Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/835152c2-2ed8-4151-8f82-ac9407335b2c/7121400c-d357-3be4-a855-765e5de94f70.roa
File:                     7121400c-d357-3be4-a855-765e5de94f70.roa (raw, json)
Hash identifier:          V3eNJxoZvKm8/RmUZpunZCTZoOkj+eB2BroXbB0xjNo=
Subject key identifier:   EF:DB:66:5C:20:50:6A:BF:DF:9D:92:3B:98:53:CE:03:57:2D:21:0F
Certificate issuer:       /CN=835152c2-2ed8-4151-8f82-ac9407335b2c
Certificate serial:       010D0C9F4328584E070088D8EDEC590FB7DC2020
Authority key identifier: 8A:9F:74:D9:4C:B7:63:05:30:36:8F:0F:EC:45:9A:B7:E6:69:75:DE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/835152c2-2ed8-4151-8f82-ac9407335b2c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/835152c2-2ed8-4151-8f82-ac9407335b2c/7121400c-d357-3be4-a855-765e5de94f70.roa
Signing time:             Mon 01 Jun 2026 13:00:10 +0000
ROA not before:           Mon 01 Jun 2026 13:00:10 +0000
ROA not after:            Sun 30 Aug 2026 13:00:10 +0000
asID:                     19871
IP address blocks:        50.116.72.0/22 maxlen: 22
                          50.116.76.0/22 maxlen: 22
                          50.116.104.0/21 maxlen: 22
                          50.116.116.0/22 maxlen: 22
                          108.167.139.0/24 maxlen: 24
                          108.167.174.0/23 maxlen: 23
                          108.167.176.0/22 maxlen: 22
                          108.167.184.0/22 maxlen: 22
                          108.179.206.0/23 maxlen: 23
                          108.179.224.0/22 maxlen: 22
                          108.179.236.0/22 maxlen: 22
                          108.179.248.0/22 maxlen: 22
                          108.179.254.0/24 maxlen: 24
                          192.185.206.0/23 maxlen: 24
                          216.172.164.0/22 maxlen: 22
                          216.172.176.0/22 maxlen: 22
                          216.172.180.0/22 maxlen: 22
                          216.172.190.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/835152c2-2ed8-4151-8f82-ac9407335b2c/835152c2-2ed8-4151-8f82-ac9407335b2c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/835152c2-2ed8-4151-8f82-ac9407335b2c/835152c2-2ed8-4151-8f82-ac9407335b2c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/835152c2-2ed8-4151-8f82-ac9407335b2c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 04 Jun 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:07:00:88:d8:ed:ec:59:0f:b7:dc:20:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=835152c2-2ed8-4151-8f82-ac9407335b2c
        Validity
            Not Before: Jun  1 13:00:10 2026 GMT
            Not After : Aug 30 13:00:10 2026 GMT
        Subject: CN=6d0c89aa-ba0a-43f8-bfe5-b71c37c7b8d0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:c8:de:92:52:eb:5c:17:4d:81:15:5b:f5:0d:
                    1c:46:49:de:24:8c:a9:7c:f7:b6:90:83:13:1f:38:
                    53:76:87:5d:4a:90:96:35:31:d7:93:f6:5c:86:1d:
                    04:ff:7f:fe:81:fd:06:4f:42:b3:26:ba:3f:a1:52:
                    d3:8f:08:9c:5f:c3:2b:48:f9:7e:7c:12:cf:1d:d4:
                    e6:bf:e7:b1:c6:79:77:c4:e4:52:bb:8d:1f:f9:04:
                    ba:a4:1e:2f:8e:ec:c7:d3:1f:13:aa:f8:1e:7d:12:
                    8b:59:f0:8f:10:f3:43:12:51:7f:6e:95:ea:e6:5a:
                    d2:30:af:48:a0:2a:cc:6f:43:4a:e0:05:05:85:85:
                    74:a3:ba:70:26:7c:75:49:4b:2e:fe:4b:92:da:f0:
                    03:cb:a9:49:ef:5f:15:36:3f:e5:fe:a4:8c:13:fb:
                    df:d0:5a:2a:7c:2d:08:ce:5c:78:9a:53:4d:72:c9:
                    ba:36:4c:79:08:00:44:55:0c:d5:47:70:6c:6b:2a:
                    4d:13:5b:09:e9:8e:2c:f1:9e:f8:45:eb:89:23:4e:
                    dd:61:e1:42:b7:b9:9a:a3:44:86:c1:9f:6b:27:7f:
                    e1:da:26:bb:7e:18:41:72:25:2f:73:87:36:f0:e3:
                    98:ef:ce:38:a0:04:98:4f:52:ad:dd:94:76:11:28:
                    52:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:DB:66:5C:20:50:6A:BF:DF:9D:92:3B:98:53:CE:03:57:2D:21:0F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/835152c2-2ed8-4151-8f82-ac9407335b2c/7121400c-d357-3be4-a855-765e5de94f70.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/835152c2-2ed8-4151-8f82-ac9407335b2c/835152c2-2ed8-4151-8f82-ac9407335b2c.crl

            X509v3 Authority Key Identifier:
                keyid:8A:9F:74:D9:4C:B7:63:05:30:36:8F:0F:EC:45:9A:B7:E6:69:75:DE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/835152c2-2ed8-4151-8f82-ac9407335b2c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.116.72.0/21
                  50.116.104.0/21
                  50.116.116.0/22
                  108.167.139.0/24
                  108.167.174.0-108.167.179.255
                  108.167.184.0/22
                  108.179.206.0/23
                  108.179.224.0/22
                  108.179.236.0/22
                  108.179.248.0/22
                  108.179.254.0/24
                  192.185.206.0/23
                  216.172.164.0/22
                  216.172.176.0/21
                  216.172.190.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         98:48:b2:0a:06:b7:0e:50:77:43:f9:38:2f:ed:26:d8:0c:68:
         0d:e7:01:e0:3a:72:81:c7:7d:e8:7b:1a:a8:d4:35:1a:be:da:
         26:ea:2a:91:07:6b:3f:b3:e5:7d:6e:15:04:3e:71:5d:6d:65:
         c0:55:c3:a7:e3:ae:c6:2b:28:f6:14:99:be:2e:23:b6:75:fd:
         ee:99:e1:4e:a9:2e:2f:95:e9:a4:26:b1:ad:82:02:cc:e8:63:
         84:77:46:f1:4b:16:c7:0c:4f:3f:38:92:fc:e0:3d:7f:eb:e0:
         45:98:fe:19:ea:1b:8b:a8:60:b6:ac:87:99:14:a3:c7:d7:9f:
         c7:11:81:bf:1f:3a:e4:3d:6e:46:e1:b3:28:46:ef:15:b1:81:
         cd:c3:b1:21:fe:04:0b:d3:3f:20:9c:96:55:12:0b:90:2f:11:
         01:12:7b:c3:b1:0d:96:b0:24:f1:bc:4c:0a:a4:4a:02:c6:60:
         c9:33:5f:67:46:d5:48:39:72:98:73:7b:eb:c8:39:ca:7d:8f:
         dd:ab:e6:c2:6f:d8:00:e3:e9:d1:10:d9:d2:96:fd:33:e9:d1:
         12:a0:5f:6c:71:31:9e:c7:42:89:d9:7c:ae:71:64:f6:54:60:
         2f:60:3d:3d:1d:59:3e:a2:01:a6:46:c0:84:4a:e0:4f:d0:09:
         3f:ea:d9:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 22:28:34 2026 by rpki-client