Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/576b0633-e844-4e36-85eb-6148d6321883/7172e1bb-e029-3c30-be5b-34e5b3610c59.roa
File:                     7172e1bb-e029-3c30-be5b-34e5b3610c59.roa (raw, json)
Hash identifier:          A5AYj5K8DY7dGdrlvHvJ+VsIxj1Lo/+g8KPHuH0s8E4=
Subject key identifier:   B1:42:74:0B:AC:C2:93:BE:DB:C8:3A:B9:4A:E2:4B:E0:06:26:85:46
Certificate issuer:       /CN=576b0633-e844-4e36-85eb-6148d6321883
Certificate serial:       010D0C9F4328584EA791B98AC9A89ADC5B57FD27
Authority key identifier: 2C:B5:DC:55:36:57:AB:C4:81:78:33:46:60:49:85:D9:BD:71:1B:73
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/576b0633-e844-4e36-85eb-6148d6321883.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/576b0633-e844-4e36-85eb-6148d6321883/7172e1bb-e029-3c30-be5b-34e5b3610c59.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     36012
IP address blocks:        66.178.160.0/20 maxlen: 24
                          69.9.128.0/19 maxlen: 24
                          74.51.16.0/20 maxlen: 24
                          139.60.24.0/21 maxlen: 24
                          162.244.36.0/22 maxlen: 24
                          162.247.40.0/21 maxlen: 24
                          187.40.136.0/21 maxlen: 24
                          187.40.144.0/20 maxlen: 24
                          187.40.160.0/19 maxlen: 24
                          216.115.0.0/20 maxlen: 24
                          2605:e00::/32 maxlen: 48
                          2606:c800::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/576b0633-e844-4e36-85eb-6148d6321883/576b0633-e844-4e36-85eb-6148d6321883.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/576b0633-e844-4e36-85eb-6148d6321883/576b0633-e844-4e36-85eb-6148d6321883.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/576b0633-e844-4e36-85eb-6148d6321883.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 26 Aug 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:91:b9:8a:c9:a8:9a:dc:5b:57:fd:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=576b0633-e844-4e36-85eb-6148d6321883
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=c8a37cee-1b52-42ef-bc01-fe5779f7d284
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:44:70:55:48:c6:69:f2:12:a8:68:4f:1c:01:
                    29:a0:14:d5:3b:fc:93:33:4a:76:e3:90:6a:e0:fd:
                    a9:3c:ac:6d:6e:b0:37:2c:8c:d0:7f:db:1a:9d:fe:
                    23:b6:43:cc:43:56:51:6b:14:2e:f1:47:08:11:70:
                    7e:16:78:09:73:62:df:7a:98:e4:dd:71:ba:05:2b:
                    7a:12:ea:25:15:23:d8:76:04:db:cb:6b:60:58:c2:
                    99:c9:af:12:bb:c9:c9:0c:6e:fc:7b:30:28:9e:d9:
                    82:63:ce:58:56:c4:d1:53:74:87:6b:df:90:9d:94:
                    a8:22:91:ad:6e:ce:3b:d5:90:e3:36:ee:45:a9:29:
                    5a:b0:f8:6b:10:3a:80:2e:bb:be:58:34:ca:2c:af:
                    7b:1a:e9:48:46:4f:f9:2f:96:c2:02:f6:e2:8e:95:
                    ec:e9:2c:52:02:d3:fe:e0:cf:af:19:d1:2a:1a:0c:
                    87:b0:08:9a:a4:7f:1f:02:6e:81:17:84:3b:89:ef:
                    d6:06:b2:bf:c2:27:23:65:87:51:b2:24:94:27:4e:
                    8b:fd:e2:ed:39:b3:32:f1:8e:cb:3c:99:d0:ce:87:
                    67:92:80:40:a2:2e:32:74:16:a0:16:04:e0:ce:0b:
                    ba:de:b4:62:1f:76:25:1b:48:33:c1:60:e9:fd:74:
                    1e:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:42:74:0B:AC:C2:93:BE:DB:C8:3A:B9:4A:E2:4B:E0:06:26:85:46
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/576b0633-e844-4e36-85eb-6148d6321883/7172e1bb-e029-3c30-be5b-34e5b3610c59.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/576b0633-e844-4e36-85eb-6148d6321883/576b0633-e844-4e36-85eb-6148d6321883.crl

            X509v3 Authority Key Identifier:
                keyid:2C:B5:DC:55:36:57:AB:C4:81:78:33:46:60:49:85:D9:BD:71:1B:73

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/576b0633-e844-4e36-85eb-6148d6321883.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.178.160.0/20
                  69.9.128.0/19
                  74.51.16.0/20
                  139.60.24.0/21
                  162.244.36.0/22
                  162.247.40.0/21
                  187.40.136.0-187.40.191.255
                  216.115.0.0/20
                IPv6:
                  2605:e00::/32
                  2606:c800::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         47:2e:ef:63:f6:0f:af:21:44:3e:0a:f3:45:00:b6:c1:7a:c5:
         7c:cf:30:3d:cc:f4:75:bb:f3:9f:3a:9e:4a:48:da:c2:28:10:
         b1:21:a2:2a:8b:3d:6d:14:e6:7b:ce:76:47:eb:b9:f2:f9:56:
         32:2f:31:a4:84:d1:30:86:e1:aa:9c:5a:44:28:54:9b:b2:f0:
         72:2b:ee:23:54:83:84:97:0d:6c:b8:a0:bc:01:af:0c:93:aa:
         6f:3b:ec:12:ae:75:6a:fa:7e:64:e8:bf:ea:82:17:38:c3:af:
         8c:71:e3:ef:ec:1f:bf:08:93:1c:d8:58:fc:91:1e:c5:19:4e:
         e6:af:4d:a0:30:28:06:89:29:c9:03:ab:cc:84:0e:0e:af:fe:
         bb:13:03:0e:80:aa:f8:ea:ef:ab:79:fa:b0:17:ef:bb:ba:d2:
         d0:ad:93:75:82:6f:6c:ad:d2:77:0d:0b:17:a6:3c:25:9a:d6:
         d9:df:83:f2:0d:35:ac:ec:76:05:ba:d8:10:55:ff:ed:bc:c0:
         19:f8:b9:cd:00:88:f0:bd:7d:df:3a:59:67:a6:03:2f:5b:b4:
         cf:b3:f6:12:4b:90:7b:75:72:19:b9:89:8f:75:1f:e7:b3:87:
         8c:c8:7f:b3:0a:16:3b:9a:65:95:b4:af:c5:2b:16:5d:a7:2c:
         6f:61:84:9e
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Tue Aug 25 12:31:14 2026 by rpki-client