Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9bd0a861-f835-4585-9517-e1dba949c123/c729c319-c3d5-351e-acdc-5c7a20ff6a0d.roa
File:                     c729c319-c3d5-351e-acdc-5c7a20ff6a0d.roa (raw, json)
Hash identifier:          2QEYJT2Jo3T5Ya5SkTd0PlwXuQPVYvArMLJ1D+w1TXo=
Subject key identifier:   D8:B0:5E:53:F0:88:47:D0:78:33:D7:9B:19:37:22:F8:5C:C4:63:EA
Certificate issuer:       /CN=9bd0a861-f835-4585-9517-e1dba949c123
Certificate serial:       010D0C9F4328584E31CF0B3BAEDCDB0D9F78A700
Authority key identifier: E4:B7:17:00:70:3A:04:35:C4:63:7B:BF:A9:47:91:2A:F1:41:BC:16
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9bd0a861-f835-4585-9517-e1dba949c123.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9bd0a861-f835-4585-9517-e1dba949c123/c729c319-c3d5-351e-acdc-5c7a20ff6a0d.roa
Signing time:             Tue 16 Jun 2026 21:00:12 +0000
ROA not before:           Tue 16 Jun 2026 21:00:12 +0000
ROA not after:            Mon 14 Sep 2026 21:00:12 +0000
asID:                     21887
IP address blocks:        74.118.192.0/22 maxlen: 24
                          104.193.8.0/22 maxlen: 24
                          104.245.96.0/21 maxlen: 24
                          104.255.64.0/21 maxlen: 24
                          142.0.32.0/20 maxlen: 24
                          162.213.24.0/21 maxlen: 24
                          162.248.72.0/21 maxlen: 24
                          204.124.180.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9bd0a861-f835-4585-9517-e1dba949c123/9bd0a861-f835-4585-9517-e1dba949c123.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9bd0a861-f835-4585-9517-e1dba949c123/9bd0a861-f835-4585-9517-e1dba949c123.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9bd0a861-f835-4585-9517-e1dba949c123.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 15 Jul 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:31:cf:0b:3b:ae:dc:db:0d:9f:78:a7:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9bd0a861-f835-4585-9517-e1dba949c123
        Validity
            Not Before: Jun 16 21:00:12 2026 GMT
            Not After : Sep 14 21:00:12 2026 GMT
        Subject: CN=34b787f6-213c-40cf-bbc0-c11a90c84cd7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:68:93:c7:96:6f:5a:7b:64:16:30:d6:2a:18:
                    4f:e4:c1:51:37:df:c2:c0:84:ac:03:a9:76:7c:46:
                    7e:8b:cc:32:83:63:c3:59:40:99:4a:1f:bc:ed:07:
                    78:4e:9e:1a:5e:82:d0:03:eb:17:99:fe:49:15:4a:
                    01:a1:dc:fc:40:2f:95:0c:d3:d1:89:0b:b7:40:12:
                    30:14:d6:f9:b3:4c:41:d7:21:f3:99:fc:6e:f9:3d:
                    28:4a:1a:cc:7a:ec:8d:4a:17:38:6f:9b:ea:d4:d8:
                    7b:0f:01:77:80:19:2b:9b:fe:33:5e:c0:54:a3:18:
                    f9:38:1f:7f:cf:27:e8:e1:08:86:2c:66:22:c7:67:
                    2b:4a:18:6c:6e:f5:58:96:be:1a:f9:f9:03:78:2d:
                    33:0e:33:1b:5d:05:88:bd:71:d9:da:5b:f5:e3:6f:
                    5b:e9:96:c6:d5:ba:38:a4:f1:28:7d:be:2e:f2:c4:
                    af:f5:1e:85:33:bc:79:d6:80:36:d0:11:20:68:6e:
                    61:fd:29:70:3d:01:3d:36:c9:29:a7:96:05:f0:d7:
                    e9:95:36:f1:37:b0:28:11:05:68:2b:aa:3d:14:8d:
                    5d:f3:0b:b2:b9:c8:9a:10:19:8d:b0:bc:cf:ae:70:
                    18:e0:4c:0b:20:ce:d5:30:df:fa:05:6c:60:61:0a:
                    fe:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:B0:5E:53:F0:88:47:D0:78:33:D7:9B:19:37:22:F8:5C:C4:63:EA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9bd0a861-f835-4585-9517-e1dba949c123/c729c319-c3d5-351e-acdc-5c7a20ff6a0d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9bd0a861-f835-4585-9517-e1dba949c123/9bd0a861-f835-4585-9517-e1dba949c123.crl

            X509v3 Authority Key Identifier:
                keyid:E4:B7:17:00:70:3A:04:35:C4:63:7B:BF:A9:47:91:2A:F1:41:BC:16

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9bd0a861-f835-4585-9517-e1dba949c123.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.118.192.0/22
                  104.193.8.0/22
                  104.245.96.0/21
                  104.255.64.0/21
                  142.0.32.0/20
                  162.213.24.0/21
                  162.248.72.0/21
                  204.124.180.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5f:7b:c1:e7:6f:fa:1e:d8:31:01:42:09:1d:f5:62:73:cb:90:
         df:9c:6e:7c:6e:a7:83:22:9c:63:8e:3f:7c:93:da:4a:3f:f8:
         b6:03:8d:bf:56:1f:8b:29:2e:7d:29:79:3e:94:c3:a9:ca:99:
         98:68:72:c6:e0:a0:dd:2a:a3:15:d1:50:cf:40:da:31:2b:58:
         ce:8f:29:e9:91:87:b7:71:c1:57:d5:00:a6:85:ae:05:e8:8e:
         20:25:12:39:e6:9c:7c:df:cd:40:34:d8:15:4d:0c:24:5b:c8:
         40:11:9f:55:e7:8c:b0:f7:5a:cb:b0:4c:a8:22:a7:bc:ae:b3:
         1b:1c:44:d0:f9:14:64:56:df:f1:9f:d9:da:5c:2f:c2:b4:a5:
         00:ea:d0:52:87:7d:7c:92:c5:af:54:a2:00:b8:47:44:56:c4:
         ce:23:6d:86:e6:32:79:f3:00:ab:52:d5:64:68:4e:72:60:e2:
         9e:57:a8:cc:84:ed:d2:a4:34:00:5d:1d:db:86:dc:fb:bf:b0:
         bc:03:15:f6:7f:84:9d:32:80:b0:ca:a5:f0:28:56:4b:48:7f:
         a6:17:e7:1f:5b:18:ef:42:bb:30:08:69:59:32:23:fd:a5:91:
         14:4b:f6:07:78:23:18:62:4a:69:3a:c4:5c:7c:19:67:cd:df:
         47:a5:9f:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 13 20:20:41 2026 by rpki-client