Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/4425315d-37cc-369f-956e-12389c5be1d8.roa
File:                     4425315d-37cc-369f-956e-12389c5be1d8.roa (raw, json)
Hash identifier:          +A5u+i5swF1Q9TfsHK3kbhZab3SV76Ajz1yNSZAAiBE=
Subject key identifier:   BB:23:44:B8:29:C5:56:B1:97:6E:72:D1:BC:97:64:26:7A:EE:2E:4B
Certificate issuer:       /CN=1dd8be8a-bead-4d5b-a818-4d1482f479ff
Certificate serial:       010D0C9F4328584E6FFB93A35E9D8AA195063000
Authority key identifier: E3:28:40:84:94:46:48:1D:6F:B2:BD:50:2C:4E:64:AF:32:56:B3:37
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/4425315d-37cc-369f-956e-12389c5be1d8.roa
Signing time:             Thu 09 Jul 2026 03:30:08 +0000
ROA not before:           Thu 09 Jul 2026 03:30:08 +0000
ROA not after:            Wed 07 Oct 2026 03:30:08 +0000
asID:                     24459
IP address blocks:        65.99.212.0/24 maxlen: 24
                          65.99.219.0/24 maxlen: 24
                          65.99.223.0/24 maxlen: 24
                          65.99.230.0/24 maxlen: 24
                          72.249.12.0/24 maxlen: 24
                          72.249.20.0/22 maxlen: 24
                          72.249.36.0/22 maxlen: 24
                          72.249.66.0/24 maxlen: 24
                          72.249.74.0/24 maxlen: 24
                          72.249.82.0/23 maxlen: 24
                          72.249.85.0/24 maxlen: 24
                          72.249.123.0/24 maxlen: 24
                          72.249.182.0/23 maxlen: 24
                          72.249.185.0/24 maxlen: 24
                          72.249.186.0/24 maxlen: 24
                          72.249.190.0/23 maxlen: 24
                          206.123.75.0/24 maxlen: 24
                          206.123.107.0/24 maxlen: 24
                          206.123.108.0/24 maxlen: 24
                          206.123.113.0/24 maxlen: 24
                          206.123.115.0/24 maxlen: 24
                          207.210.219.0/24 maxlen: 24
                          207.210.242.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/1dd8be8a-bead-4d5b-a818-4d1482f479ff.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/1dd8be8a-bead-4d5b-a818-4d1482f479ff.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Jul 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:6f:fb:93:a3:5e:9d:8a:a1:95:06:30:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1dd8be8a-bead-4d5b-a818-4d1482f479ff
        Validity
            Not Before: Jul  9 03:30:08 2026 GMT
            Not After : Oct  7 03:30:08 2026 GMT
        Subject: CN=b4a1ee4e-fe90-4410-9876-f68926a13fcb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:83:29:6b:a1:e0:c9:80:8c:cf:29:81:94:d5:
                    01:fe:57:d0:68:3b:7d:e3:97:92:3e:52:2f:4e:80:
                    74:37:49:e5:2f:94:49:55:d9:86:5b:80:5b:d8:67:
                    56:34:48:6a:ce:0e:2e:5e:a6:9f:a6:15:1f:7f:ab:
                    37:a6:8d:b6:3e:40:f0:03:7d:b2:40:17:c7:15:44:
                    61:60:0f:f5:a2:f5:54:13:70:b6:87:7d:d4:dc:b1:
                    bb:16:0e:fa:a7:58:c6:37:ee:f2:f6:ae:68:87:22:
                    39:9d:31:c8:ed:f0:43:43:1a:84:a2:05:bf:96:74:
                    4e:d5:02:71:9b:82:ce:9c:a3:28:93:11:4c:aa:66:
                    83:72:aa:be:18:9b:b0:93:f1:b4:66:b0:43:41:25:
                    e0:d7:f7:da:a4:11:e3:9d:54:81:ba:d8:1a:e8:2a:
                    3f:20:bb:31:50:01:42:89:42:28:8f:11:74:be:44:
                    1f:f8:4f:9b:e6:95:10:2d:9c:8e:c4:e2:53:4c:9c:
                    fb:e6:27:7f:94:90:6e:e5:45:c7:ea:b3:54:d8:3c:
                    97:ac:67:62:48:7d:df:9c:e7:19:e0:ca:25:db:e7:
                    de:26:d6:ad:d2:4e:d0:3f:6c:9d:78:ae:c9:cf:c6:
                    d7:f9:b4:b9:99:ab:f9:12:04:3c:ae:41:a9:05:74:
                    6e:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:23:44:B8:29:C5:56:B1:97:6E:72:D1:BC:97:64:26:7A:EE:2E:4B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/4425315d-37cc-369f-956e-12389c5be1d8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/1dd8be8a-bead-4d5b-a818-4d1482f479ff.crl

            X509v3 Authority Key Identifier:
                keyid:E3:28:40:84:94:46:48:1D:6F:B2:BD:50:2C:4E:64:AF:32:56:B3:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.99.212.0/24
                  65.99.219.0/24
                  65.99.223.0/24
                  65.99.230.0/24
                  72.249.12.0/24
                  72.249.20.0/22
                  72.249.36.0/22
                  72.249.66.0/24
                  72.249.74.0/24
                  72.249.82.0/23
                  72.249.85.0/24
                  72.249.123.0/24
                  72.249.182.0/23
                  72.249.185.0-72.249.186.255
                  72.249.190.0/23
                  206.123.75.0/24
                  206.123.107.0-206.123.108.255
                  206.123.113.0/24
                  206.123.115.0/24
                  207.210.219.0/24
                  207.210.242.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         45:31:33:99:09:7a:37:dd:96:73:71:9c:35:ae:7a:21:b6:a9:
         63:b3:b5:b8:25:5f:18:3c:e3:02:e5:13:cf:c8:d5:9e:96:7b:
         b5:d5:3b:b4:a0:b3:0f:45:9d:ae:ac:8c:24:4f:a3:1e:13:ba:
         23:70:f6:86:3f:8d:ff:c5:79:51:0f:33:ec:a0:2f:a3:48:e8:
         7d:d9:91:e6:2d:be:1a:22:d5:b4:f1:88:e0:6a:91:4e:21:93:
         2b:d8:e7:81:77:bb:e7:b3:37:e5:f1:ee:3e:96:24:1a:52:51:
         6f:96:2e:3f:e2:e5:88:9f:f7:9c:a2:a5:34:8d:c0:2b:a9:b4:
         b0:4c:eb:db:46:b0:39:c5:21:4f:57:4e:ab:6b:0c:61:8b:23:
         6d:a7:7c:6f:5f:bc:15:5d:26:7f:c9:6a:55:d7:01:c5:31:92:
         37:d8:e8:70:ae:ab:47:9f:b0:56:c6:af:03:17:01:de:24:a9:
         d8:8f:a3:0d:63:cd:64:60:6b:40:65:15:95:1f:a6:d7:22:4c:
         07:c8:a6:a2:a3:19:38:68:60:ba:0d:a7:b4:1d:00:57:07:af:
         df:0d:a6:6f:19:51:1f:25:c9:c5:b1:e6:61:7c:f0:c9:82:45:
         00:f2:b8:f4:88:a3:7e:0c:54:40:a7:ca:c2:41:c0:15:84:4a:
         94:46:ee:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 22 00:11:47 2026 by rpki-client