Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8/b96b7d62-9f46-3136-9a94-638f24ed1eb3.roa
File:                     b96b7d62-9f46-3136-9a94-638f24ed1eb3.roa (raw, json)
Hash identifier:          yQNJEuzBI7MLG3uuHuC/xdVwpwygiM1rNo+om6vwk1E=
Subject key identifier:   1C:80:CC:08:A5:8D:82:F9:3C:45:00:9F:AA:7E:B5:52:64:91:8F:51
Certificate issuer:       /CN=314186df-87ba-4dd5-adbf-1c6c2bbe04a8
Certificate serial:       010D0C9F4328584E3FC4729907DD6C5845F0E580
Authority key identifier: 52:15:C8:9B:51:37:0E:94:F1:AB:C2:AF:7D:C8:F6:BB:E1:F2:E5:6F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8/b96b7d62-9f46-3136-9a94-638f24ed1eb3.roa
Signing time:             Sun 21 Jun 2026 21:00:12 +0000
ROA not before:           Sun 21 Jun 2026 21:00:12 +0000
ROA not after:            Sat 19 Sep 2026 21:00:12 +0000
asID:                     6389
IP address blocks:        65.81.0.0/16 maxlen: 16
                          65.83.236.0/22 maxlen: 22
                          67.33.0.0/16 maxlen: 16
                          68.213.0.0/16 maxlen: 16
                          68.222.0.0/16 maxlen: 16
                          70.147.0.0/16 maxlen: 16
                          70.148.0.0/16 maxlen: 16
                          70.154.0.0/15 maxlen: 15
                          72.149.0.0/16 maxlen: 16
                          72.151.0.0/16 maxlen: 16
                          74.164.0.0/16 maxlen: 16
                          74.165.0.0/16 maxlen: 16
                          74.172.0.0/16 maxlen: 16
                          74.175.0.0/16 maxlen: 16
                          74.189.0.0/16 maxlen: 16
                          74.228.0.0/16 maxlen: 16
                          74.238.0.0/16 maxlen: 16
                          74.239.0.0/16 maxlen: 16
                          74.246.0.0/16 maxlen: 16
                          74.247.0.0/16 maxlen: 16
                          74.251.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Jul 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:3f:c4:72:99:07:dd:6c:58:45:f0:e5:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=314186df-87ba-4dd5-adbf-1c6c2bbe04a8
        Validity
            Not Before: Jun 21 21:00:12 2026 GMT
            Not After : Sep 19 21:00:12 2026 GMT
        Subject: CN=5c9fd71c-ed7d-4406-986e-966495097ac7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:5a:b6:85:23:7d:83:1a:8d:59:5d:f9:1b:c3:
                    8b:c6:a7:1f:35:23:dc:5f:43:2c:a2:83:08:42:6f:
                    b6:77:f3:8d:a4:8a:6a:55:1d:48:d8:d6:4b:f6:1f:
                    bb:96:e2:37:ff:3a:65:c2:27:b2:97:74:14:79:cb:
                    ea:2b:a6:14:b3:15:c2:fc:8f:e7:f9:15:58:b7:e5:
                    58:43:e9:ff:65:63:d6:e1:78:6a:49:b3:e1:b0:8b:
                    3d:82:6a:ca:49:3a:d8:f4:aa:c1:31:61:70:3f:d2:
                    05:63:24:82:38:40:b3:63:98:1f:cc:55:5a:8e:85:
                    66:51:37:aa:02:17:48:69:2f:79:f0:3b:d6:12:f4:
                    df:05:36:d7:93:f5:a1:59:34:4e:87:bf:4b:f7:28:
                    c6:42:70:a2:67:a3:31:9b:4a:06:70:2d:c9:01:91:
                    73:a1:12:ac:40:42:cd:dd:fc:3c:7f:e5:6e:b4:ed:
                    74:c0:35:73:26:e3:32:c7:34:b1:98:e8:3c:80:b6:
                    6b:e7:52:4b:f5:c0:a1:ef:12:27:a4:e0:1c:33:16:
                    99:fa:ff:02:f5:10:3f:8f:83:be:c4:a8:70:a1:d5:
                    2b:0f:da:21:5d:73:7c:b0:68:86:17:df:80:66:90:
                    65:43:6e:fe:8f:74:15:e8:f9:6f:9a:fd:a1:65:be:
                    9d:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:80:CC:08:A5:8D:82:F9:3C:45:00:9F:AA:7E:B5:52:64:91:8F:51
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8/b96b7d62-9f46-3136-9a94-638f24ed1eb3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8.crl

            X509v3 Authority Key Identifier:
                keyid:52:15:C8:9B:51:37:0E:94:F1:AB:C2:AF:7D:C8:F6:BB:E1:F2:E5:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.81.0.0/16
                  65.83.236.0/22
                  67.33.0.0/16
                  68.213.0.0/16
                  68.222.0.0/16
                  70.147.0.0-70.148.255.255
                  70.154.0.0/15
                  72.149.0.0/16
                  72.151.0.0/16
                  74.164.0.0/15
                  74.172.0.0/16
                  74.175.0.0/16
                  74.189.0.0/16
                  74.228.0.0/16
                  74.238.0.0/15
                  74.246.0.0/15
                  74.251.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4e:c9:c9:ea:34:94:fb:24:da:ea:0a:4c:0a:e6:d6:51:af:61:
         d7:c6:cf:ec:7b:47:1b:72:46:83:a2:f2:5e:18:36:c7:6d:c2:
         af:1c:35:ef:40:37:39:e9:f7:be:4c:4f:90:41:dc:6a:8c:80:
         0b:ea:7a:38:45:57:23:f2:6d:f7:40:84:33:82:91:2a:50:f8:
         4e:3c:b3:69:64:1b:f3:c4:56:bf:1e:8b:ee:9d:7a:7b:f2:e7:
         a7:45:23:ce:8b:97:09:f4:91:82:af:bb:0c:70:4e:30:4f:81:
         5f:02:67:56:67:6f:c7:b4:05:f3:2d:98:65:29:0f:7d:52:82:
         21:9c:ba:90:d9:be:4e:44:11:38:92:cd:8f:d0:c9:04:79:17:
         0c:47:26:70:bd:72:68:7a:7d:e6:4b:f3:a4:f4:ec:f2:0b:be:
         69:e6:5c:41:8e:87:95:a6:5e:6f:19:c1:af:67:86:6a:c5:6c:
         8c:ee:f7:a6:ec:43:64:0a:11:88:0c:bc:4f:94:64:2c:99:4e:
         cd:aa:de:9f:57:83:9a:75:73:50:d2:1a:18:ca:57:af:b2:eb:
         2f:c6:c4:d7:d6:38:a3:3f:53:53:a1:f7:f4:a4:96:6b:9b:e0:
         c2:1a:3d:29:c4:84:f5:df:2e:2d:6c:a8:5b:d5:a1:5c:09:9e:
         30:9b:69:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 22 02:10:59 2026 by rpki-client