Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460/efacbaaf-444a-32fb-8ee0-e182bd9e55fb.roa
File:                     efacbaaf-444a-32fb-8ee0-e182bd9e55fb.roa (raw, json)
Hash identifier:          bXEk3oOeuUh2JAMmlSJXNhdL+kB5kV//9UBoAKtSkcw=
Subject key identifier:   D0:1A:BD:8B:0C:03:D2:64:F3:2B:0E:31:F7:91:36:02:F7:2A:4B:81
Certificate issuer:       /CN=d1f886df-6c58-4ea7-9d1f-0659e2324460
Certificate serial:       010D0C9F4328584DD35B02C5DF164A7983D038C0
Authority key identifier: DE:16:51:20:56:83:D6:08:13:E6:42:45:8E:FD:16:70:EE:87:6F:BB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460/efacbaaf-444a-32fb-8ee0-e182bd9e55fb.roa
Signing time:             Thu 14 May 2026 01:00:25 +0000
ROA not before:           Thu 14 May 2026 01:00:25 +0000
ROA not after:            Wed 12 Aug 2026 01:00:25 +0000
asID:                     6621
IP address blocks:        174.32.76.0/24 maxlen: 24
                          174.32.81.0/24 maxlen: 24
                          174.32.92.0/24 maxlen: 24
                          174.32.107.0/24 maxlen: 24
                          174.32.108.0/22 maxlen: 22
                          174.32.112.0/20 maxlen: 20
                          174.32.129.0/24 maxlen: 24
                          174.32.130.0/23 maxlen: 23
                          174.32.133.0/24 maxlen: 24
                          174.32.134.0/23 maxlen: 23
                          174.32.136.0/21 maxlen: 21
                          174.32.144.0/23 maxlen: 23
                          174.32.160.0/22 maxlen: 22
                          174.32.164.0/22 maxlen: 22
                          174.32.168.0/22 maxlen: 22
                          174.32.172.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460/d1f886df-6c58-4ea7-9d1f-0659e2324460.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460/d1f886df-6c58-4ea7-9d1f-0659e2324460.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 17 May 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:d3:5b:02:c5:df:16:4a:79:83:d0:38:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d1f886df-6c58-4ea7-9d1f-0659e2324460
        Validity
            Not Before: May 14 01:00:25 2026 GMT
            Not After : Aug 12 01:00:25 2026 GMT
        Subject: CN=82fc97e5-43a7-4b90-b3be-713d3988e48d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:af:59:63:6e:02:89:59:7b:a6:a9:83:6b:73:
                    51:a1:eb:f7:a9:64:26:f6:82:c8:4b:69:7b:eb:0b:
                    22:9e:d5:c9:0d:f0:44:02:1b:cc:3f:95:81:e6:8d:
                    b6:67:a1:b4:0e:06:54:ce:3e:89:a2:c8:c9:ea:ef:
                    a9:8d:b7:c9:39:ef:30:2a:46:db:43:b5:79:0f:16:
                    31:0a:3c:13:d4:e7:cb:5c:ae:53:65:5f:26:65:cb:
                    f7:2d:d2:51:27:7b:47:42:2c:a2:87:0c:f4:e5:0c:
                    40:06:27:96:0f:9f:c8:fb:c5:57:b6:f7:61:ea:b8:
                    ad:ad:eb:b7:f8:f8:49:e5:70:d4:f0:5d:5a:12:d5:
                    c7:f6:5a:0d:a5:a7:79:1d:a8:f7:d3:dd:4f:ee:df:
                    67:8d:74:07:9f:72:eb:85:fb:74:f8:81:71:86:e8:
                    de:a3:bc:01:79:2d:32:08:59:45:cf:d7:b3:50:4c:
                    6b:ba:15:61:de:d3:f2:c0:1f:5f:f0:53:0c:4b:7b:
                    2a:84:2b:be:88:c7:0c:1e:37:04:8c:87:66:35:8e:
                    ae:98:15:b9:06:b7:23:a0:6b:e4:3d:71:c1:56:31:
                    d8:27:d8:ce:23:64:dc:da:ef:ca:21:4b:cc:e6:af:
                    85:8d:64:c7:0a:70:c0:0b:9f:c3:a2:38:9e:af:58:
                    f3:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:1A:BD:8B:0C:03:D2:64:F3:2B:0E:31:F7:91:36:02:F7:2A:4B:81
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460/efacbaaf-444a-32fb-8ee0-e182bd9e55fb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460/d1f886df-6c58-4ea7-9d1f-0659e2324460.crl

            X509v3 Authority Key Identifier:
                keyid:DE:16:51:20:56:83:D6:08:13:E6:42:45:8E:FD:16:70:EE:87:6F:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.32.76.0/24
                  174.32.81.0/24
                  174.32.92.0/24
                  174.32.107.0-174.32.127.255
                  174.32.129.0-174.32.131.255
                  174.32.133.0-174.32.145.255
                  174.32.160.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a3:86:65:57:b1:b4:59:10:96:22:ee:20:c0:1f:54:6c:26:79:
         f6:50:fa:2b:d4:b2:fe:cb:87:c4:d1:17:83:db:f8:92:a2:9d:
         a1:6e:63:f4:ef:8b:e4:a5:22:ff:72:6f:27:dd:98:14:a7:c7:
         cc:43:31:57:3b:da:89:ad:a0:74:15:58:07:66:56:01:21:82:
         90:37:7b:d9:b8:a5:e1:b8:8e:30:aa:8a:93:51:fd:85:1e:b2:
         a3:e3:06:64:83:d8:17:6f:8e:aa:60:40:8a:a1:ee:97:ed:5a:
         4b:a4:34:a7:16:08:b9:7e:50:c6:f5:4c:35:c5:3d:0f:f2:54:
         61:f8:d6:fb:97:62:65:93:91:27:45:aa:43:6f:78:6b:c1:b2:
         87:9e:dc:4d:62:3c:54:ed:ee:52:b6:91:74:85:0e:7f:c3:35:
         b3:e0:d5:9c:61:4c:f7:46:f8:5a:e3:1f:d3:57:02:5c:3e:7d:
         35:53:c6:94:5a:88:8c:74:11:c2:61:ed:56:f9:a4:0b:df:f9:
         25:62:62:1c:29:e4:27:5b:b8:18:f1:17:57:5b:f5:05:88:f6:
         ab:fc:4b:a7:a4:98:a7:ba:a7:99:88:97:8c:3b:5c:8d:66:21:
         f6:70:b7:5b:87:39:f5:2c:21:05:cf:2b:a5:13:2a:f1:ec:8a:
         5c:52:30:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 15 15:20:59 2026 by rpki-client