Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/b90fbd97-8822-3745-b4a2-f3e544e9c78f.roa
File:                     b90fbd97-8822-3745-b4a2-f3e544e9c78f.roa (raw, json)
Hash identifier:          CW7Rvay4vsIB2jLTW3S82M3LknDG3O6Zzn2cLgHF1HM=
Subject key identifier:   28:64:C3:FD:46:2A:CD:03:3B:02:86:21:20:69:73:C4:F9:A0:A6:72
Certificate issuer:       /CN=1dd8be8a-bead-4d5b-a818-4d1482f479ff
Certificate serial:       010D0C9F4328584E2AD4657940CB06F6AC8E300D
Authority key identifier: E3:28:40:84:94:46:48:1D:6F:B2:BD:50:2C:4E:64:AF:32:56:B3:37
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/b90fbd97-8822-3745-b4a2-f3e544e9c78f.roa
Signing time:             Sun 14 Jun 2026 09:00:11 +0000
ROA not before:           Sun 14 Jun 2026 09:00:11 +0000
ROA not after:            Sat 12 Sep 2026 09:00:11 +0000
asID:                     7181
IP address blocks:        208.69.108.0/22 maxlen: 24
                          208.88.240.0/22 maxlen: 24
                          209.59.0.0/19 maxlen: 24
                          209.92.7.0/24 maxlen: 24
                          209.92.39.0/24 maxlen: 24
                          209.92.44.0/24 maxlen: 24
                          209.92.53.0/24 maxlen: 24
                          209.92.56.0/24 maxlen: 24
                          209.92.62.0/24 maxlen: 24
                          209.92.68.0/24 maxlen: 24
                          209.92.70.0/23 maxlen: 24
                          209.92.74.0/23 maxlen: 24
                          209.92.79.0/24 maxlen: 24
                          209.92.88.0/24 maxlen: 24
                          209.92.90.0/23 maxlen: 24
                          209.92.137.0/24 maxlen: 24
                          209.92.224.0/21 maxlen: 24
                          209.177.16.0/22 maxlen: 24
                          216.27.0.0/18 maxlen: 24
                          216.27.64.0/19 maxlen: 24
                          216.46.48.0/20 maxlen: 24
                          216.48.112.0/20 maxlen: 24
                          216.58.224.0/19 maxlen: 24
                          216.150.128.0/19 maxlen: 24
                          216.182.80.0/20 maxlen: 24
                          216.211.128.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/1dd8be8a-bead-4d5b-a818-4d1482f479ff.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/1dd8be8a-bead-4d5b-a818-4d1482f479ff.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Jul 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:2a:d4:65:79:40:cb:06:f6:ac:8e:30:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1dd8be8a-bead-4d5b-a818-4d1482f479ff
        Validity
            Not Before: Jun 14 09:00:11 2026 GMT
            Not After : Sep 12 09:00:11 2026 GMT
