Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9204022c-f46f-419c-8180-40b9005a833e/05c96cb6-f490-383e-9347-f9496ca1bfa8.roa
File:                     05c96cb6-f490-383e-9347-f9496ca1bfa8.roa (raw, json)
Hash identifier:          MxDH6k6Ue6QXsSmp0P1r1ZMp9ChnQeB6javr+BYOpIE=
Subject key identifier:   00:2E:31:2B:F8:4C:01:2B:0D:21:5F:2A:69:DB:A7:61:44:55:F7:CC
Certificate issuer:       /CN=9204022c-f46f-419c-8180-40b9005a833e
Certificate serial:       010D0C9F4328584D422F8E0223A2FAE0CDA6BC80
Authority key identifier: 65:8A:C4:93:A9:45:7B:BC:8A:75:0A:F2:F3:08:B4:39:FE:7A:D2:B3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9204022c-f46f-419c-8180-40b9005a833e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9204022c-f46f-419c-8180-40b9005a833e/05c96cb6-f490-383e-9347-f9496ca1bfa8.roa
Signing time:             Mon 23 Mar 2026 01:00:32 +0000
ROA not before:           Mon 23 Mar 2026 01:00:32 +0000
ROA not after:            Sun 21 Jun 2026 01:00:32 +0000
asID:                     15830
IP address blocks:        72.46.76.0/24 maxlen: 24
                          72.46.78.0/23 maxlen: 24
                          204.156.176.0/23 maxlen: 24
                          209.222.65.0/24 maxlen: 24
                          209.222.66.0/23 maxlen: 24
                          216.41.143.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9204022c-f46f-419c-8180-40b9005a833e/9204022c-f46f-419c-8180-40b9005a833e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9204022c-f46f-419c-8180-40b9005a833e/9204022c-f46f-419c-8180-40b9005a833e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9204022c-f46f-419c-8180-40b9005a833e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 26 Mar 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:42:2f:8e:02:23:a2:fa:e0:cd:a6:bc:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9204022c-f46f-419c-8180-40b9005a833e
        Validity
            Not Before: Mar 23 01:00:32 2026 GMT
            Not After : Jun 21 01:00:32 2026 GMT
        Subject: CN=472a8059-84fc-4e4b-9989-fc9febb7b9bb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:6b:88:85:e9:6f:c7:72:9f:da:51:8e:94:2e:
                    df:05:5c:d2:fa:ba:89:2a:06:25:f4:4c:4d:43:38:
                    77:5c:34:65:da:b6:20:0b:42:72:04:26:60:2b:cc:
                    d5:94:35:18:9f:0a:26:1f:68:cc:c4:aa:13:fe:6e:
                    4e:39:9a:8a:fc:80:a9:4e:84:83:e1:94:27:05:2d:
                    33:13:26:68:45:2a:80:7e:db:f8:ff:e3:52:08:c0:
                    ba:89:39:14:7f:25:9d:58:ed:4c:cb:8d:75:cb:9c:
                    4b:a5:1f:39:7b:bf:b9:86:c4:1a:94:6a:ba:e0:13:
                    f1:f2:d0:21:27:dd:c1:a4:28:5a:cc:05:5c:28:49:
                    76:ad:4b:fd:95:f4:59:22:0f:4c:6a:8b:15:c2:b8:
                    f0:05:73:2d:f7:41:42:93:16:f2:c5:0d:8a:7d:81:
                    e8:59:49:63:9d:18:07:80:63:03:93:5d:04:27:48:
                    b2:58:57:bc:d2:a3:45:fa:d9:44:81:68:1c:0c:02:
                    0d:94:14:1f:00:86:b6:1e:3c:c3:3d:75:7f:55:90:
                    99:87:3d:4d:1a:ea:85:d7:09:a2:8d:4a:e2:a1:24:
                    eb:a2:b8:85:f2:1c:83:3c:4c:1b:74:7e:d2:34:ee:
                    13:f9:06:3e:c7:6d:96:e9:f6:18:12:33:e4:90:c6:
                    1d:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:2E:31:2B:F8:4C:01:2B:0D:21:5F:2A:69:DB:A7:61:44:55:F7:CC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9204022c-f46f-419c-8180-40b9005a833e/05c96cb6-f490-383e-9347-f9496ca1bfa8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9204022c-f46f-419c-8180-40b9005a833e/9204022c-f46f-419c-8180-40b9005a833e.crl

            X509v3 Authority Key Identifier:
                keyid:65:8A:C4:93:A9:45:7B:BC:8A:75:0A:F2:F3:08:B4:39:FE:7A:D2:B3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9204022c-f46f-419c-8180-40b9005a833e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.46.76.0/24
                  72.46.78.0/23
                  204.156.176.0/23
                  209.222.65.0-209.222.67.255
                  216.41.143.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         92:41:14:c7:68:d6:e2:a7:f3:47:d4:e0:39:39:f5:27:50:64:
         2b:51:3f:eb:f9:99:b7:9b:27:90:39:3c:38:0d:95:6a:93:0e:
         da:f8:bb:fe:9c:55:7b:6e:31:f3:c4:f6:4c:9b:00:34:d8:10:
         e4:a8:51:15:17:d4:51:c2:67:90:e5:d8:c8:14:a4:e2:30:97:
         75:61:3e:8b:81:9d:fc:93:4b:77:56:ac:e4:71:56:2e:9f:4b:
         5f:b3:79:7c:c8:bc:46:d7:2e:a0:80:7b:37:81:67:d8:70:dd:
         d8:b4:42:81:95:ec:78:40:25:86:7d:0f:b8:76:94:5b:ec:ef:
         cf:2b:75:9e:72:5f:fa:9c:65:51:65:76:5d:4c:6f:e1:8d:1d:
         a9:10:de:51:ca:1a:db:ba:13:ba:2b:be:83:33:bd:48:54:94:
         d7:56:fe:39:5e:02:b2:d2:0b:78:5e:ad:1d:7a:7b:a0:52:49:
         e0:c0:94:10:12:2d:a3:c8:89:9b:f1:b3:4a:03:e5:3f:b4:6a:
         59:5a:a0:75:c9:92:d2:f2:ce:08:33:e0:e1:30:cf:ba:7f:f7:
         c1:e2:29:26:26:74:75:9c:61:61:de:9b:00:8f:5d:88:0b:16:
         60:af:73:54:8f:6f:f1:0b:fd:99:d7:ba:97:db:ae:74:13:8e:
         6b:8d:80:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 24 17:04:08 2026 by rpki-client