Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9bd0a861-f835-4585-9517-e1dba949c123/fd669d54-47cf-37c7-8689-7511d01f5bb0.roa
File:                     fd669d54-47cf-37c7-8689-7511d01f5bb0.roa (raw, json)
Hash identifier:          bdd589GtGRphQgyy5/+eOwzIYOJp+r9gtyP/WfoOvW4=
Subject key identifier:   B5:98:D8:84:DC:5C:0D:68:C5:E2:0A:1D:5E:8C:C2:F6:BA:0D:84:E2
Certificate issuer:       /CN=9bd0a861-f835-4585-9517-e1dba949c123
Certificate serial:       010D0C9F4328584E66DA1C9EA182B870C86FB780
Authority key identifier: E4:B7:17:00:70:3A:04:35:C4:63:7B:BF:A9:47:91:2A:F1:41:BC:16
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9bd0a861-f835-4585-9517-e1dba949c123.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9bd0a861-f835-4585-9517-e1dba949c123/fd669d54-47cf-37c7-8689-7511d01f5bb0.roa
Signing time:             Sun 05 Jul 2026 21:00:11 +0000
ROA not before:           Sun 05 Jul 2026 21:00:11 +0000
ROA not after:            Sat 03 Oct 2026 21:00:11 +0000
asID:                     400981
IP address blocks:        74.118.192.0/22 maxlen: 24
                          104.193.8.0/22 maxlen: 24
                          104.245.96.0/21 maxlen: 24
                          104.255.64.0/21 maxlen: 24
                          142.0.32.0/20 maxlen: 24
                          162.213.24.0/21 maxlen: 24
                          162.248.72.0/21 maxlen: 24
                          204.124.180.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9bd0a861-f835-4585-9517-e1dba949c123/9bd0a861-f835-4585-9517-e1dba949c123.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9bd0a861-f835-4585-9517-e1dba949c123/9bd0a861-f835-4585-9517-e1dba949c123.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9bd0a861-f835-4585-9517-e1dba949c123.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 15 Jul 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:66:da:1c:9e:a1:82:b8:70:c8:6f:b7:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9bd0a861-f835-4585-9517-e1dba949c123
        Validity
            Not Before: Jul  5 21:00:11 2026 GMT
            Not After : Oct  3 21:00:11 2026 GMT
        Subject: CN=b26cbed3-7c56-45d8-b1c3-3f802305d65f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:29:f3:ef:a6:b4:56:7e:ad:0d:7f:c7:2d:04:
                    fb:14:d0:b4:6c:b8:5b:b6:96:45:88:69:db:e8:01:
                    aa:24:0e:4c:28:f0:f2:4f:c4:5c:e0:3e:67:d3:72:
                    2c:52:7e:9f:b0:fb:fb:94:7d:9c:9a:bb:79:9e:ed:
                    c3:b2:2e:db:19:c0:26:b7:e8:80:a7:dd:cb:5b:60:
                    07:d9:81:59:6c:31:ac:c7:df:b9:0b:83:bb:31:e2:
                    07:ad:9e:83:18:2e:09:92:c9:2f:df:ca:a8:0c:91:
                    95:81:2f:05:21:f2:60:eb:9b:19:38:d1:7d:37:cb:
                    02:cf:b6:e5:68:b2:1a:46:9c:0d:89:04:2a:8f:30:
                    69:e2:33:b7:2d:b7:dd:e9:8d:34:77:7b:8c:0c:30:
                    5d:b2:27:a0:29:a9:9b:6b:6d:90:e5:f2:bf:4d:5f:
                    0d:61:84:4b:60:46:a9:1c:1b:bb:fc:a0:ec:54:09:
                    2f:92:3d:7c:7e:15:32:19:5e:be:c6:c2:f2:25:b2:
                    63:c5:d4:96:4c:0e:12:bd:5f:3b:cf:48:d9:44:ba:
                    fa:aa:c1:15:bf:8b:34:d5:b1:5f:89:a1:64:3f:02:
                    7c:e8:9d:84:12:98:45:87:a8:96:17:3a:e2:63:e6:
                    d3:5a:4c:bf:67:50:15:b9:95:a7:7e:59:3d:21:8b:
                    83:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:98:D8:84:DC:5C:0D:68:C5:E2:0A:1D:5E:8C:C2:F6:BA:0D:84:E2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9bd0a861-f835-4585-9517-e1dba949c123/fd669d54-47cf-37c7-8689-7511d01f5bb0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9bd0a861-f835-4585-9517-e1dba949c123/9bd0a861-f835-4585-9517-e1dba949c123.crl

            X509v3 Authority Key Identifier:
                keyid:E4:B7:17:00:70:3A:04:35:C4:63:7B:BF:A9:47:91:2A:F1:41:BC:16

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9bd0a861-f835-4585-9517-e1dba949c123.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.118.192.0/22
                  104.193.8.0/22
                  104.245.96.0/21
                  104.255.64.0/21
                  142.0.32.0/20
                  162.213.24.0/21
                  162.248.72.0/21
                  204.124.180.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6b:89:4d:c5:0b:56:94:ef:5d:3f:4b:e1:0e:85:6e:f8:b2:47:
         51:ea:96:35:0e:b7:c9:4c:15:9c:97:b5:e7:ee:e7:f6:fa:d8:
         26:ad:77:47:9e:f8:8f:11:c6:5c:46:31:5c:46:13:eb:68:43:
         89:8d:81:03:1b:89:c8:86:54:2c:4f:9a:c8:13:c9:00:e7:03:
         b8:e5:a1:77:96:ce:8c:5c:1b:5f:ec:17:99:bf:16:4d:0c:81:
         9c:32:11:29:5f:7c:76:d6:fa:c7:77:cc:ce:3c:33:3d:33:61:
         e1:fd:8c:e1:41:b7:ed:df:46:0e:7e:d7:85:c7:6b:fe:5c:bf:
         6a:27:1b:1e:7e:60:2e:bf:46:c6:67:f3:d9:8b:59:10:45:da:
         fd:2e:d6:2c:99:15:76:c0:cf:b4:8a:93:e0:5a:9f:b5:ac:8c:
         ae:0a:02:73:c5:bc:1a:e6:35:ad:00:15:c5:c8:f9:84:72:fc:
         ff:49:e7:d5:d9:e2:96:03:c7:e9:95:25:f8:c8:26:d3:be:77:
         d8:1a:5c:9a:18:0d:80:9a:de:93:1f:a2:d4:71:2c:69:80:a3:
         2f:ef:3c:77:2c:45:15:58:1c:56:f2:6b:7b:13:bf:a3:80:b0:
         72:7f:9f:45:c0:a5:78:8f:38:28:81:48:21:ea:1f:93:8b:d6:
         32:8c:f3:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 13 20:25:18 2026 by rpki-client