Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/c69a1447-7cfa-456f-a600-4b2012c01dc7/4056d6c1-ecca-3b87-ac0f-de768e1f0514.roa
File:                     4056d6c1-ecca-3b87-ac0f-de768e1f0514.roa (raw, json)
Hash identifier:          KKHzGeZx1eLvNzk9QiEvYf1UHEmaQxaTwaHL3Ws7fDI=
Subject key identifier:   02:E7:AD:5B:4A:50:06:37:AE:EE:A0:D5:35:2C:88:3E:ED:84:4C:EF
Certificate issuer:       /CN=c69a1447-7cfa-456f-a600-4b2012c01dc7
Certificate serial:       010D0C9F4328584E2298CCDFF222F2DBC8E195C0
Authority key identifier: 02:29:BA:8D:D7:F8:5E:71:58:09:5A:32:2B:60:84:BB:4C:23:9A:9C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/c69a1447-7cfa-456f-a600-4b2012c01dc7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/c69a1447-7cfa-456f-a600-4b2012c01dc7/4056d6c1-ecca-3b87-ac0f-de768e1f0514.roa
Signing time:             Thu 11 Jun 2026 10:13:52 +0000
ROA not before:           Thu 11 Jun 2026 10:13:52 +0000
ROA not after:            Wed 02 Sep 2026 16:26:47 +0000
asID:                     11776
IP address blocks:        23.244.215.0/24 maxlen: 24
                          23.244.222.0/23 maxlen: 23
                          23.245.8.0/23 maxlen: 23
                          23.245.19.0/24 maxlen: 24
                          23.245.80.0/23 maxlen: 23
                          23.245.176.0/23 maxlen: 23
                          23.245.178.0/23 maxlen: 23
                          23.245.180.0/23 maxlen: 23
                          23.245.189.0/24 maxlen: 24
                          69.161.79.0/24 maxlen: 24
                          69.161.116.0/24 maxlen: 24
                          146.168.250.0/23 maxlen: 23
                          159.250.94.0/24 maxlen: 24
                          172.85.26.0/23 maxlen: 23
                          216.10.172.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/c69a1447-7cfa-456f-a600-4b2012c01dc7/c69a1447-7cfa-456f-a600-4b2012c01dc7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/c69a1447-7cfa-456f-a600-4b2012c01dc7/c69a1447-7cfa-456f-a600-4b2012c01dc7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/c69a1447-7cfa-456f-a600-4b2012c01dc7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:22:98:cc:df:f2:22:f2:db:c8:e1:95:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c69a1447-7cfa-456f-a600-4b2012c01dc7
        Validity
            Not Before: Jun 11 10:13:52 2026 GMT
            Not After : Sep  2 16:26:47 2026 GMT
        Subject: CN=4af4f6b2-16dd-42af-9e60-da6cb8317553
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:af:66:29:28:49:26:8d:b4:5c:6f:45:5c:4f:
                    f1:c2:c0:11:04:01:a7:5b:35:ce:49:7e:ef:95:f1:
                    ff:a0:13:69:0a:26:d0:5c:3b:71:2b:9c:a4:ac:87:
                    8a:7c:50:88:e9:02:9c:b2:1e:af:b8:44:00:d8:7f:
                    c5:a2:03:75:a4:2b:fb:49:ce:c7:1e:ef:cd:6c:37:
                    42:17:80:10:59:b3:af:93:b1:e6:31:5a:da:ef:69:
                    98:9f:f0:ff:d1:66:95:69:eb:31:a9:b0:03:30:d7:
                    de:0b:8c:ed:bc:c0:7b:c0:a7:57:1c:bf:d9:a3:58:
                    e4:cc:da:23:82:00:c5:9b:7c:15:b7:8d:5b:19:50:
                    aa:11:d2:b5:38:a2:25:99:c5:41:87:6d:eb:fc:fb:
                    7a:e2:8c:23:3d:3f:79:55:0a:4b:57:18:74:78:0f:
                    a1:82:5a:fe:87:1e:34:91:73:ca:97:3a:01:4d:88:
                    3c:17:6f:a0:a7:37:8f:e9:17:a2:e3:ba:cd:50:aa:
                    a0:f5:d8:63:8f:33:03:2d:e1:76:b7:b7:d7:ac:ae:
                    9d:8c:e6:92:28:ad:3f:0d:57:c1:be:13:79:83:fb:
                    ab:70:dc:dd:ee:bf:30:a8:c7:73:68:d2:16:d2:9c:
                    3c:56:6f:fe:b5:ee:7b:b6:d0:0a:13:9c:bd:72:ab:
                    8d:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:E7:AD:5B:4A:50:06:37:AE:EE:A0:D5:35:2C:88:3E:ED:84:4C:EF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/c69a1447-7cfa-456f-a600-4b2012c01dc7/4056d6c1-ecca-3b87-ac0f-de768e1f0514.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/c69a1447-7cfa-456f-a600-4b2012c01dc7/c69a1447-7cfa-456f-a600-4b2012c01dc7.crl

            X509v3 Authority Key Identifier:
                keyid:02:29:BA:8D:D7:F8:5E:71:58:09:5A:32:2B:60:84:BB:4C:23:9A:9C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/c69a1447-7cfa-456f-a600-4b2012c01dc7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.244.215.0/24
                  23.244.222.0/23
                  23.245.8.0/23
                  23.245.19.0/24
                  23.245.80.0/23
                  23.245.176.0-23.245.181.255
                  23.245.189.0/24
                  69.161.79.0/24
                  69.161.116.0/24
                  146.168.250.0/23
                  159.250.94.0/24
                  172.85.26.0/23
                  216.10.172.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         25:76:ae:f4:12:6a:e9:f7:dc:29:3e:7d:69:c9:8b:3a:ba:32:
         44:24:cf:0a:7f:26:e9:68:a8:2d:fb:84:02:9e:28:b6:2f:f1:
         a8:96:07:82:2e:8e:a3:a7:b7:ed:ec:36:19:fc:98:da:28:3b:
         4e:3f:b4:f4:22:20:3d:6d:79:52:84:eb:a3:79:38:23:8c:90:
         2e:53:e5:69:c2:60:ba:99:68:8b:6b:a2:5a:5e:3d:ca:4e:f7:
         f2:ad:b8:cb:4c:c2:d4:e1:ea:0a:5e:0e:52:b1:c2:98:ce:87:
         95:9d:b1:6f:8e:98:ca:00:42:9a:85:11:b6:d8:52:37:54:9a:
         2e:89:5e:2b:c1:9e:07:88:99:26:60:df:45:e1:8b:a3:c8:d5:
         fd:59:73:11:dc:b3:af:4f:52:21:76:b2:a0:fd:37:2f:09:d9:
         0e:80:44:c2:1b:25:45:da:dc:36:f6:b4:ef:78:81:f5:6f:5a:
         48:81:37:6b:fd:11:a2:24:a9:5d:96:1a:ff:d2:44:9a:fb:81:
         56:43:54:f1:6a:39:9e:4d:7d:2f:49:a4:e5:01:3a:54:dd:7f:
         0a:cd:b3:25:47:7d:82:88:ce:4d:06:20:4c:2e:db:14:12:a1:
         6f:50:88:cf:f3:31:e0:7d:06:8f:c0:b6:5b:61:ec:bc:ab:9f:
         f7:e3:db:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 14:45:15 2026 by rpki-client