Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/c69a1447-7cfa-456f-a600-4b2012c01dc7/d5a2c358-7c07-392a-81f7-69106c272983.roa
File:                     d5a2c358-7c07-392a-81f7-69106c272983.roa (raw, json)
Hash identifier:          sBY55Z7dIaOAUrOhntJK/915Mhvl+y5Xi0aoEWd7cuw=
Subject key identifier:   FE:B4:03:03:C5:30:40:DD:F1:8C:D6:85:B3:2E:5D:1C:D1:61:DB:58
Certificate issuer:       /CN=c69a1447-7cfa-456f-a600-4b2012c01dc7
Certificate serial:       010D0C9F4328584E20A1D86FB1C530A606BBAA80
Authority key identifier: 02:29:BA:8D:D7:F8:5E:71:58:09:5A:32:2B:60:84:BB:4C:23:9A:9C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/c69a1447-7cfa-456f-a600-4b2012c01dc7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/c69a1447-7cfa-456f-a600-4b2012c01dc7/d5a2c358-7c07-392a-81f7-69106c272983.roa
Signing time:             Wed 10 Jun 2026 17:20:29 +0000
ROA not before:           Wed 10 Jun 2026 17:20:29 +0000
ROA not after:            Tue 08 Sep 2026 17:02:47 +0000
asID:                     11776
IP address blocks:        72.9.8.0/23 maxlen: 23
                          72.9.8.0/24 maxlen: 24
                          72.9.9.0/24 maxlen: 24
                          72.9.10.0/24 maxlen: 24
                          72.9.11.0/24 maxlen: 24
                          72.9.12.0/23 maxlen: 23
                          72.9.14.0/23 maxlen: 23
                          72.28.128.0/19 maxlen: 19
                          72.28.248.0/24 maxlen: 24
                          72.28.249.0/24 maxlen: 24
                          72.28.250.0/23 maxlen: 23
                          72.28.252.0/22 maxlen: 22
                          72.45.0.0/21 maxlen: 21
                          72.45.8.0/21 maxlen: 21
                          72.45.16.0/20 maxlen: 20
                          72.45.48.0/24 maxlen: 24
                          72.45.49.0/24 maxlen: 24
                          72.45.52.0/22 maxlen: 22
                          72.45.56.0/21 maxlen: 21
                          74.214.39.0/24 maxlen: 24
                          74.214.40.0/22 maxlen: 22
                          74.214.44.0/23 maxlen: 23
                          74.214.46.0/24 maxlen: 24
                          74.214.48.0/23 maxlen: 23
                          74.214.53.0/24 maxlen: 24
                          74.214.54.0/23 maxlen: 23
                          74.214.57.0/24 maxlen: 24
                          74.214.58.0/23 maxlen: 23
                          74.214.60.0/23 maxlen: 23
                          74.214.62.0/24 maxlen: 24
                          74.214.63.0/24 maxlen: 24
                          104.192.128.0/23 maxlen: 23
                          104.192.131.0/24 maxlen: 24
                          132.147.24.0/23 maxlen: 23
                          132.147.26.0/24 maxlen: 24
                          132.147.27.0/24 maxlen: 24
                          132.147.28.0/23 maxlen: 23
                          132.147.30.0/24 maxlen: 24
                          132.147.31.0/24 maxlen: 24
                          137.103.80.0/21 maxlen: 21
                          137.103.92.0/22 maxlen: 22
                          138.207.172.0/23 maxlen: 23
                          138.207.174.0/24 maxlen: 24
                          138.207.176.0/21 maxlen: 21
                          138.207.184.0/21 maxlen: 21
                          146.168.22.0/24 maxlen: 24
                          146.168.23.0/24 maxlen: 24
                          146.168.134.0/23 maxlen: 23
                          146.168.136.0/23 maxlen: 23
                          146.168.138.0/24 maxlen: 24
                          146.168.141.0/24 maxlen: 24
                          146.168.144.0/23 maxlen: 23
                          146.168.146.0/24 maxlen: 24
                          146.168.147.0/24 maxlen: 24
                          146.168.148.0/22 maxlen: 22
                          146.168.152.0/22 maxlen: 22
                          146.168.156.0/24 maxlen: 24
                          146.168.157.0/24 maxlen: 24
                          146.168.160.0/23 maxlen: 23
                          146.168.162.0/24 maxlen: 24
                          146.168.163.0/24 maxlen: 24
                          146.168.164.0/23 maxlen: 23
                          146.168.166.0/23 maxlen: 23
