Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/25283898-2dc3-4477-af3c-b64dd3c800ab/cda65907-ce3f-342f-b106-fe8256cae008.roa
File:                     cda65907-ce3f-342f-b106-fe8256cae008.roa (raw, json)
Hash identifier:          5eDlJ6zFLbudYELbtGLaKO4mKLm+rFXeK2QqH5aKJdo=
Subject key identifier:   4F:A7:2F:37:59:B2:67:FC:10:D0:7A:18:41:F0:B3:50:24:38:10:84
Certificate issuer:       /CN=25283898-2dc3-4477-af3c-b64dd3c800ab
Certificate serial:       010D0C9F4328584E86F4FE9079EA8974C2F88EE0
Authority key identifier: 1D:7E:8D:99:8B:C0:42:C7:94:EB:F1:50:39:34:AA:0C:50:60:13:DF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/25283898-2dc3-4477-af3c-b64dd3c800ab.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/25283898-2dc3-4477-af3c-b64dd3c800ab/cda65907-ce3f-342f-b106-fe8256cae008.roa
Signing time:             Fri 17 Jul 2026 09:00:14 +0000
ROA not before:           Fri 17 Jul 2026 09:00:14 +0000
ROA not after:            Thu 15 Oct 2026 09:00:14 +0000
asID:                     13692
IP address blocks:        67.219.224.0/20 maxlen: 20
                          100.42.160.0/20 maxlen: 20
                          108.174.176.0/20 maxlen: 20
                          172.98.44.0/22 maxlen: 22
                          192.86.0.0/24 maxlen: 24
                          192.175.50.0/23 maxlen: 23
                          198.100.136.0/21 maxlen: 21
                          208.77.176.0/21 maxlen: 21
                          2607:8600::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/25283898-2dc3-4477-af3c-b64dd3c800ab/25283898-2dc3-4477-af3c-b64dd3c800ab.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/25283898-2dc3-4477-af3c-b64dd3c800ab/25283898-2dc3-4477-af3c-b64dd3c800ab.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/25283898-2dc3-4477-af3c-b64dd3c800ab.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:86:f4:fe:90:79:ea:89:74:c2:f8:8e:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=25283898-2dc3-4477-af3c-b64dd3c800ab
        Validity
            Not Before: Jul 17 09:00:14 2026 GMT
            Not After : Oct 15 09:00:14 2026 GMT
        Subject: CN=21c35030-c962-4a5a-b048-1d5c99f6dcb4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:33:e5:b7:71:5b:1d:19:23:7b:67:32:69:75:
                    56:c1:e4:d5:4b:03:e5:fd:27:0e:09:5d:02:8d:de:
                    1f:32:ab:cb:b0:9d:0a:a6:6d:9f:07:25:80:83:70:
                    a0:9b:34:3f:c4:31:7b:25:a0:29:3d:d4:13:31:d6:
                    06:fe:ab:6c:dc:15:8c:0b:c5:49:9e:9d:10:7e:ab:
                    44:6d:4f:4a:30:77:76:ed:61:3f:95:50:62:e2:ab:
                    7c:a8:34:93:fd:cc:4b:2a:ab:7c:65:79:28:33:a2:
                    c1:2f:ef:e3:bd:24:2f:ec:64:41:91:c2:29:2e:4b:
                    c0:69:9c:f8:70:80:a5:49:e7:91:cf:29:da:f6:64:
                    80:01:c5:bd:34:b0:70:c6:ac:05:06:c2:19:79:c0:
                    e8:39:a7:ab:28:c2:56:0a:70:2d:04:4a:c3:c4:13:
                    81:42:c3:a4:a6:fd:d6:78:d7:c3:51:5f:e5:73:bb:
                    e0:1e:79:e8:aa:cc:4e:f9:3d:61:5e:ca:69:18:d5:
                    c6:5e:11:15:f0:5e:ac:6a:d8:19:c5:94:5d:38:f8:
                    2d:39:a7:4b:a3:68:22:2b:93:69:9e:6e:e7:4a:38:
                    66:ce:6b:de:fb:ad:ad:54:92:ae:9c:5c:12:8a:47:
                    57:ab:63:87:5e:8f:d1:91:9f:09:b5:d7:29:2c:4a:
                    96:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:A7:2F:37:59:B2:67:FC:10:D0:7A:18:41:F0:B3:50:24:38:10:84
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/25283898-2dc3-4477-af3c-b64dd3c800ab/cda65907-ce3f-342f-b106-fe8256cae008.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/25283898-2dc3-4477-af3c-b64dd3c800ab/25283898-2dc3-4477-af3c-b64dd3c800ab.crl

            X509v3 Authority Key Identifier:
                keyid:1D:7E:8D:99:8B:C0:42:C7:94:EB:F1:50:39:34:AA:0C:50:60:13:DF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/25283898-2dc3-4477-af3c-b64dd3c800ab.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.219.224.0/20
                  100.42.160.0/20
                  108.174.176.0/20
                  172.98.44.0/22
                  192.86.0.0/24
                  192.175.50.0/23
                  198.100.136.0/21
                  208.77.176.0/21
                IPv6:
                  2607:8600::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         49:dc:d2:78:03:ac:43:2c:77:95:8c:29:4f:e1:3e:96:78:05:
         bc:a4:68:2b:2e:d0:0b:ec:10:0f:53:92:52:bc:59:eb:12:60:
         a9:b1:ed:b3:c8:89:92:b0:12:27:42:d8:6a:60:cf:dc:c5:ac:
         82:0a:f1:13:a9:58:a7:7c:68:90:ee:76:08:f0:14:ab:39:97:
         4d:21:69:26:c3:33:d8:00:a0:ae:3c:b0:86:3f:fb:ae:91:c9:
         78:9f:62:12:9e:7b:41:95:c3:80:54:6d:73:a0:d7:a4:64:eb:
         7b:e9:6f:53:4e:7b:85:a8:48:5e:08:ae:7b:42:e3:dc:a2:dd:
         5c:c9:32:6b:15:f2:ab:ee:40:57:46:5e:60:ae:65:e3:1b:f0:
         0c:98:c0:13:e1:23:6a:6b:f6:1a:e0:4f:55:10:82:24:48:9b:
         a8:98:6d:2c:b4:88:fd:e6:bb:3c:bc:eb:26:c6:d2:95:d6:21:
         ff:62:05:dc:51:2a:05:e5:ba:3b:b6:16:0e:de:eb:41:66:9e:
         50:2f:9d:c1:82:d0:24:68:c8:a0:59:f2:33:1a:61:d3:36:f9:
         eb:5c:c4:0d:ea:4e:67:dd:d0:b8:fe:da:82:77:2e:ce:ea:69:
         be:ca:7c:4a:27:e3:83:cc:b8:d8:aa:14:e7:5f:5e:e0:b3:60:
         73:7a:a3:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 17 11:52:21 2026 by rpki-client