Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/20c4af79-cdcf-4640-ab4e-f0f33648cc55/cea2d881-3d76-3a80-94b9-42e2473af64d.roa
File:                     cea2d881-3d76-3a80-94b9-42e2473af64d.roa (raw, json)
Hash identifier:          xG6giaAp6hO2h9F79r1A+7y30BlhZJ0Mukj9s3mNVqY=
Subject key identifier:   82:B2:E8:FA:20:AD:D9:BE:0D:98:A6:52:65:82:1F:66:8F:97:DA:F9
Certificate issuer:       /CN=20c4af79-cdcf-4640-ab4e-f0f33648cc55
Certificate serial:       010D0C9F4328584EC20C6CF384EB04FD59F85100
Authority key identifier: 54:9B:21:17:72:B9:2D:EC:3D:5D:62:81:0A:6C:CF:F7:A7:62:43:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/20c4af79-cdcf-4640-ab4e-f0f33648cc55.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/20c4af79-cdcf-4640-ab4e-f0f33648cc55/cea2d881-3d76-3a80-94b9-42e2473af64d.roa
Signing time:             Fri 07 Aug 2026 13:00:11 +0000
ROA not before:           Fri 07 Aug 2026 13:00:11 +0000
ROA not after:            Thu 05 Nov 2026 14:00:11 +0000
asID:                     33387
IP address blocks:        63.141.224.0/19 maxlen: 24
                          74.91.16.0/20 maxlen: 24
                          107.150.32.0/19 maxlen: 24
                          142.54.160.0/19 maxlen: 24
                          192.151.144.0/20 maxlen: 24
                          192.187.96.0/19 maxlen: 24
                          198.204.224.0/19 maxlen: 24
                          199.168.96.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/20c4af79-cdcf-4640-ab4e-f0f33648cc55/20c4af79-cdcf-4640-ab4e-f0f33648cc55.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/20c4af79-cdcf-4640-ab4e-f0f33648cc55/20c4af79-cdcf-4640-ab4e-f0f33648cc55.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/20c4af79-cdcf-4640-ab4e-f0f33648cc55.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 29 Aug 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:c2:0c:6c:f3:84:eb:04:fd:59:f8:51:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=20c4af79-cdcf-4640-ab4e-f0f33648cc55
        Validity
            Not Before: Aug  7 13:00:11 2026 GMT
            Not After : Nov  5 14:00:11 2026 GMT
        Subject: CN=ef48fce0-edd8-4c1b-8c3a-ac62dcc2c52c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:9a:95:a5:4e:63:35:07:e7:29:6a:60:60:ea:
                    58:e8:9f:21:e5:07:92:35:25:e4:92:7c:44:af:78:
                    ae:33:54:8b:a0:d0:d4:a3:33:da:c5:fb:b3:13:b4:
                    b2:3e:f4:27:60:47:79:9e:08:49:47:9c:34:97:7e:
                    e4:cb:c9:4f:75:3a:28:5c:4a:3e:02:cd:92:db:4b:
                    04:f6:8d:69:7e:e7:6e:1e:80:52:12:1f:c2:6e:d7:
                    2f:99:3f:94:7f:84:67:e5:99:1b:fb:30:a7:ed:44:
                    fb:fd:b4:b1:b1:3c:08:35:75:aa:20:c3:27:67:df:
                    72:39:33:a9:82:05:a4:97:5b:27:eb:82:89:d2:5d:
                    36:e6:e1:b2:9d:13:db:c9:be:8e:99:a1:0a:ad:b6:
                    e9:7b:8b:29:1e:bd:0d:2c:59:1f:49:5f:7d:5c:c9:
                    6b:56:d0:98:6d:aa:73:9f:1e:02:d9:be:78:af:bf:
                    f0:36:dc:60:7d:c5:76:1d:6a:25:54:fd:b9:84:89:
                    78:4b:71:4f:df:5a:66:de:57:a9:41:29:a6:47:78:
                    d3:be:e6:81:86:a6:5a:15:07:1c:07:bb:59:0f:e1:
                    99:f4:12:ae:cd:7c:3a:66:f4:4c:75:52:da:d0:0a:
                    ce:59:11:1f:ca:12:69:cb:e0:1e:74:95:16:e5:3c:
                    d9:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:B2:E8:FA:20:AD:D9:BE:0D:98:A6:52:65:82:1F:66:8F:97:DA:F9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/20c4af79-cdcf-4640-ab4e-f0f33648cc55/cea2d881-3d76-3a80-94b9-42e2473af64d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/20c4af79-cdcf-4640-ab4e-f0f33648cc55/20c4af79-cdcf-4640-ab4e-f0f33648cc55.crl

            X509v3 Authority Key Identifier:
                keyid:54:9B:21:17:72:B9:2D:EC:3D:5D:62:81:0A:6C:CF:F7:A7:62:43:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/20c4af79-cdcf-4640-ab4e-f0f33648cc55.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  63.141.224.0/19
                  74.91.16.0/20
                  107.150.32.0/19
                  142.54.160.0/19
                  192.151.144.0/20
                  192.187.96.0/19
                  198.204.224.0/19
                  199.168.96.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         93:91:e7:32:cb:27:13:b4:4d:49:bf:1d:eb:13:ec:22:f5:c7:
         89:76:eb:65:fd:80:4e:f0:b5:bb:1f:1f:d2:c6:11:a4:bc:80:
         59:7f:9a:cf:1d:59:aa:0c:b5:dc:f6:4a:60:cb:ab:ce:8b:d1:
         02:af:3a:44:fe:c7:d5:bd:a8:c1:1e:a6:85:b9:0b:ef:59:2d:
         de:04:69:67:a9:16:18:fc:ce:e8:c5:b6:ae:99:22:78:88:e8:
         37:c4:21:95:b4:ff:1a:f2:7f:57:0d:24:58:d1:78:6e:ab:6b:
         be:13:66:5f:4e:57:33:d9:26:1a:44:f7:e0:ae:b7:b8:f9:48:
         20:df:63:35:52:d8:58:f0:3e:06:f8:78:2c:35:8b:3a:44:a6:
         86:32:6a:1b:c5:fa:a5:f3:07:5f:22:64:58:81:85:2b:43:af:
         08:ba:9a:a3:cb:70:5c:31:a3:89:18:0f:e7:9e:ef:b4:a3:62:
         d0:e7:ea:b3:65:97:a8:d0:43:28:ed:14:ee:b7:71:78:a9:30:
         cd:7f:68:58:6d:c4:57:a0:ce:ed:87:b9:c7:cc:7d:cb:9c:c8:
         19:68:0b:56:b4:b0:ad:48:23:c0:e1:64:00:d1:4f:f4:90:2f:
         94:63:88:00:2d:13:ef:55:b3:a2:66:82:d6:e4:5d:06:79:d7:
         77:0a:cf:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 16:52:05 2026 by rpki-client