Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a24ab18f-7bd4-439d-a6af-f2605cf8130e/385d9e3e-e5e1-352e-8d3e-747a4e1a6f2d.roa
File:                     385d9e3e-e5e1-352e-8d3e-747a4e1a6f2d.roa (raw, json)
Hash identifier:          gEDAgRmFU4nVtx3nX5B0mDgy4IRfIgQSRV3ktKSo55s=
Subject key identifier:   34:87:35:04:FA:21:38:12:D4:66:F4:58:63:4B:62:30:8F:65:C6:36
Certificate issuer:       /CN=a24ab18f-7bd4-439d-a6af-f2605cf8130e
Certificate serial:       010D0C9F4328584EA7884E146908A32115DA8480
Authority key identifier: 39:1B:BF:E7:09:A9:F5:C4:B0:EB:5F:F3:8F:5D:DC:74:FB:F6:55:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a24ab18f-7bd4-439d-a6af-f2605cf8130e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a24ab18f-7bd4-439d-a6af-f2605cf8130e/385d9e3e-e5e1-352e-8d3e-747a4e1a6f2d.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     396226
IP address blocks:        66.146.226.0/23 maxlen: 24
                          148.59.145.0/24 maxlen: 24
                          173.231.64.0/23 maxlen: 24
                          173.231.68.0/22 maxlen: 24
                          199.193.59.0/24 maxlen: 24
                          200.50.128.0/21 maxlen: 24
                          209.142.72.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a24ab18f-7bd4-439d-a6af-f2605cf8130e/a24ab18f-7bd4-439d-a6af-f2605cf8130e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a24ab18f-7bd4-439d-a6af-f2605cf8130e/a24ab18f-7bd4-439d-a6af-f2605cf8130e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a24ab18f-7bd4-439d-a6af-f2605cf8130e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 31 Jul 2026 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:88:4e:14:69:08:a3:21:15:da:84:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a24ab18f-7bd4-439d-a6af-f2605cf8130e
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=620df900-fd16-4056-b537-a34dd39169ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:93:b8:d4:fc:eb:22:aa:b3:84:be:dc:f8:52:
                    46:f8:e2:5f:f4:59:2f:65:2e:f4:b7:89:31:09:16:
                    d1:42:7d:6e:2f:29:33:4a:3f:e6:f1:bf:1e:0e:1e:
                    d2:35:b9:fa:33:f8:16:d5:8a:db:74:36:ba:00:ea:
                    08:0b:d1:a4:d3:58:97:51:52:0c:bb:80:b3:cb:b3:
                    7f:36:99:3c:c1:59:30:00:f7:da:33:de:97:ef:6e:
                    d9:66:29:49:6d:7a:0b:60:b7:1f:e9:4d:4a:e4:e5:
                    4e:a9:20:04:6b:e6:bf:dc:90:12:03:bd:97:69:73:
                    9f:ee:f6:99:22:47:7a:2a:75:67:75:03:94:2d:1f:
                    1e:4e:87:ba:ac:bf:47:db:c1:9e:cb:bb:32:5c:34:
                    29:e7:c1:2b:17:df:0b:f1:79:38:e8:bf:5b:8f:df:
                    44:59:5d:d8:eb:3f:b9:1e:cb:db:09:04:36:95:49:
                    b9:58:ad:64:d8:21:02:78:83:33:fc:70:11:22:fb:
                    65:ab:18:00:49:c6:37:3d:5d:e7:30:ca:c3:da:9e:
                    fc:4a:05:ff:14:c5:db:29:05:8e:ec:5d:28:7e:3e:
                    0f:c5:fd:3e:a3:f1:3e:04:1e:07:8e:98:7f:93:e1:
                    bb:09:46:df:b3:b0:2d:f5:18:79:bb:03:a1:99:40:
                    e2:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:87:35:04:FA:21:38:12:D4:66:F4:58:63:4B:62:30:8F:65:C6:36
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a24ab18f-7bd4-439d-a6af-f2605cf8130e/385d9e3e-e5e1-352e-8d3e-747a4e1a6f2d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a24ab18f-7bd4-439d-a6af-f2605cf8130e/a24ab18f-7bd4-439d-a6af-f2605cf8130e.crl

            X509v3 Authority Key Identifier:
                keyid:39:1B:BF:E7:09:A9:F5:C4:B0:EB:5F:F3:8F:5D:DC:74:FB:F6:55:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a24ab18f-7bd4-439d-a6af-f2605cf8130e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.146.226.0/23
                  148.59.145.0/24
                  173.231.64.0/23
                  173.231.68.0/22
                  199.193.59.0/24
                  200.50.128.0/21
                  209.142.72.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7c:59:fa:50:75:f3:c5:4c:c7:2e:b0:37:e0:96:24:cc:91:89:
         50:7b:08:da:91:d5:94:10:f9:89:e9:98:3f:0c:f0:f2:12:cf:
         1c:b5:78:14:9d:2d:24:33:ab:c7:f1:f9:75:8f:f3:be:7c:b9:
         e2:cb:28:3e:94:7e:26:90:71:ac:8e:b5:61:56:a4:f2:25:67:
         82:49:eb:e4:d2:1f:85:86:f3:bc:8e:1c:f5:38:da:e4:b5:e5:
         d9:2c:d4:ce:0e:2d:e0:ce:da:8e:2c:54:e2:70:f5:ea:e8:f7:
         86:e9:cc:46:42:94:62:1a:e3:2a:ae:56:f6:e2:26:37:c6:43:
         c5:7f:d8:8b:a8:29:78:08:df:46:2d:85:e0:79:ef:3f:bd:2b:
         a0:90:52:ed:cd:fb:79:84:84:aa:75:bc:65:f6:b8:38:b3:3b:
         5b:78:3f:1b:68:c9:4a:69:54:55:ec:c3:81:5e:70:e3:77:ac:
         f0:de:6a:20:54:b4:b5:15:18:98:40:ad:ec:42:29:cd:d3:ec:
         6f:64:84:0a:4f:29:70:11:ee:b5:8b:4e:06:10:e8:dc:d3:a3:
         65:a6:38:65:46:f0:ae:ad:e9:73:26:08:ff:d6:30:0e:86:21:
         4d:68:e6:68:7d:36:75:18:e2:6d:87:4c:ac:c6:13:9d:20:8b:
         00:1a:f4:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 20:35:11 2026 by rpki-client