        Subject: CN=663b7115-4342-43e0-a715-30fb6cfd426b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:4a:02:98:02:ab:b4:7f:ea:1d:81:bd:52:b1:
                    6e:62:4b:f2:bf:b6:75:98:57:9c:7b:62:2f:f7:67:
                    e1:27:6b:9c:c2:28:95:70:d7:08:4b:4f:93:53:2d:
                    40:2f:a3:c9:19:27:f1:b5:bf:14:19:ce:f1:3e:9d:
                    28:cb:ec:df:cb:6e:f7:b2:61:4c:d3:a3:2f:87:53:
                    a1:80:3c:4d:c9:4a:6a:c9:23:9f:06:22:72:17:8a:
                    c4:91:85:47:68:3d:c7:bf:e6:d3:02:1c:f1:6c:8b:
                    44:45:35:35:4c:a9:aa:26:ac:da:6f:e4:83:6b:c8:
                    de:00:55:eb:a6:e3:d4:9a:92:3f:de:e7:ac:c5:cb:
                    00:90:f9:7a:c8:8f:dc:65:7e:0f:27:eb:19:cb:a8:
                    c0:0a:7a:15:96:64:88:d0:f5:aa:b4:2f:7a:b6:ac:
                    7a:8b:36:82:63:61:aa:8b:72:96:ee:18:d9:b6:2d:
                    f0:df:da:79:13:fd:37:d4:73:77:aa:e9:3a:2b:92:
                    e4:39:b9:91:7d:dc:79:9a:59:5b:3f:d0:f7:bd:29:
                    93:a8:3f:48:ee:81:74:49:e8:08:c1:ed:a2:22:5e:
                    ca:fe:4e:ac:95:5d:86:4a:1b:88:8c:bd:58:c5:3b:
                    01:3a:8e:9a:7a:df:a5:e4:96:b9:5e:f0:25:57:fe:
                    4a:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:64:C3:FD:46:2A:CD:03:3B:02:86:21:20:69:73:C4:F9:A0:A6:72
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/b90fbd97-8822-3745-b4a2-f3e544e9c78f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/1dd8be8a-bead-4d5b-a818-4d1482f479ff.crl

            X509v3 Authority Key Identifier:
                keyid:E3:28:40:84:94:46:48:1D:6F:B2:BD:50:2C:4E:64:AF:32:56:B3:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.69.108.0/22
                  208.88.240.0/22
                  209.59.0.0/19
                  209.92.7.0/24
                  209.92.39.0/24
                  209.92.44.0/24
                  209.92.53.0/24
                  209.92.56.0/24
                  209.92.62.0/24
                  209.92.68.0/24
                  209.92.70.0/23
                  209.92.74.0/23
                  209.92.79.0/24
                  209.92.88.0/24
                  209.92.90.0/23
                  209.92.137.0/24
                  209.92.224.0/21
                  209.177.16.0/22
                  216.27.0.0-216.27.95.255
                  216.46.48.0/20
                  216.48.112.0/20
                  216.58.224.0/19
                  216.150.128.0/19
                  216.182.80.0/20
                  216.211.128.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         09:69:48:93:d6:a3:26:fe:c8:6f:b9:69:14:75:a1:98:a2:49:
         d7:a9:6f:7e:46:bc:94:a5:00:3a:31:0c:8a:4e:8e:63:b5:5a:
         7d:d8:f9:25:be:cf:34:84:64:b6:80:76:3e:5a:33:0f:27:20:
