Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/9c62717b-3bd1-3849-b4c6-bce320ba632c.roa
File:                     9c62717b-3bd1-3849-b4c6-bce320ba632c.roa (raw, json)
Hash identifier:          Yya1sNB6dlOIuD9xr9GvlTD9RPq2+9eonSsIS9kItAU=
Subject key identifier:   16:75:31:01:86:28:B0:F0:2A:8A:F0:C6:1C:B7:FE:1B:C5:CA:BE:0C
Certificate issuer:       /CN=b433f23f-334b-4db9-9fe1-bef76714d97f
Certificate serial:       010D0C9F4328584F7D36ECAE7130E4FEED652600
Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/9c62717b-3bd1-3849-b4c6-bce320ba632c.roa
Signing time:             Tue 13 Oct 2026 14:02:10 +0000
ROA not before:           Tue 13 Oct 2026 14:02:10 +0000
ROA not after:            Wed 06 Jan 2027 18:16:24 +0000
asID:                     6079
IP address blocks:        128.121.0.0/22 maxlen: 24
                          128.241.84.0/22 maxlen: 24
                          130.94.196.0/22 maxlen: 24
                          157.238.180.0/22 maxlen: 24
                          198.63.224.0/20 maxlen: 24
                          198.88.96.0/20 maxlen: 24
                          198.104.208.0/20 maxlen: 24
                          198.107.144.0/20 maxlen: 24
                          198.138.48.0/20 maxlen: 24
                          204.143.80.0/21 maxlen: 24
                          204.171.32.0/20 maxlen: 24
                          207.21.112.0/21 maxlen: 24
                          207.55.152.0/21 maxlen: 24
                          207.67.152.0/21 maxlen: 24
                          207.71.88.0/21 maxlen: 24
                          207.91.104.0/21 maxlen: 24
                          207.111.64.0/21 maxlen: 24
                          207.137.88.0/21 maxlen: 24
                          207.152.72.0/21 maxlen: 24
                          207.198.136.0/21 maxlen: 24
                          207.241.16.0/21 maxlen: 24
                          209.107.88.0/21 maxlen: 24
                          209.168.112.0/21 maxlen: 24
                          216.42.144.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 20 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:7d:36:ec:ae:71:30:e4:fe:ed:65:26:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f
        Validity
            Not Before: Oct 13 14:02:10 2026 GMT
            Not After : Jan  6 18:16:24 2027 GMT
        Subject: CN=709e55d3-f600-442f-808a-b3b835cb4d38
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:42:c9:62:89:d3:bd:bf:4b:d5:21:31:e2:de:
                    df:41:5d:78:af:c1:c0:43:cc:fe:19:84:49:9b:fb:
                    e5:8c:60:4c:f7:27:fa:60:ff:db:41:68:73:56:52:
                    f6:fa:d4:d2:d5:81:b4:9c:38:c3:1f:0c:c7:1c:12:
                    9a:fe:cb:ff:bd:61:f4:18:f5:d1:cb:b9:6b:9f:8d:
                    1d:eb:b8:29:d9:25:57:bb:7a:ca:58:65:8a:42:33:
                    ff:1a:2b:11:00:f7:c2:eb:37:bf:f9:b3:d1:53:24:
                    e0:96:1f:3b:31:7d:56:40:fc:3f:3c:81:78:ee:86:
                    ed:92:f4:a7:26:89:8e:d7:75:21:55:b5:12:85:d6:
                    dd:f4:8e:7f:d9:89:d1:40:29:eb:2c:93:54:12:1f:
                    92:c3:df:fe:46:71:0a:77:67:cf:6b:e5:26:41:8a:
                    50:75:df:b8:0f:7f:be:4b:c2:d7:73:05:1f:70:65:
                    c7:41:3a:d1:6a:c9:3d:d2:1d:c0:31:38:48:22:74:
                    72:3b:41:53:42:09:4d:db:4f:72:e4:e5:04:b5:49:
                    20:10:ab:15:73:90:a8:77:4c:39:bd:2a:66:19:da:
                    1a:ed:ac:60:3f:02:1a:f3:52:fa:a1:82:99:de:9a:
                    64:a8:14:51:32:89:f9:48:dd:15:6c:30:e2:70:80:
                    23:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:75:31:01:86:28:B0:F0:2A:8A:F0:C6:1C:B7:FE:1B:C5:CA:BE:0C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/9c62717b-3bd1-3849-b4c6-bce320ba632c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl

            X509v3 Authority Key Identifier:
                keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  128.121.0.0/22
                  128.241.84.0/22
                  130.94.196.0/22
                  157.238.180.0/22
                  198.63.224.0/20
                  198.88.96.0/20
                  198.104.208.0/20
                  198.107.144.0/20
                  198.138.48.0/20
                  204.143.80.0/21
                  204.171.32.0/20
                  207.21.112.0/21
                  207.55.152.0/21
                  207.67.152.0/21
                  207.71.88.0/21
                  207.91.104.0/21
                  207.111.64.0/21
                  207.137.88.0/21
                  207.152.72.0/21
                  207.198.136.0/21
                  207.241.16.0/21
                  209.107.88.0/21
                  209.168.112.0/21
                  216.42.144.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7f:82:d5:0c:c5:09:b5:95:96:c7:3e:fb:84:66:e4:89:38:b5:
         16:01:0e:de:e0:d4:16:5c:da:cf:13:d5:b7:32:85:20:7a:da:
         39:77:02:01:ad:a3:98:41:54:f4:9f:c9:44:b0:fb:46:9e:8d:
         fe:03:6c:d8:6f:e9:be:f9:f4:24:66:f5:61:76:15:ca:21:8e:
         45:44:e9:a0:42:1b:d5:d2:a7:7c:be:d9:5d:d9:d9:6c:6f:20:
         4b:ea:ec:41:68:c6:63:6b:ac:4c:2b:c9:b5:28:25:1f:37:c7:
         ff:50:fc:55:87:6a:6f:5d:fc:75:de:38:51:d0:81:74:bc:cb:
         a0:da:8b:42:3b:87:0d:bc:2b:cc:7b:01:35:60:9e:aa:32:50:
         a7:53:16:1d:c7:3c:97:df:7f:3d:24:12:a0:cd:84:8c:72:9b:
         4e:8b:e3:c5:c1:e1:3f:b1:d2:29:43:4f:b6:0f:f5:5d:e9:5f:
         1f:85:3c:78:f1:fa:99:5e:b9:08:4b:2c:27:6c:4a:e2:c6:bc:
         8e:f4:d7:f0:82:54:4a:b5:c4:8d:fc:67:fe:01:c2:2b:cb:e3:
         5c:dc:9a:e4:3b:be:6a:f6:ed:b6:12:f6:6d:ca:ef:8c:f5:79:
         2a:5e:a6:c9:3d:4a:ab:dc:b6:d0:25:7f:32:10:8b:ce:4b:e5:
         5c:b6:90:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 19 08:21:32 2026 by rpki-client