                          146.168.168.0/22 maxlen: 22
                          146.168.174.0/24 maxlen: 24
                          146.168.182.0/24 maxlen: 24
                          146.168.184.0/23 maxlen: 23
                          146.168.186.0/23 maxlen: 23
                          146.168.188.0/23 maxlen: 23
                          146.168.190.0/23 maxlen: 23
                          146.168.224.0/22 maxlen: 22
                          146.168.228.0/22 maxlen: 22
                          146.168.232.0/22 maxlen: 22
                          146.168.236.0/22 maxlen: 22
                          146.168.240.0/23 maxlen: 23
                          146.168.242.0/23 maxlen: 23
                          146.168.244.0/23 maxlen: 23
                          146.168.246.0/23 maxlen: 23
                          146.168.248.0/23 maxlen: 23
                          146.168.252.0/23 maxlen: 23
                          146.168.254.0/23 maxlen: 23
                          159.250.64.0/23 maxlen: 23
                          159.250.68.0/23 maxlen: 23
                          159.250.72.0/21 maxlen: 21
                          159.250.92.0/23 maxlen: 23
                          162.210.24.0/24 maxlen: 24
                          162.210.25.0/24 maxlen: 24
                          162.210.27.0/24 maxlen: 24
                          162.223.180.0/23 maxlen: 23
                          162.247.104.0/23 maxlen: 23
                          162.247.107.0/24 maxlen: 24
                          172.85.25.0/24 maxlen: 24
                          173.44.64.0/22 maxlen: 22
                          173.44.72.0/24 maxlen: 24
                          173.44.73.0/24 maxlen: 24
                          173.44.75.0/24 maxlen: 24
                          173.44.76.0/24 maxlen: 24
                          173.44.77.0/24 maxlen: 24
                          173.44.78.0/23 maxlen: 23
                          173.44.96.0/24 maxlen: 24
                          173.44.97.0/24 maxlen: 24
                          173.44.106.0/23 maxlen: 23
                          173.44.122.0/23 maxlen: 23
                          198.133.8.0/23 maxlen: 23
                          204.195.176.0/21 maxlen: 21
                          207.255.177.0/24 maxlen: 24
                          207.255.178.0/24 maxlen: 24
                          207.255.179.0/24 maxlen: 24
                          207.255.180.0/22 maxlen: 22
                          207.255.184.0/21 maxlen: 21
                          208.90.136.0/23 maxlen: 23
                          208.90.138.0/24 maxlen: 24
                          208.90.140.0/23 maxlen: 23
                          208.90.142.0/24 maxlen: 24
                          208.90.143.0/24 maxlen: 24
                          209.42.128.0/24 maxlen: 24
                          209.42.129.0/24 maxlen: 24
                          209.42.130.0/23 maxlen: 23
                          209.42.133.0/24 maxlen: 24
                          209.42.135.0/24 maxlen: 24
                          209.42.136.0/24 maxlen: 24
                          209.42.138.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/c69a1447-7cfa-456f-a600-4b2012c01dc7/c69a1447-7cfa-456f-a600-4b2012c01dc7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/c69a1447-7cfa-456f-a600-4b2012c01dc7/c69a1447-7cfa-456f-a600-4b2012c01dc7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/c69a1447-7cfa-456f-a600-4b2012c01dc7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:20:a1:d8:6f:b1:c5:30:a6:06:bb:aa:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c69a1447-7cfa-456f-a600-4b2012c01dc7
        Validity
            Not Before: Jun 10 17:20:29 2026 GMT
            Not After : Sep  8 17:02:47 2026 GMT
        Subject: CN=4aca82f4-65e7-4571-bab0-5a9b12479deb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:37:57:27:ff:e7:0c:ad:b5:1c:54:fc:1b:d6:
                    4f:88:9a:d0:a4:31:16:07:fc:21:bd:a2:bf:ea:64:
                    59:81:e7:45:06:f3:05:3c:b0:f2:fb:a8:4f:71:43:
                    13:6d:91:09:be:2f:ff:f6:f9:3a:41:bd:4a:ec:97:
                    9d:ac:03:6b:2b:1f:7c:95:07:2e:46:7d:86:3b:a1:
                    f9:83:72:57:c0:a4:7d:6b:df:7d:78:5e:e3:b5:66:
