Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ccfe663c-8878-4cc0-a772-17e76a493040/c753282b-6491-33e8-a0e1-bab307a0dd28.roa
File:                     c753282b-6491-33e8-a0e1-bab307a0dd28.roa (raw, json)
Hash identifier:          SSUhuUQ/I/6zgkEwrpnPPSaYaTrvTvVPpG7kxoC6rP8=
Subject key identifier:   18:83:7D:90:C2:C8:50:B7:23:55:BB:65:15:C8:3B:11:C7:ED:B5:A7
Certificate issuer:       /CN=ccfe663c-8878-4cc0-a772-17e76a493040
Certificate serial:       010D0C9F4328584EA795DFADE68B6DAD8A454C00
Authority key identifier: FF:62:FA:82:57:51:D3:39:FF:4E:2C:90:21:55:BE:D4:A8:D8:DE:F0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ccfe663c-8878-4cc0-a772-17e76a493040.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ccfe663c-8878-4cc0-a772-17e76a493040/c753282b-6491-33e8-a0e1-bab307a0dd28.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     7018
IP address blocks:        139.125.0.0/16 maxlen: 16
                          192.205.31.0/24 maxlen: 24
                          192.205.32.0/22 maxlen: 22
                          192.205.36.0/23 maxlen: 23
                          199.178.180.0/24 maxlen: 24
                          204.159.108.0/22 maxlen: 22
                          206.141.192.0/24 maxlen: 24
                          206.141.250.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ccfe663c-8878-4cc0-a772-17e76a493040/ccfe663c-8878-4cc0-a772-17e76a493040.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ccfe663c-8878-4cc0-a772-17e76a493040/ccfe663c-8878-4cc0-a772-17e76a493040.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ccfe663c-8878-4cc0-a772-17e76a493040.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 02 Sep 2026 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:95:df:ad:e6:8b:6d:ad:8a:45:4c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ccfe663c-8878-4cc0-a772-17e76a493040
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=256c8c3c-674f-42db-8ab8-8cd222cae115
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:eb:aa:20:36:1a:6b:41:04:8d:fc:79:1a:3c:
                    7d:d3:3a:b0:f3:06:09:3b:10:d5:fd:7d:55:15:cf:
                    32:72:52:32:a3:74:97:9b:fb:93:18:17:16:f8:12:
                    02:4a:01:a3:76:11:db:51:26:d1:37:07:2a:c8:6d:
                    ae:70:1a:c0:5f:79:12:07:f5:88:93:be:24:bc:65:
                    89:4b:b8:8f:4e:ec:dc:8c:8b:06:5f:5c:a9:75:2c:
                    e5:e3:ed:d5:c7:77:c8:9a:b6:b6:bc:8d:be:95:f3:
                    4f:6a:c5:74:3c:6b:69:95:7a:5b:be:91:b7:a3:9d:
                    d3:72:f9:06:4f:34:db:03:a4:1d:29:1d:07:d1:48:
                    58:f4:13:c0:95:4b:09:8b:59:9b:82:6c:75:fb:43:
                    cb:30:9e:9e:a5:39:b3:85:52:64:00:b1:e6:09:d3:
                    8f:a0:4f:23:7e:76:91:ba:7b:6d:33:35:3a:22:81:
                    6f:8c:4d:df:ef:61:34:12:ab:93:5a:e5:9a:9f:fe:
                    53:c5:62:1f:13:62:be:10:54:32:be:61:64:ac:5c:
                    32:4a:d4:8a:49:3a:f4:e3:d1:7f:8e:6a:17:ea:c7:
                    44:75:ae:33:2e:ca:45:b6:b7:de:17:4c:ed:97:d1:
                    8a:c8:d5:77:31:a4:d9:e4:ec:1b:e1:1d:0d:d0:c1:
                    2d:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:83:7D:90:C2:C8:50:B7:23:55:BB:65:15:C8:3B:11:C7:ED:B5:A7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ccfe663c-8878-4cc0-a772-17e76a493040/c753282b-6491-33e8-a0e1-bab307a0dd28.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ccfe663c-8878-4cc0-a772-17e76a493040/ccfe663c-8878-4cc0-a772-17e76a493040.crl

            X509v3 Authority Key Identifier:
                keyid:FF:62:FA:82:57:51:D3:39:FF:4E:2C:90:21:55:BE:D4:A8:D8:DE:F0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ccfe663c-8878-4cc0-a772-17e76a493040.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  139.125.0.0/16
                  192.205.31.0-192.205.37.255
                  199.178.180.0/24
                  204.159.108.0/22
                  206.141.192.0/24
                  206.141.250.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         04:16:12:07:21:1d:a4:17:73:40:8a:c4:05:34:5c:75:1f:81:
         aa:d4:12:1f:a4:c1:fc:85:b9:a7:fb:74:cd:12:bc:61:39:00:
         55:cd:6e:25:8d:62:90:10:a5:cd:14:86:0f:e7:d0:2d:95:f1:
         79:b3:4e:3f:1d:1b:94:72:69:99:43:ad:e1:c7:9c:85:de:c1:
         8e:44:3e:3d:51:57:f6:b4:b3:fc:0d:5d:c6:07:95:65:ab:cf:
         fd:1c:ca:7d:7c:3c:8d:9c:10:9f:85:92:45:fc:f8:98:74:9b:
         86:9e:d3:36:2f:dd:93:02:a1:0a:47:71:5d:7d:dc:ab:80:d0:
         1b:b1:d9:b0:47:66:79:52:9f:68:d8:3a:fb:b9:0f:e4:df:06:
         dd:49:76:ab:60:b8:6a:95:2e:cd:de:cd:9e:79:62:30:5f:67:
         cd:29:f0:24:ef:32:05:62:9d:3d:aa:4a:f2:d1:de:ce:be:aa:
         b5:14:2b:5a:36:b2:29:9b:4c:c9:f9:71:2b:46:e1:ba:3d:bb:
         ea:39:62:a5:03:fd:8e:86:75:e4:cf:5b:3d:4a:92:b4:10:66:
         b1:18:62:06:57:46:c8:2d:c6:c8:84:ba:18:02:22:55:be:42:
         61:82:4f:6c:f7:2f:44:76:69:1e:cb:87:3f:a3:ba:7d:77:16:
         7a:fb:76:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 1 02:37:02 2026 by rpki-client