Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/6e819198-1233-3990-b604-8c7dc7b92839.roa
File:                     6e819198-1233-3990-b604-8c7dc7b92839.roa (raw, json)
Hash identifier:          04WqVOJgLHu/DHYEvry+MWcIH1tnClNuQ88qyFpbz/Q=
Subject key identifier:   67:A2:83:5E:87:A0:01:F7:80:57:CD:99:1A:7D:81:27:00:BD:9C:03
Certificate issuer:       /CN=b433f23f-334b-4db9-9fe1-bef76714d97f
Certificate serial:       010D0C9F4328584D20AF41D7C8803334ABC5D980
Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/6e819198-1233-3990-b604-8c7dc7b92839.roa
Signing time:             Wed 11 Mar 2026 01:00:32 +0000
ROA not before:           Wed 11 Mar 2026 01:00:32 +0000
ROA not after:            Tue 09 Jun 2026 01:00:32 +0000
asID:                     47787
IP address blocks:        128.242.128.0/19 maxlen: 24
                          128.242.224.0/20 maxlen: 24
                          128.242.240.0/20 maxlen: 24
                          130.94.176.0/20 maxlen: 24
                          130.94.208.0/20 maxlen: 24
                          131.103.0.0/20 maxlen: 24
                          131.103.96.0/20 maxlen: 24
                          168.143.160.0/20 maxlen: 24
                          198.64.80.0/20 maxlen: 24
                          198.64.192.0/19 maxlen: 24
                          204.1.192.0/19 maxlen: 24
                          204.3.32.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 22 Mar 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:20:af:41:d7:c8:80:33:34:ab:c5:d9:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f
        Validity
            Not Before: Mar 11 01:00:32 2026 GMT
            Not After : Jun  9 01:00:32 2026 GMT
        Subject: CN=b4f86c8b-7db1-43bd-8584-804731e6837f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:98:48:6d:17:ff:ee:67:c7:e0:4d:0a:03:2c:
                    ba:74:4c:d0:03:81:a4:df:41:10:f7:1c:33:6d:c9:
                    4a:57:d1:29:bd:da:5f:ef:f0:84:ae:1e:69:30:f6:
                    27:b0:64:26:3a:57:bc:a0:7f:b5:09:07:80:a1:4d:
                    cc:a9:ac:98:51:d5:d4:12:ad:95:70:9b:d6:70:e8:
                    e7:c0:45:01:33:cc:45:4b:c3:5f:e9:5c:92:f2:b5:
                    29:48:af:6c:db:52:6f:4d:e5:72:b9:53:31:41:87:
                    5e:d6:95:82:67:ec:e8:aa:99:01:54:1f:2d:2a:ff:
                    e5:34:cd:d5:f5:a3:79:a1:ce:4c:fe:36:51:75:7b:
                    f0:73:c4:25:af:28:7d:c9:38:03:4d:ab:49:4a:55:
                    8b:b3:a1:66:4a:16:2a:3e:ac:28:34:eb:28:26:22:
                    7b:4d:fe:0f:6c:6d:17:11:98:1a:3b:55:35:bb:59:
                    f3:68:85:bd:70:a5:89:d1:89:06:45:c7:d0:c7:aa:
                    95:f6:ce:da:5c:e6:35:64:e1:b7:10:46:4d:50:a7:
                    31:a4:59:28:a2:63:f1:f3:f3:61:dc:3d:4c:03:10:
                    b1:c2:1c:77:eb:6e:e9:7f:cc:04:f9:ff:65:bf:ae:
                    9f:85:16:bb:c8:59:db:9a:cf:a3:62:9c:ba:a0:4d:
                    ca:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:A2:83:5E:87:A0:01:F7:80:57:CD:99:1A:7D:81:27:00:BD:9C:03
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/6e819198-1233-3990-b604-8c7dc7b92839.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl

            X509v3 Authority Key Identifier:
                keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  128.242.128.0/19
                  128.242.224.0/19
                  130.94.176.0/20
                  130.94.208.0/20
                  131.103.0.0/20
                  131.103.96.0/20
                  168.143.160.0/20
                  198.64.80.0/20
                  198.64.192.0/19
                  204.1.192.0/19
                  204.3.32.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6c:87:81:8a:fb:9b:91:e0:e7:1c:fa:48:fc:56:4a:e7:69:4f:
         94:97:3a:06:b9:53:d5:2a:27:37:50:83:62:f6:a1:ff:0f:28:
         a0:70:80:44:a9:87:41:b2:be:a7:1b:ef:41:79:47:0b:5a:92:
         57:bd:42:f3:1f:57:37:ab:43:46:31:a1:de:3c:06:0a:0e:a0:
         22:4b:55:df:11:20:3e:d7:51:3d:44:ae:5c:99:0e:8c:44:a4:
         ed:44:0d:13:0c:e7:64:75:ad:e3:17:35:76:8c:ec:62:fe:33:
         5b:e8:da:6f:48:20:d9:4c:eb:e3:c2:66:8d:f1:aa:cd:22:f3:
         c3:f9:c7:5e:28:ba:61:24:76:ae:69:66:29:19:fb:b1:07:9a:
         23:9a:6a:fe:fa:4f:e4:96:1a:c6:13:97:13:fb:3a:0c:9a:73:
         88:52:28:27:86:6a:4c:7f:ed:76:84:a8:1b:4c:e3:17:a1:83:
         9f:9c:77:ba:60:4d:dd:aa:5f:fc:ad:04:c8:5d:00:02:e4:31:
         5c:18:64:29:38:d8:6c:61:28:9f:a5:f9:ab:55:eb:14:2c:50:
         98:f1:2f:29:2d:e6:b8:18:6f:4f:d8:85:4d:47:6c:91:34:c0:
         9e:90:c9:48:c0:0a:c3:f5:3f:11:53:80:db:d7:e3:00:30:eb:
         75:78:7a:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 21 12:08:10 2026 by rpki-client