Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/43ac5ede-1d27-41a5-932c-21832f3ef95c/731e66c1-a71e-3d9f-a838-e78228e9ff90.roa
File:                     731e66c1-a71e-3d9f-a838-e78228e9ff90.roa (raw, json)
Hash identifier:          xxAbTCI1tMcsBieggVfNuhTxke60WXNh4LQNnMTuA/Q=
Subject key identifier:   30:7F:A1:3E:6E:96:33:C1:FC:A0:C6:F2:00:C6:14:5F:4C:EE:6D:75
Certificate issuer:       /CN=43ac5ede-1d27-41a5-932c-21832f3ef95c
Certificate serial:       010D0C9F4328584D6AAA743994F28626353F0100
Authority key identifier: 09:3E:48:28:77:AE:C9:66:5D:E7:F1:3F:39:E3:B7:7E:84:9F:9A:CD
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/43ac5ede-1d27-41a5-932c-21832f3ef95c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/43ac5ede-1d27-41a5-932c-21832f3ef95c/731e66c1-a71e-3d9f-a838-e78228e9ff90.roa
Signing time:             Mon 06 Apr 2026 13:00:30 +0000
ROA not before:           Mon 06 Apr 2026 13:00:30 +0000
ROA not after:            Sun 05 Jul 2026 13:00:30 +0000
asID:                     11734
IP address blocks:        104.151.136.0/21 maxlen: 24
                          104.153.192.0/22 maxlen: 24
                          199.19.208.0/22 maxlen: 24
                          199.189.64.0/22 maxlen: 24
                          208.74.28.0/22 maxlen: 24
                          208.74.48.0/22 maxlen: 24
                          208.82.204.0/22 maxlen: 24
                          208.91.48.0/22 maxlen: 24
                          209.134.48.0/20 maxlen: 24
                          2607:f148::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/43ac5ede-1d27-41a5-932c-21832f3ef95c/43ac5ede-1d27-41a5-932c-21832f3ef95c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/43ac5ede-1d27-41a5-932c-21832f3ef95c/43ac5ede-1d27-41a5-932c-21832f3ef95c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/43ac5ede-1d27-41a5-932c-21832f3ef95c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 08 Apr 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:6a:aa:74:39:94:f2:86:26:35:3f:01:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=43ac5ede-1d27-41a5-932c-21832f3ef95c
        Validity
            Not Before: Apr  6 13:00:30 2026 GMT
            Not After : Jul  5 13:00:30 2026 GMT
        Subject: CN=f66322c2-fd25-419e-af48-236bf2f7908d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:20:d9:47:5a:51:90:7e:b8:3b:38:70:95:de:
                    e3:b9:be:7f:30:fd:30:a9:c3:a4:e3:f6:19:d4:0c:
                    b9:54:a0:08:77:06:ba:34:aa:ed:a9:7c:88:99:17:
                    51:08:6e:f7:7f:57:14:28:24:a6:70:11:f6:f9:f9:
                    9e:63:02:91:1f:9e:35:d6:01:1f:86:14:3b:5d:a1:
                    74:fe:86:5a:85:aa:25:fb:a2:c4:7e:41:6f:2a:27:
                    ce:cd:50:eb:c5:1f:e7:91:3b:ee:92:54:8e:0f:b8:
                    da:b0:36:c3:cb:89:3f:8d:ea:52:4a:6e:0f:c6:4c:
                    11:ff:c3:8f:96:0d:6f:8d:dd:cc:54:a6:74:db:6e:
                    8a:ae:dc:ca:67:24:f9:c8:fc:7e:c0:57:09:48:57:
                    c0:2e:c6:83:63:21:e8:96:e7:d0:7e:94:a3:1a:d9:
                    89:2f:eb:9b:b5:2a:50:84:b5:7f:69:0d:0c:c6:4a:
                    ba:e7:1d:ae:8d:fa:fc:91:04:bc:18:ff:ba:98:76:
                    44:f6:e3:8d:54:35:35:60:9d:4d:f0:12:86:e3:8f:
                    5c:a5:f6:6f:8d:2f:52:d7:18:60:68:22:f9:97:29:
                    f0:ee:a2:96:99:39:94:47:52:2f:8b:d0:38:13:4f:
                    5f:ad:ff:79:a9:29:27:2d:2b:51:6c:0f:00:bf:37:
                    9b:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:7F:A1:3E:6E:96:33:C1:FC:A0:C6:F2:00:C6:14:5F:4C:EE:6D:75
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/43ac5ede-1d27-41a5-932c-21832f3ef95c/731e66c1-a71e-3d9f-a838-e78228e9ff90.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/43ac5ede-1d27-41a5-932c-21832f3ef95c/43ac5ede-1d27-41a5-932c-21832f3ef95c.crl

            X509v3 Authority Key Identifier:
                keyid:09:3E:48:28:77:AE:C9:66:5D:E7:F1:3F:39:E3:B7:7E:84:9F:9A:CD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/43ac5ede-1d27-41a5-932c-21832f3ef95c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.151.136.0/21
                  104.153.192.0/22
                  199.19.208.0/22
                  199.189.64.0/22
                  208.74.28.0/22
                  208.74.48.0/22
                  208.82.204.0/22
                  208.91.48.0/22
                  209.134.48.0/20
                IPv6:
                  2607:f148::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         28:97:cf:74:0d:99:19:fd:3d:de:af:b9:01:ed:60:71:67:ad:
         5c:73:25:81:ec:0b:91:ae:e5:5a:15:45:46:64:9e:0a:d4:01:
         3a:3a:fb:73:29:21:e4:a3:4c:b1:66:86:43:ae:48:9a:1b:d7:
         0e:5a:62:a0:e4:16:60:28:89:3f:a1:b0:eb:e7:e0:00:0e:fc:
         e5:eb:e1:41:26:fe:c3:cc:f5:d5:cd:99:ec:be:ff:be:af:85:
         49:13:7f:a0:d7:3b:90:c9:87:99:2a:75:d7:bc:cb:68:81:f4:
         21:f1:4d:4c:ff:dc:2a:22:33:bc:85:7e:6c:fa:13:cb:e7:54:
         5c:65:55:73:78:ce:20:55:0b:38:79:c6:ff:69:47:12:04:93:
         0d:85:fd:52:65:98:26:79:89:6b:eb:87:74:76:0c:e8:fe:bc:
         76:a1:7c:28:5b:58:90:88:6f:8e:4b:4a:2d:75:9f:97:9f:81:
         4b:15:6a:ae:d5:23:6b:9e:e5:0c:72:7e:7f:4b:b5:25:d8:e1:
         6a:8b:82:34:56:60:a8:e8:ba:ae:82:f8:39:00:76:3d:6d:3b:
         13:b0:44:c8:ee:6d:c1:42:a8:75:ad:c4:23:da:d9:84:2a:ce:
         17:43:77:64:14:08:66:25:0b:fe:bf:67:9a:71:5a:40:87:dd:
         83:63:07:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 20:04:18 2026 by rpki-client