         78:c0:12:14:07:17:6e:0f:ae:92:cd:f3:5a:eb:66:92:80:76:
         dc:b5:1d:87:99:f3:d0:3e:e5:5e:99:00:11:32:7e:b0:26:6e:
         8e:e3:a6:2f:ec:3c:2f:c6:83:6a:dd:f5:75:4c:95:0e:d7:8e:
         07:ba:c7:12:00:f4:53:5d:74:43:c8:eb:98:f6:0f:10:a9:1d:
         c9:1b:93:98:b6:05:e4:8a:b4:f4:85:24:81:75:62:6d:8b:d3:
         d9:62:ce:29:66:82:88:78:f0:4d:fc:b3:93:3b:95:74:00:48:
         ee:3b:6f:0a:2b:b4:a7:cb:8f:91:ad:09:5b:66:88:c8:48:eb:
         bc:2b:86:54:52:18:9d:26:7e:ad:67:83:fb:43:39:9e:33:21:
         fd:57:4b:b2:4d:f6:5f:be:56:4f:98:c0:77:3a:5f:b4:76:f9:
         16:24:73:08:d7:03:a5:27:69:5a:6e:48:c2:a2:50:73:3e:b8:
         06:54:b6:90:8d:ec:f1:12:be:c9:5d:54:91:5c:37:31:90:df:
         61:bb:dd:77
-----BEGIN CERTIFICATE-----
MIIG3zCCBcegAwIBAgIUAQ0Mn0MoWE4q1GV5QMsG9qyOMA0wDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMWRkOGJlOGEtYmVhZC00ZDViLWE4MTgtNGQxNDgyZjQ3
OWZmMB4XDTI2MDYxNDA5MDAxMVoXDTI2MDkxMjA5MDAxMVowLzEtMCsGA1UEAxMk
NjYzYjcxMTUtNDM0Mi00M2UwLWE3MTUtMzBmYjZjZmQ0MjZiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1UoCmAKrtH/qHYG9UrFuYkvyv7Z1mFece2Iv
92fhJ2ucwiiVcNcIS0+TUy1AL6PJGSfxtb8UGc7xPp0oy+zfy273smFM06Mvh1Oh
gDxNyUpqySOfBiJyF4rEkYVHaD3Hv+bTAhzxbItERTU1TKmqJqzab+SDa8jeAFXr
puPUmpI/3uesxcsAkPl6yI/cZX4PJ+sZy6jACnoVlmSI0PWqtC96tqx6izaCY2Gq
i3KW7hjZti3w39p5E/031HN3quk6K5LkObmRfdx5mllbP9D3vSmTqD9I7oF0SegI
we2iIl7K/k6slV2GShuIjL1YxTsBOo6aet+l5Ja5XvAlV/5KIwIDAQABo4ID8TCC
A+0wHQYDVR0OBBYEFChkw/1GKs0DOwKGISBpc8T5oKZyMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8xZGQ4
YmU4YS1iZWFkLTRkNWItYTgxOC00ZDE0ODJmNDc5ZmYvYjkwZmJkOTctODgyMi0z
NzQ1LWI0YTItZjNlNTQ0ZTljNzhmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvMWRkOGJlOGEtYmVhZC00ZDViLWE4
MTgtNGQxNDgyZjQ3OWZmLzFkZDhiZThhLWJlYWQtNGQ1Yi1hODE4LTRkMTQ4MmY0
NzlmZi5jcmwwHwYDVR0jBBgwFoAU4yhAhJRGSB1vsr1QLE5krzJWszcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi8xZGQ4YmU4YS1iZWFkLTRkNWItYTgxOC00ZDE0
ODJmNDc5ZmYuY2VyMIG6BggrBgEFBQcBBwEB/wSBqjCBpzCBpAQCAAEwgZ0DBALQ
RWwDBALQWPADBAXROwADBADRXAcDBADRXCcDBADRXCwDBADRXDUDBADRXDgDBADR
XD4DBADRXEQDBAHRXEYDBAHRXEoDBADRXE8DBADRXFgDBAHRXFoDBADRXIkDBAPR
XOADBALRsRAwCwMDANgbAwQF2BtAAwQE2C4wAwQE2DBwAwQF2DrgAwQF2JaAAwQE
2LZQAwQE2NOAMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcC
ARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWww
DQYJKoZIhvcNAQELBQADggEBAAlpSJPWoyb+yG+5aRR1oZiiSdepb35GvJSlADox
DIpOjmO1Wn3Y+SW+zzSEZLaAdj5aMw8nIHjAEhQHF24PrpLN81rrZpKAdty1HYeZ
89A+5V6ZABEyfrAmbo7jpi/sPC/Gg2rd9XVMlQ7Xjge6xxIA9FNddEPI65j2DxCp
Hckbk5i2BeSKtPSFJIF1Ym2L09lizilmgoh48E38s5M7lXQASO47bwortKfLj5Gt
CVtmiMhI67wrhlRSGJ0mfq1ng/tDOZ4zIf1XS7JN9l++Vk+YwHc6X7R2+RYkcwjX
A6UnaVpuSMKiUHM+uAZUtpCN7PESvsldVJFcNzGQ32G73Xc=
-----END CERTIFICATE-----
Generated at Wed Jul 22 00:08:35 2026 by rpki-client