Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5e22d7ae-1224-43fb-907a-6690f7bd9a2e/ac0441e3-afb5-3633-b538-75ead7a2914d.roa
File:                     ac0441e3-afb5-3633-b538-75ead7a2914d.roa (raw, json)
Hash identifier:          NqCVAQPAmlck9QHUMTPg4zTaOAPRmb0B6sjqRWl3trk=
Subject key identifier:   99:22:5C:E7:98:79:7B:A2:B3:A0:EB:C8:80:13:74:93:8F:31:ED:EB
Certificate issuer:       /CN=5e22d7ae-1224-43fb-907a-6690f7bd9a2e
Certificate serial:       010D0C9F4328584DE3F270D541C80B1B4B47BB00
Authority key identifier: 60:B1:66:1F:22:1A:63:15:3A:73:41:10:72:AE:0E:CC:D7:BA:34:68
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5e22d7ae-1224-43fb-907a-6690f7bd9a2e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5e22d7ae-1224-43fb-907a-6690f7bd9a2e/ac0441e3-afb5-3633-b538-75ead7a2914d.roa
Signing time:             Tue 19 May 2026 23:38:33 +0000
ROA not before:           Tue 19 May 2026 23:38:33 +0000
ROA not after:            Fri 03 Jul 2026 01:00:25 +0000
asID:                     16509
IP address blocks:        64.40.129.0/24 maxlen: 24
                          64.40.132.0/24 maxlen: 24
                          64.40.133.0/24 maxlen: 24
                          64.40.136.0/24 maxlen: 24
                          64.40.137.0/24 maxlen: 24
                          64.40.139.0/24 maxlen: 24
                          153.57.0.0/24 maxlen: 24
                          2607:9240:100::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5e22d7ae-1224-43fb-907a-6690f7bd9a2e/5e22d7ae-1224-43fb-907a-6690f7bd9a2e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5e22d7ae-1224-43fb-907a-6690f7bd9a2e/5e22d7ae-1224-43fb-907a-6690f7bd9a2e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5e22d7ae-1224-43fb-907a-6690f7bd9a2e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 04 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:e3:f2:70:d5:41:c8:0b:1b:4b:47:bb:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e22d7ae-1224-43fb-907a-6690f7bd9a2e
        Validity
            Not Before: May 19 23:38:33 2026 GMT
            Not After : Jul  3 01:00:25 2026 GMT
        Subject: CN=ced7436e-3449-4377-a072-792cb7407d9e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:e2:58:42:e2:61:73:f4:9f:08:26:37:17:bb:
                    a5:85:c4:80:b3:02:eb:9e:70:a7:33:98:dc:40:57:
                    f7:9d:6d:2a:89:38:dc:2e:da:2a:91:24:f5:74:69:
                    e2:c7:42:86:d3:c0:d2:7d:5b:2b:2b:bb:d8:97:c5:
                    8e:85:d0:fd:20:d3:c2:62:2e:3e:05:47:aa:2e:70:
                    68:41:9d:3a:ee:fd:ba:5e:9e:72:80:10:4b:8b:67:
                    33:a6:49:be:a6:e2:74:02:3f:a1:9a:28:b6:50:bd:
                    a0:11:a7:77:ed:13:74:b5:8b:0f:71:98:96:09:ba:
                    bc:4b:93:07:ff:e5:b7:90:80:4c:94:7a:df:b9:10:
                    8d:18:a5:8a:e2:4c:0f:fa:48:52:d2:2e:9e:5b:73:
                    19:99:ce:07:77:90:c9:14:95:47:92:ca:0d:86:24:
                    cf:ac:c9:b8:05:4b:c0:70:2d:50:2c:26:11:9c:ba:
                    28:9c:16:15:02:af:85:a5:a9:55:3e:0a:0e:6e:21:
                    79:58:4f:6d:d2:a1:f5:e2:a8:1e:73:69:c2:42:d3:
                    64:20:95:e6:5f:d6:6d:44:d9:a0:02:ce:48:87:6d:
                    67:df:69:02:4f:13:11:b6:66:f2:cf:1e:d8:49:ee:
                    85:03:c9:ea:0f:c1:0c:4d:c9:14:83:de:e4:63:60:
                    ac:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:22:5C:E7:98:79:7B:A2:B3:A0:EB:C8:80:13:74:93:8F:31:ED:EB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5e22d7ae-1224-43fb-907a-6690f7bd9a2e/ac0441e3-afb5-3633-b538-75ead7a2914d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5e22d7ae-1224-43fb-907a-6690f7bd9a2e/5e22d7ae-1224-43fb-907a-6690f7bd9a2e.crl

            X509v3 Authority Key Identifier:
                keyid:60:B1:66:1F:22:1A:63:15:3A:73:41:10:72:AE:0E:CC:D7:BA:34:68

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5e22d7ae-1224-43fb-907a-6690f7bd9a2e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.40.129.0/24
                  64.40.132.0/23
                  64.40.136.0/23
                  64.40.139.0/24
                  153.57.0.0/24
                IPv6:
                  2607:9240:100::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         38:04:52:8b:af:25:d3:d9:ee:93:61:f3:31:8f:56:90:69:54:
         c4:57:1a:ca:2e:66:a4:95:73:93:9c:fd:a8:e9:d9:20:73:91:
         2b:b5:69:b9:2c:12:75:12:05:6d:8e:58:53:18:e5:f3:85:ae:
         1f:dd:7f:99:f8:c6:ba:88:dc:c2:76:11:94:78:6c:b2:4a:b8:
         fc:80:94:dd:43:95:d4:cd:47:b5:02:7e:31:bc:bb:2c:17:7f:
         c4:48:cb:fc:a0:cc:7c:78:3c:ef:80:f2:38:b0:cf:17:e8:a3:
         2e:0c:47:f1:0e:cb:45:fc:8e:56:af:bc:5f:3c:9a:aa:3a:4a:
         6c:96:c9:5f:95:b6:1c:9d:a7:e5:e1:76:c8:cd:c2:88:5f:9d:
         9b:5d:51:c3:45:75:b1:a0:0c:36:ed:0f:ff:c0:75:1f:51:ef:
         94:cf:89:1a:5d:aa:8e:cb:0a:24:48:a3:db:9d:8f:f6:2e:fe:
         c8:42:f7:5d:41:a1:8d:50:7b:8b:f1:e2:28:48:e0:9a:2c:44:
         b8:cd:62:89:34:89:54:1d:22:58:d7:07:c8:18:30:a2:e5:96:
         ee:42:30:13:c7:38:c9:8c:3b:7f:c8:30:31:31:19:f3:d5:aa:
         3a:1c:61:24:47:90:0b:00:31:45:75:8e:06:71:8f:e5:0d:34:
         5b:14:02:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 22:13:58 2026 by rpki-client