Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bb385b0b-5ada-48ff-9c34-3440a6550535/ed1edd96-e704-371d-bccf-ba9ebf84cddf.roa
File:                     ed1edd96-e704-371d-bccf-ba9ebf84cddf.roa (raw, json)
Hash identifier:          WjeP5gDpRI6mOoIoBPqWP7Ob0S+LBBU+YpWjQzkmifo=
Subject key identifier:   18:80:72:ED:32:B9:DB:CA:52:B5:22:4B:F3:CF:D4:F7:F8:EF:D1:E1
Certificate issuer:       /CN=bb385b0b-5ada-48ff-9c34-3440a6550535
Certificate serial:       010D0C9F4328584F506D48B82B1E220C1E6A62CA
Authority key identifier: 20:46:74:1D:FD:78:9D:19:30:D4:B8:91:3B:3A:2A:90:05:19:39:51
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bb385b0b-5ada-48ff-9c34-3440a6550535.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bb385b0b-5ada-48ff-9c34-3440a6550535/ed1edd96-e704-371d-bccf-ba9ebf84cddf.roa
Signing time:             Sun 27 Sep 2026 13:00:12 +0000
ROA not before:           Sun 27 Sep 2026 13:00:12 +0000
ROA not after:            Sat 26 Dec 2026 14:00:12 +0000
asID:                     26337
IP address blocks:        162.210.70.0/23 maxlen: 24
                          162.222.225.0/24 maxlen: 24
                          162.222.226.0/23 maxlen: 24
                          162.251.80.0/22 maxlen: 24
                          162.251.84.0/23 maxlen: 24
                          199.79.62.0/23 maxlen: 24
                          204.11.58.0/23 maxlen: 24
                          207.174.212.0/22 maxlen: 24
                          208.91.198.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bb385b0b-5ada-48ff-9c34-3440a6550535/bb385b0b-5ada-48ff-9c34-3440a6550535.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bb385b0b-5ada-48ff-9c34-3440a6550535/bb385b0b-5ada-48ff-9c34-3440a6550535.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bb385b0b-5ada-48ff-9c34-3440a6550535.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 01 Nov 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:50:6d:48:b8:2b:1e:22:0c:1e:6a:62:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bb385b0b-5ada-48ff-9c34-3440a6550535
        Validity
            Not Before: Sep 27 13:00:12 2026 GMT
            Not After : Dec 26 14:00:12 2026 GMT
        Subject: CN=d57247af-be58-4756-a504-2f0616705ae3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:1d:07:7a:e5:35:5f:c3:95:f2:6c:2d:a0:a2:
                    f8:75:a5:f1:bb:cd:ec:40:2e:ae:4a:b6:43:1d:0e:
                    75:4b:6f:b8:28:c2:5f:d5:eb:92:45:78:9a:78:ea:
                    f2:4d:8c:e6:41:fe:6f:16:70:4f:36:b7:34:ac:81:
                    f0:ef:8d:4c:a5:62:66:16:92:ab:51:84:ef:5c:ef:
                    18:bd:73:be:90:75:fe:b0:42:65:04:54:35:2a:3d:
                    60:9d:9c:4a:83:24:6f:c2:bc:d1:5c:99:b3:b6:a3:
                    24:08:42:ef:9d:b9:e7:5f:f2:f0:7a:97:25:72:c0:
                    57:f0:d3:fb:a6:35:02:40:16:76:5d:ae:6a:e3:36:
                    ad:d5:69:d1:ea:74:0e:33:f3:d4:cd:bb:ec:f4:95:
                    47:ff:81:b4:95:d4:7a:3b:63:96:d6:e3:17:79:59:
                    62:bf:18:34:64:fd:7a:88:c6:90:62:a0:79:2d:34:
                    21:1d:1b:b3:00:b7:64:fd:d0:a7:ad:25:4c:af:1f:
                    92:9b:37:26:bb:99:de:c0:9c:15:d3:3e:c6:e4:fb:
                    b2:c9:99:fe:d9:d0:73:c7:7a:42:90:7e:08:50:70:
                    44:fc:96:2b:63:a3:11:df:5a:9f:a0:7d:cb:2a:00:
                    2f:27:d9:52:71:c3:e0:ae:37:0a:dd:ca:6b:32:78:
                    df:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:80:72:ED:32:B9:DB:CA:52:B5:22:4B:F3:CF:D4:F7:F8:EF:D1:E1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bb385b0b-5ada-48ff-9c34-3440a6550535/ed1edd96-e704-371d-bccf-ba9ebf84cddf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bb385b0b-5ada-48ff-9c34-3440a6550535/bb385b0b-5ada-48ff-9c34-3440a6550535.crl

            X509v3 Authority Key Identifier:
                keyid:20:46:74:1D:FD:78:9D:19:30:D4:B8:91:3B:3A:2A:90:05:19:39:51

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bb385b0b-5ada-48ff-9c34-3440a6550535.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.210.70.0/23
                  162.222.225.0-162.222.227.255
                  162.251.80.0-162.251.85.255
                  199.79.62.0/23
                  204.11.58.0/23
                  207.174.212.0/22
                  208.91.198.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         58:1d:36:49:23:27:ca:71:44:f9:6e:d8:da:54:b1:56:a8:b7:
         8d:c9:8c:d4:d8:ad:ed:e8:8e:59:87:6a:a7:50:57:07:a2:e6:
         08:3b:e2:10:31:39:69:71:3e:5d:3c:24:16:3a:92:07:1c:3d:
         ce:40:7d:2f:f8:1c:a8:37:f6:53:b4:25:7a:67:40:5c:e9:30:
         7a:fd:43:11:52:2c:8d:0a:85:06:73:bd:0c:61:d6:08:9c:9a:
         59:4c:ff:7f:45:05:f6:a2:d7:68:ce:6f:1a:f9:2c:f3:3a:cb:
         e0:9a:19:fe:7e:1f:bf:51:21:85:e1:fa:10:df:23:80:93:17:
         b4:5c:45:e7:f1:9b:27:96:d7:17:68:1e:04:8b:98:3c:b1:3c:
         88:07:37:41:3d:37:c7:1e:0c:b1:7e:ab:3d:33:1a:65:67:aa:
         36:17:85:ad:9c:fb:e6:62:a9:b2:67:b1:6b:7d:aa:5d:74:be:
         07:76:bd:ef:19:e7:53:3d:93:2f:ed:82:9d:a3:1d:89:01:15:
         75:0c:f1:4d:30:13:df:6d:a1:c4:c6:d7:d6:bf:6d:5a:ff:b4:
         98:82:0d:dc:de:25:68:b7:ea:d7:44:1b:3f:03:0d:7f:51:af:
         be:94:84:dd:02:b3:85:5d:1e:da:b8:b6:76:cc:8b:7b:b3:89:
         06:d4:c2:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 31 02:43:47 2026 by rpki-client