Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516/5f470726-ba1c-3327-8ebe-1cd7737a8735.roa
File:                     5f470726-ba1c-3327-8ebe-1cd7737a8735.roa (raw, json)
Hash identifier:          4R/Puzfg+Bhabm9IL1nVUUHcIb65JxsID6UGWCZmgvo=
Subject key identifier:   4F:C0:BD:6A:7A:BE:08:BC:E1:63:5E:87:AC:61:AA:3A:F3:15:D8:EA
Certificate issuer:       /CN=1add3b23-5fb0-4412-be17-98450d352516
Certificate serial:       010D0C9F4328584DEDE0917AA3E6F3D3C2161380
Authority key identifier: DF:D6:AB:35:08:C4:67:A3:69:8E:4B:5D:EA:87:78:C0:7A:1D:8E:26
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516/5f470726-ba1c-3327-8ebe-1cd7737a8735.roa
Signing time:             Sat 23 May 2026 13:00:31 +0000
ROA not before:           Sat 23 May 2026 13:00:31 +0000
ROA not after:            Fri 21 Aug 2026 13:00:31 +0000
asID:                     17054
IP address blocks:        64.72.128.0/19 maxlen: 24
                          64.255.240.0/20 maxlen: 24
                          66.11.0.0/19 maxlen: 24
                          66.159.64.0/19 maxlen: 24
                          66.181.64.0/19 maxlen: 24
                          66.230.64.0/20 maxlen: 24
                          69.7.96.0/20 maxlen: 24
                          206.41.192.0/19 maxlen: 24
                          206.183.0.0/19 maxlen: 24
                          206.210.64.0/19 maxlen: 24
                          206.223.22.0/24 maxlen: 24
                          207.54.128.0/18 maxlen: 24
                          207.114.0.0/17 maxlen: 24
                          208.40.128.0/18 maxlen: 24
                          208.40.192.0/20 maxlen: 24
                          208.40.224.0/19 maxlen: 24
                          209.114.128.0/18 maxlen: 24
                          209.143.64.0/18 maxlen: 24
                          209.166.128.0/18 maxlen: 24
                          209.190.128.0/18 maxlen: 24
                          209.221.0.0/19 maxlen: 24
                          216.37.0.0/18 maxlen: 24
                          216.82.64.0/18 maxlen: 24
                          216.130.0.0/19 maxlen: 24
                          216.151.64.0/18 maxlen: 24
                          216.183.160.0/19 maxlen: 24
                          216.230.96.0/19 maxlen: 24
                          216.239.240.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516/1add3b23-5fb0-4412-be17-98450d352516.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516/1add3b23-5fb0-4412-be17-98450d352516.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:ed:e0:91:7a:a3:e6:f3:d3:c2:16:13:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1add3b23-5fb0-4412-be17-98450d352516
        Validity
            Not Before: May 23 13:00:31 2026 GMT
            Not After : Aug 21 13:00:31 2026 GMT
        Subject: CN=33966160-3852-49a7-b051-3775be955ea5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:48:a2:82:21:32:7c:40:f5:bc:ad:fd:43:db:
                    85:6e:02:ba:e8:4c:12:fb:3a:35:ab:20:f6:4a:c2:
                    a7:95:c4:de:7f:79:4a:ee:94:9e:9b:dd:67:b5:c0:
                    0d:79:56:03:81:c4:18:11:46:d1:62:b7:ae:f6:08:
                    57:a1:53:72:19:1e:a0:29:0d:e9:62:6c:dd:eb:bc:
