Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5e22d7ae-1224-43fb-907a-6690f7bd9a2e/70522c27-eece-3153-811b-bb032ea647fb.roa
File:                     70522c27-eece-3153-811b-bb032ea647fb.roa (raw, json)
Hash identifier:          UVXA29dxd2FbD8W0ZqYnOOuAOozxs8JlMngMMVt3Cm4=
Subject key identifier:   6B:70:90:26:A1:D4:73:AF:7A:B5:D4:02:C5:75:CC:C4:A1:4B:09:C4
Certificate issuer:       /CN=5e22d7ae-1224-43fb-907a-6690f7bd9a2e
Certificate serial:       010D0C9F4328584D63AFA4E52D9D95FBE2FCDC80
Authority key identifier: 60:B1:66:1F:22:1A:63:15:3A:73:41:10:72:AE:0E:CC:D7:BA:34:68
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5e22d7ae-1224-43fb-907a-6690f7bd9a2e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5e22d7ae-1224-43fb-907a-6690f7bd9a2e/70522c27-eece-3153-811b-bb032ea647fb.roa
Signing time:             Sat 04 Apr 2026 01:00:25 +0000
ROA not before:           Sat 04 Apr 2026 01:00:25 +0000
ROA not after:            Fri 03 Jul 2026 01:00:25 +0000
asID:                     14618
IP address blocks:        64.40.132.0/24 maxlen: 24
                          64.40.133.0/24 maxlen: 24
                          64.40.136.0/24 maxlen: 24
                          64.40.137.0/24 maxlen: 24
                          64.40.139.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5e22d7ae-1224-43fb-907a-6690f7bd9a2e/5e22d7ae-1224-43fb-907a-6690f7bd9a2e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5e22d7ae-1224-43fb-907a-6690f7bd9a2e/5e22d7ae-1224-43fb-907a-6690f7bd9a2e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5e22d7ae-1224-43fb-907a-6690f7bd9a2e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 08 Apr 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:63:af:a4:e5:2d:9d:95:fb:e2:fc:dc:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e22d7ae-1224-43fb-907a-6690f7bd9a2e
        Validity
            Not Before: Apr  4 01:00:25 2026 GMT
            Not After : Jul  3 01:00:25 2026 GMT
        Subject: CN=381af966-4f4b-4b0b-95a9-cef4c01ccbb8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:35:5c:51:ba:51:bc:d1:77:59:89:78:b2:78:
                    8c:6b:1b:56:e8:96:e2:23:c4:99:0e:e4:e6:d3:f7:
                    91:8b:11:be:57:49:cd:6c:ee:05:75:e7:d5:5f:83:
                    c3:91:76:58:4a:40:3f:2a:7f:ac:11:3c:59:0a:37:
                    89:6d:54:0f:48:61:c4:2a:08:fa:1e:fe:fa:73:a9:
                    70:21:e2:96:ae:d3:fb:4c:f2:c7:21:f6:c0:27:e7:
                    3a:d2:03:8d:69:41:8f:5e:a9:4d:36:5c:91:96:3c:
                    1e:b5:9b:00:1c:79:e0:dc:23:30:51:08:19:55:59:
                    29:9c:1b:e2:12:b7:b3:5e:bd:a3:8b:b6:19:33:dc:
                    5e:c3:15:58:be:9a:cc:de:f4:07:c1:8b:c9:bb:77:
                    b1:21:08:70:46:e5:8e:d2:43:73:fd:90:89:3c:86:
                    8c:14:a2:dc:6a:63:ae:07:37:46:d9:3f:04:0e:63:
                    76:f3:7d:09:76:4e:d0:0d:41:c9:f4:e6:2c:22:31:
                    28:0b:74:05:d4:47:71:f8:8c:ab:48:e2:64:54:49:
                    45:b9:f3:8a:8d:67:75:fd:7b:49:2c:2a:e7:26:48:
                    47:01:08:68:f3:3d:ca:c4:59:b8:6f:b8:61:12:d2:
                    0a:4d:5f:f6:1b:50:00:db:06:4b:c6:3f:cf:b4:fd:
                    64:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:70:90:26:A1:D4:73:AF:7A:B5:D4:02:C5:75:CC:C4:A1:4B:09:C4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5e22d7ae-1224-43fb-907a-6690f7bd9a2e/70522c27-eece-3153-811b-bb032ea647fb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5e22d7ae-1224-43fb-907a-6690f7bd9a2e/5e22d7ae-1224-43fb-907a-6690f7bd9a2e.crl

            X509v3 Authority Key Identifier:
                keyid:60:B1:66:1F:22:1A:63:15:3A:73:41:10:72:AE:0E:CC:D7:BA:34:68

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5e22d7ae-1224-43fb-907a-6690f7bd9a2e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.40.132.0/23
                  64.40.136.0/23
                  64.40.139.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8b:0d:a3:cf:9c:38:79:c3:cd:e9:f0:68:1a:b1:d8:d5:94:ea:
         f0:d1:79:ae:29:f4:0b:2b:5d:86:bd:b8:4b:1d:ac:0a:c0:c9:
         f0:e9:9c:d3:7a:ab:18:84:4b:85:fd:86:11:38:c8:63:45:d0:
         ed:ff:0d:55:f4:af:cb:b3:d8:f7:68:1f:1d:28:fa:0b:26:11:
         df:ab:75:ac:6b:f8:b7:04:32:e8:11:20:69:a6:9f:81:77:ec:
         53:f0:75:31:df:d6:53:c5:55:80:af:df:f0:6b:ab:2c:3d:04:
         93:3f:1e:9a:4f:ff:bb:f8:9d:e9:b2:8a:ed:67:9b:7e:70:af:
         2a:9a:be:e7:17:eb:97:04:d8:46:45:ed:3a:7b:81:94:cc:38:
         6a:0d:5c:7d:d5:c8:8a:c7:cc:55:ca:d2:4a:ec:67:8d:6a:dd:
         91:91:66:8f:ea:bd:32:33:84:61:c0:17:0c:ea:39:d0:66:ad:
         7d:01:66:ee:fb:d5:21:65:9c:d4:5e:7d:45:9b:fa:75:e9:4a:
         56:b9:3d:d9:25:ce:e8:27:57:5c:c9:c7:00:0f:20:fe:0e:11:
         5f:0d:1c:4b:1e:f4:b8:58:83:8d:a8:7d:3a:9b:ff:11:f4:be:
         25:9b:0a:d1:eb:07:29:6c:66:cd:02:92:1e:50:f7:91:85:3b:
         da:9e:b9:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 10:33:48 2026 by rpki-client