a0:0a:3c:77:7d:
                    85:93:07:44:15:a7:01:70:28:9a:4f:44:28:21:4e:
                    4c:2f:d2:b4:40:7f:0b:b7:2a:75:04:73:a4:7c:18:
                    fe:49:84:7f:ad:9a:d7:a2:1f:af:8c:88:0c:5a:13:
                    10:a6:c3:68:90:c1:c8:69:fe:72:2a:fc:d7:bb:48:
                    51:44:b2:1b:c0:88:e7:c2:2b:11:fc:8c:9b:89:d7:
                    0a:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:23:78:9C:89:AC:B8:87:D8:0E:09:21:11:9B:6D:3A:04:B7:4B:1D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a1db5c09-4590-44b5-8023-fa4bdd8d5bac/3fe8f075-bd7a-3a38-ac88-4927e92f276b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a1db5c09-4590-44b5-8023-fa4bdd8d5bac/a1db5c09-4590-44b5-8023-fa4bdd8d5bac.crl

            X509v3 Authority Key Identifier:
                keyid:EE:BC:02:B2:23:67:F2:6A:51:5A:16:7F:5E:72:23:BC:96:0D:40:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a1db5c09-4590-44b5-8023-fa4bdd8d5bac.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  61.8.176.0/20
                  76.164.216.0/22
                  169.150.4.0/22
                  199.91.240.0/21
                  199.204.184.0/22
                  205.173.160.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6c:9f:7d:54:ff:1d:8d:4d:d1:c5:58:21:73:9c:d8:8b:c3:1b:
         23:e7:49:5c:18:8b:91:c0:c6:a1:26:a6:06:46:c6:b4:04:c7:
         44:4b:7e:27:14:cc:f6:3e:69:68:7f:e3:33:60:a3:0f:ea:ff:
         81:e3:84:e6:71:7e:aa:4a:c1:8e:65:c0:e7:f5:34:51:cb:78:
         5c:75:ca:c2:11:38:ff:53:6c:e5:15:83:50:dc:37:2c:f2:92:
         fe:bf:a6:0b:de:a6:41:e0:7e:bd:ce:ca:5a:b7:b5:61:c9:4f:
         52:17:f8:c4:e1:3d:e1:e0:57:c1:3a:f1:d2:9f:da:e7:06:43:
         7d:9b:70:2a:93:0f:c9:81:97:32:72:0e:e8:c7:0e:1a:37:6e:
         33:9a:75:19:46:a5:b7:fc:0d:71:35:ce:8e:63:1d:5c:89:3d:
         d7:cc:e3:42:89:2c:10:65:da:0a:67:80:8d:41:0b:e7:74:dc:
         ef:f1:a6:53:43:0d:bf:be:ff:9f:42:a5:be:15:02:45:36:d7:
         90:75:fe:48:19:bd:28:33:7e:73:04:dc:e4:7f:53:b6:51:60:
         9a:39:1f:01:39:b7:83:da:69:d2:8b:58:dc:43:7b:25:c6:d2:
         43:a1:84:fd:c7:94:a5:8c:a8:58:00:2e:6b:4b:d7:66:b0:53:
         7f:d4:34:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:42:48 2026 by rpki-client