                    13:67:33:f1:ea:11:4b:d0:66:3d:8f:dd:04:fc:b4:
                    51:f0:d6:cd:d6:60:b6:1f:b6:09:0a:9f:d1:54:3c:
                    b0:bb:80:72:21:f3:0b:6e:39:b7:28:35:fb:45:e7:
                    0e:6b:e5:90:fa:2f:fe:9d:53:22:70:4e:81:7b:47:
                    e0:bd:41:53:34:14:9d:69:cf:ae:b2:fc:b1:4d:eb:
                    3c:82:08:e0:57:3d:61:62:a5:3e:13:22:d0:4a:04:
                    1d:0c:e3:f7:6c:cb:65:6a:11:32:ec:76:ec:61:21:
                    a1:8f:84:1b:c1:18:da:b0:4f:6a:aa:61:64:1e:0a:
                    54:7a:06:2b:7d:fb:14:ee:3f:7d:23:e2:64:63:d1:
                    c7:82:57:11:3e:4c:4a:cf:95:dc:6f:57:01:92:e9:
                    15:50:57:62:45:a0:c9:c2:c0:9a:43:51:14:3a:a0:
                    de:3c:46:9d:73:91:7b:0c:78:f9:3e:e5:99:25:93:
                    ad:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:C0:BD:6A:7A:BE:08:BC:E1:63:5E:87:AC:61:AA:3A:F3:15:D8:EA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516/5f470726-ba1c-3327-8ebe-1cd7737a8735.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516/1add3b23-5fb0-4412-be17-98450d352516.crl

            X509v3 Authority Key Identifier:
                keyid:DF:D6:AB:35:08:C4:67:A3:69:8E:4B:5D:EA:87:78:C0:7A:1D:8E:26

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.72.128.0/19
                  64.255.240.0/20
                  66.11.0.0/19
                  66.159.64.0/19
                  66.181.64.0/19
                  66.230.64.0/20
                  69.7.96.0/20
                  206.41.192.0/19
                  206.183.0.0/19
                  206.210.64.0/19
                  206.223.22.0/24
                  207.54.128.0/18
                  207.114.0.0/17
                  208.40.128.0-208.40.207.255
                  208.40.224.0/19
                  209.114.128.0/18
                  209.143.64.0/18
                  209.166.128.0/18
                  209.190.128.0/18
                  209.221.0.0/19
                  216.37.0.0/18
                  216.82.64.0/18
                  216.130.0.0/19
                  216.151.64.0/18
                  216.183.160.0/19
                  216.230.96.0/19
                  216.239.240.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         76:3a:2b:89:3f:8f:d8:9f:a3:ca:92:8a:e3:81:05:2e:04:7b:
         01:ef:e7:ca:ed:f3:d8:43:fd:5f:f9:e5:fd:a3:51:90:08:e6:
         ed:59:3e:68:87:6a:ba:aa:00:9f:39:6e:71:40:57:da:9d:07:
         cc:bc:e9:08:b5:d9:b9:ef:ad:a3:73:52:f8:20:6d:8b:66:79:
         85:a1:c9:42:96:ea:2f:ee:43:8e:ef:20:e8:6c:4b:3d:27:2d:
         e8:16:2c:1e:54:f8:a2:ec:dd:14:38:a8:4a:f2:e3:0e:17:ad:
         08:4e:1a:b0:52:d2:c5:9a:fc:29:be:ad:6d:80:96:40:61:1f:
         4b:db:4b:2c:31:40:13:29:7a:5a:10:22:44:3b:4f:00:d1:d1:
         15:ee:fc:b0:3f:fe:33:56:bc:ae:ee:e6:a5:f3:f8:f7:af:7e:
         f0:26:ec:60:88:19:23:65:89:33:a4:c1:b3:3c:2b:7e:db:4e:
         3a:fc:57:17:ea:18:50:8d:99:59:ec:e5:dc:39:23:85:1a:72:
         af:0a:93:35:42:fe:51:f5:5f:e7:f8:4b:35:87:00:08:aa:ef:
         be:55:91:1a:43:63:16:61:05:76:02:f4:96:31:02:10:9a:a7:
         f9:f8:b4:f0:ba:95:dd:1a:50:e8:74:96:7f:7f:23:e4:3e:e1:
         0a:49:e2:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 12:44:15 2026 by rpki-client