Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ef710622-7ec4-4bb2-9e87-27c5e5964fae/a545cb6a-d67e-3908-a597-d3e26364ede7.roa
File:                     a545cb6a-d67e-3908-a597-d3e26364ede7.roa (raw, json)
Hash identifier:          KHBobH+2akNYvp9N7B8xiJ4QRKBt6+QkT7VA4GE1cgI=
Subject key identifier:   76:E4:5D:42:87:D3:56:93:86:97:A9:C8:A5:16:3A:C9:D5:A8:87:09
Certificate issuer:       /CN=ef710622-7ec4-4bb2-9e87-27c5e5964fae
Certificate serial:       010D0C9F4328584DF4DB91872545C75FC4944D00
Authority key identifier: 8B:4A:0E:7A:84:48:3D:14:18:BD:AC:31:07:96:0F:68:2A:61:ED:D7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ef710622-7ec4-4bb2-9e87-27c5e5964fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ef710622-7ec4-4bb2-9e87-27c5e5964fae/a545cb6a-d67e-3908-a597-d3e26364ede7.roa
Signing time:             Tue 26 May 2026 01:00:24 +0000
ROA not before:           Tue 26 May 2026 01:00:24 +0000
ROA not after:            Mon 24 Aug 2026 01:00:24 +0000
asID:                     3842
IP address blocks:        23.226.232.0/21 maxlen: 24
                          107.161.20.0/22 maxlen: 24
                          107.161.28.0/22 maxlen: 24
                          107.191.100.0/22 maxlen: 24
                          107.191.114.0/23 maxlen: 24
                          107.191.120.0/22 maxlen: 24
                          107.191.124.0/22 maxlen: 24
                          167.88.116.0/22 maxlen: 24
                          167.88.120.0/22 maxlen: 24
                          192.30.32.0/22 maxlen: 24
                          192.73.232.0/21 maxlen: 24
                          192.184.80.0/21 maxlen: 24
                          192.249.56.0/22 maxlen: 24
                          199.241.28.0/22 maxlen: 24
                          2604:180::/48 maxlen: 48
                          2604:180:a::/48 maxlen: 48
                          2604:180:b::/48 maxlen: 48
                          2604:180:f1::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ef710622-7ec4-4bb2-9e87-27c5e5964fae/ef710622-7ec4-4bb2-9e87-27c5e5964fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ef710622-7ec4-4bb2-9e87-27c5e5964fae/ef710622-7ec4-4bb2-9e87-27c5e5964fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ef710622-7ec4-4bb2-9e87-27c5e5964fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 08:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:f4:db:91:87:25:45:c7:5f:c4:94:4d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ef710622-7ec4-4bb2-9e87-27c5e5964fae
        Validity
            Not Before: May 26 01:00:24 2026 GMT
            Not After : Aug 24 01:00:24 2026 GMT
        Subject: CN=ad820078-f0f0-4c81-b25d-3ce61e31c21c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:7d:33:ff:ac:71:cf:89:0a:2c:b1:e9:07:bb:
                    8d:86:1d:7e:74:27:86:bd:fd:bc:1e:e1:62:5c:59:
                    6a:dd:46:95:f8:eb:db:12:77:4b:d3:3b:04:96:97:
                    9d:a8:fc:e0:1c:fc:41:57:8b:a0:f3:d4:18:14:cd:
                    22:31:ce:08:47:a4:dd:1b:54:b1:91:ce:29:59:6d:
                    b7:08:db:b5:0e:bf:71:d8:54:54:3e:f4:f5:96:2d:
                    a8:33:95:3b:e7:52:8b:64:b1:d2:52:b6:53:34:97:
                    ce:bf:42:ed:4d:ca:62:c9:02:62:6b:43:2f:0d:72:
                    dd:c8:32:97:15:72:e8:c8:ad:43:b5:98:03:74:60:
                    71:95:fb:4b:9f:cb:05:42:0a:3c:f6:1a:07:fe:27:
                    da:fd:a8:6b:73:81:ec:0a:d1:e4:d1:81:ac:89:7f:
                    5e:6b:d2:16:67:25:f9:b7:84:96:23:d9:61:42:7c:
                    2f:6e:df:75:0f:a5:9e:38:f8:49:d2:7d:e9:e2:42:
                    04:75:17:02:8e:ab:a2:6d:9c:56:31:4c:70:57:be:
                    84:d3:b8:bb:9c:39:40:41:d3:b1:d2:e4:9a:56:55:
                    25:6f:ec:67:e0:8d:5a:05:24:34:35:51:d9:bb:b0:
                    ff:18:ac:38:c7:00:5c:c5:05:19:96:58:c2:9c:17:
                    c8:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:E4:5D:42:87:D3:56:93:86:97:A9:C8:A5:16:3A:C9:D5:A8:87:09