                    62:d1:e7:30:77:34:86:ec:51:40:c5:8b:8b:ef:27:
                    00:50:4d:31:7f:2b:8b:b7:8d:99:d8:97:3b:72:a9:
                    d9:3c:34:a1:eb:8c:b7:f4:13:1e:1e:76:bf:e3:a8:
                    3b:1a:95:49:8b:40:58:64:dd:01:73:a2:f2:aa:46:
                    f8:de:cc:0a:89:82:9a:e8:a7:d0:4f:66:3d:d6:c7:
                    04:41:da:24:3d:4a:97:b5:22:20:f8:37:cf:47:58:
                    1e:53:f2:22:46:71:4f:5d:0e:ac:02:76:bc:fe:12:
                    d8:25:8b:cf:0e:02:d5:5a:2f:c0:58:47:b6:12:06:
                    32:4f:6b:2f:ca:3e:24:51:70:a9:d8:5a:8a:63:d4:
                    aa:c9:05:04:c9:a6:03:f3:6b:f6:0b:01:cb:e1:e5:
                    52:c5:c5:36:fa:62:54:e5:3c:31:aa:67:d0:d4:3a:
                    4e:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:B4:03:03:C5:30:40:DD:F1:8C:D6:85:B3:2E:5D:1C:D1:61:DB:58
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/c69a1447-7cfa-456f-a600-4b2012c01dc7/d5a2c358-7c07-392a-81f7-69106c272983.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/c69a1447-7cfa-456f-a600-4b2012c01dc7/c69a1447-7cfa-456f-a600-4b2012c01dc7.crl

            X509v3 Authority Key Identifier:
                keyid:02:29:BA:8D:D7:F8:5E:71:58:09:5A:32:2B:60:84:BB:4C:23:9A:9C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/c69a1447-7cfa-456f-a600-4b2012c01dc7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.9.8.0/21
                  72.28.128.0/19
                  72.28.248.0/21
                  72.45.0.0/19
                  72.45.48.0/23
                  72.45.52.0-72.45.63.255
                  74.214.39.0-74.214.46.255
                  74.214.48.0/23
                  74.214.53.0-74.214.55.255
                  74.214.57.0-74.214.63.255
                  104.192.128.0/23
                  104.192.131.0/24
                  132.147.24.0/21
                  137.103.80.0/21
                  137.103.92.0/22
                  138.207.172.0-138.207.174.255
                  138.207.176.0/20
                  146.168.22.0/23
                  146.168.134.0-146.168.138.255
                  146.168.141.0/24
                  146.168.144.0-146.168.157.255
                  146.168.160.0-146.168.171.255
                  146.168.174.0/24
                  146.168.182.0/24
                  146.168.184.0/21
                  146.168.224.0-146.168.249.255
                  146.168.252.0/22
                  159.250.64.0/23
                  159.250.68.0/23
                  159.250.72.0/21
                  159.250.92.0/23
                  162.210.24.0/23
                  162.210.27.0/24
                  162.223.180.0/23
                  162.247.104.0/23
                  162.247.107.0/24
                  172.85.25.0/24
                  173.44.64.0/22
                  173.44.72.0/23
                  173.44.75.0-173.44.79.255
                  173.44.96.0/23
                  173.44.106.0/23
                  173.44.122.0/23
                  198.133.8.0/23
                  204.195.176.0/21
                  207.255.177.0-207.255.191.255
                  208.90.136.0-208.90.138.255
                  208.90.140.0/22
                  209.42.128.0/22
                  209.42.133.0/24
                  209.42.135.0-209.42.136.255
                  209.42.138.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8e:87:e5:64:6b:33:ac:2a:6c:c6:5d:88:c2:28:c8:78:aa:b8:
         64:54:80:45:08:4f:b0:f3:82:47:22:bd:c8:90:1d:5e:47:d4:
         3f:46:d9:60:fe:79:af:f2:73:b7:c1:80:7d:1e:b0:df:7c:87:
         66:68:c0:40:f0:4b:4f:51:3c:64:9c:05:e2:af:41:21:f8:22:
         1d:fa:02:82:ed:60:38:ab:0b:02:df:75:67:79:10:57:15:39:
         d9:4d:0d:25:eb:20:94:35:31:6a:6b:dd:26:74:6f:5a:21:84:
         5d:0f:3a:34:04:ed:22:94:af:95:d2:b1:26:88:66:b8:f8:7f:
         de:0b:4d:4d:eb:36:b6:bd:3c:0a:f1:12:fb:fa:56:45:89:40:
         6a:70:8a:6d:5f:3d:61:d6:66:d4:32:e7:b8:be:b2:a9:5d:5b:
         64:90:3e:1a:f4:fa:86:ff:f6:19:e5:b5:b9:a8:80:39:4f:e6:
         87:0e:4f:6c:6a:54:f3:d0:5c:bf:03:e4:ec:c7:33:05:8f:78:
         40:8e:11:a4:b9:e1:cb:e5:e4:6e:dc:ad:d9:e6:17:3c:8c:92:
         ab:82:5a:85:e5:75:d1:25:8f:70:91:4e:9d:98:8a:7d:01:df:
         0a:ed:d5:e3:d1:79:5f:41:f3:6e:9a:96:97:af:02:95:a4:57:
         ef:e1:d0:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 15:29:55 2026 by rpki-client