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ef710622-7ec4-4bb2-9e87-27c5e5964fae/a545cb6a-d67e-3908-a597-d3e26364ede7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ef710622-7ec4-4bb2-9e87-27c5e5964fae/ef710622-7ec4-4bb2-9e87-27c5e5964fae.crl

            X509v3 Authority Key Identifier:
                keyid:8B:4A:0E:7A:84:48:3D:14:18:BD:AC:31:07:96:0F:68:2A:61:ED:D7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ef710622-7ec4-4bb2-9e87-27c5e5964fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.226.232.0/21
                  107.161.20.0/22
                  107.161.28.0/22
                  107.191.100.0/22
                  107.191.114.0/23
                  107.191.120.0/21
                  167.88.116.0-167.88.123.255
                  192.30.32.0/22
                  192.73.232.0/21
                  192.184.80.0/21
                  192.249.56.0/22
                  199.241.28.0/22
                IPv6:
                  2604:180::/48
                  2604:180:a::/47
                  2604:180:f1::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b4:30:41:80:ee:90:5a:61:db:15:ad:9f:6d:4a:6f:da:fb:1a:
         57:fa:fe:6c:38:34:3a:fe:39:68:8f:a8:7e:a4:01:43:79:1e:
         be:95:f5:0c:bf:fc:a0:b5:3b:1d:9d:06:c1:3a:2e:c6:63:40:
         b0:0e:66:a2:cd:6d:8f:0c:d4:00:80:6b:27:5a:cd:42:48:cd:
         67:13:2d:9e:ae:f8:e2:51:08:46:ba:44:81:76:eb:63:1a:ae:
         16:e5:7a:1b:ba:76:18:b0:14:d7:c8:f2:4b:42:20:94:7b:3a:
         d6:0b:35:1d:81:fb:89:4a:29:cd:c7:fe:3c:f4:93:87:12:74:
         fd:b7:e3:e5:eb:ae:23:d4:01:e0:05:df:e0:4a:7c:8e:c7:30:
         f9:5c:01:5b:92:b9:3c:75:b0:b0:36:12:a1:a6:95:ab:66:27:
         e2:86:bc:56:c6:30:52:c1:b6:b1:d4:77:1b:7d:53:fb:82:d7:
         a5:ab:7b:db:f2:47:fb:ff:09:08:31:16:6d:06:ab:2d:a3:df:
         4d:04:70:b9:9d:f1:b8:30:97:3c:5e:f1:85:e2:71:1c:4e:d9:
         52:d4:20:65:d4:fe:97:f1:f2:81:37:79:e0:55:40:63:e9:f5:
         25:eb:23:93:6f:c8:28:14:a4:00:b2:d9:55:dc:0c:cb:fa:cc:
         14:55:60:c5
-----BEGIN CERTIFICATE-----
MIIGsTCCBZmgAwIBAgIUAQ0Mn0MoWE3025GHJUXHX8SUTQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZWY3MTA2MjItN2VjNC00YmIyLTllODctMjdjNWU1OTY0
ZmFlMB4XDTI2MDUyNjAxMDAyNFoXDTI2MDgyNDAxMDAyNFowLzEtMCsGA1UEAxMk
YWQ4MjAwNzgtZjBmMC00YzgxLWIyNWQtM2NlNjFlMzFjMjFjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2X0z/6xxz4kKLLHpB7uNhh1+dCeGvf28HuFi
XFlq3UaV+OvbEndL0zsElpedqPzgHPxBV4ug89QYFM0iMc4IR6TdG1Sxkc4pWW23
CNu1Dr9x2FRUPvT1li2oM5U751KLZLHSUrZTNJfOv0LtTcpiyQJia0MvDXLdyDKX
FXLoyK1DtZgDdGBxlftLn8sFQgo89hoH/ifa/ahrc4HsCtHk0YGsiX9ea9IWZyX5
t4SWI9lhQnwvbt91D6WeOPhJ0n3p4kIEdRcCjquibZxWMUxwV76E07i7nDlAQdOx
0uSaVlUlb+xn4I1aBSQ0NVHZu7D/GKw4xwBcxQUZlljCnBfIkQIDAQABo4IDwzCC
A78wHQYDVR0OBBYEFHbkXUKH01aThpepyKUWOsnVqIcJMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9lZjcx
MDYyMi03ZWM0LTRiYjItOWU4Ny0yN2M1ZTU5NjRmYWUvYTU0NWNiNmEtZDY3ZS0z
OTA4LWE1OTctZDNlMjYzNjRlZGU3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvZWY3MTA2MjItN2VjNC00YmIyLTll
ODctMjdjNWU1OTY0ZmFlL2VmNzEwNjIyLTdlYzQtNGJiMi05ZTg3LTI3YzVlNTk2
NGZhZS5jcmwwHwYDVR0jBBgwFoAUi0oOeoRIPRQYvawxB5YPaCph7dcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy9lZjcxMDYyMi03ZWM0LTRiYjItOWU4Ny0yN2M1
ZTU5NjRmYWUuY2VyMIGMBggrBgEFBQcBBwEB/wR9MHswVgQCAAEwUAMEAxfi6AME
AmuhFAMEAmuhHAMEAmu/ZAMEAWu/cgMEA2u/eDAMAwQCp1h0AwQCp1h4AwQCwB4g
AwQDwEnoAwQDwLhQAwQCwPk4AwQCx/EcMCEEAgACMBsDBwAmBAGAAAADBwEmBAGA
AAoDBwAmBAGAAPEwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUF
BwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRt
bDANBgkqhkiG9w0BAQsFAAOCAQEAtDBBgO6QWmHbFa2fbUpv2vsaV/r+bDg0Ov45
aI+ofqQBQ3kevpX1DL/8oLU7HZ0GwTouxmNAsA5mos1tjwzUAIBrJ1rNQkjNZxMt
nq744lEIRrpEgXbrYxquFuV6G7p2GLAU18jyS0IglHs61gs1HYH7iUopzcf+PPST
hxJ0/bfj5euuI9QB4AXf4Ep8jscw+VwBW5K5PHWwsDYSoaaVq2Yn4oa8VsYwUsG2
sdR3G31T+4LXpat72/JH+/8JCDEWbQarLaPfTQRwuZ3xuDCXPF7xheJxHE7ZUtQg
ZdT+l/HygTd54FVAY+n1Jesjk2/IKBSkALLZVdwMy/rMFFVgxQ==
-----END CERTIFICATE-----
Generated at Sat Jun 13 03:29:29 2026 by rpki-client