Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4049ac35-71e1-42c8-878b-af94c9280b59/fa4ba8d2-4c17-3670-9471-1ee9bf293e8d.roa
File:                     fa4ba8d2-4c17-3670-9471-1ee9bf293e8d.roa (raw, json)
Hash identifier:          JIOERQC/xOseZbrXzh0IXJ2+Xw/2fB+6J6r/bIVzKx4=
Subject key identifier:   D8:D6:C5:EF:C6:F0:8B:EC:F4:CF:66:97:54:39:13:C7:32:96:17:63
Certificate issuer:       /CN=4049ac35-71e1-42c8-878b-af94c9280b59
Certificate serial:       010D0C9F4328584DD4C074683C7A2C8DC9171E80
Authority key identifier: 21:AD:BC:8B:E8:48:AA:89:BE:73:88:CD:98:85:32:CA:A8:AA:6C:32
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4049ac35-71e1-42c8-878b-af94c9280b59.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4049ac35-71e1-42c8-878b-af94c9280b59/fa4ba8d2-4c17-3670-9471-1ee9bf293e8d.roa
Signing time:             Thu 14 May 2026 13:00:31 +0000
ROA not before:           Thu 14 May 2026 13:00:31 +0000
ROA not after:            Wed 12 Aug 2026 13:00:31 +0000
asID:                     14737
IP address blocks:        164.47.0.0/18 maxlen: 18
                          164.47.64.0/20 maxlen: 20
                          164.47.82.0/23 maxlen: 23
                          164.47.84.0/22 maxlen: 22
                          164.47.88.0/21 maxlen: 21
                          164.47.96.0/19 maxlen: 19
                          164.47.128.0/18 maxlen: 18
                          164.47.192.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4049ac35-71e1-42c8-878b-af94c9280b59/4049ac35-71e1-42c8-878b-af94c9280b59.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4049ac35-71e1-42c8-878b-af94c9280b59/4049ac35-71e1-42c8-878b-af94c9280b59.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4049ac35-71e1-42c8-878b-af94c9280b59.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 05 Jun 2026 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:d4:c0:74:68:3c:7a:2c:8d:c9:17:1e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4049ac35-71e1-42c8-878b-af94c9280b59
        Validity
            Not Before: May 14 13:00:31 2026 GMT
            Not After : Aug 12 13:00:31 2026 GMT
        Subject: CN=0ba2208d-230c-43be-842d-b654668e3369
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:ba:92:02:9d:5b:0c:8d:f1:b3:d5:16:0f:1d:
                    e5:91:1a:f8:9a:69:96:36:4a:45:24:19:84:2e:5d:
                    3d:0e:f2:14:93:7c:38:a4:e1:31:20:96:8b:40:e6:
                    39:ea:93:70:e0:af:7d:61:7f:70:59:af:7a:d5:16:
                    b5:56:46:26:c1:7a:9f:fe:cf:ae:08:bf:f4:fa:fb:
                    24:a3:4c:73:03:b1:ad:cd:b6:8c:a0:5a:d2:a8:02:
                    bf:d3:c8:9d:0c:b7:83:e2:5c:dd:12:0e:2d:83:00:
                    c2:d1:66:0c:8e:3b:be:1c:b9:f5:3b:d3:ce:ce:54:
                    77:32:9c:ff:07:29:c1:b0:30:4b:03:8d:c2:b8:ae:
                    ff:27:e4:df:c1:6e:b0:d9:f7:de:23:47:f5:f5:f3:
                    68:f0:b1:fc:8a:d9:28:fc:2b:c1:ad:18:d0:33:c6:
                    0a:3f:90:4f:ac:8b:8f:41:ef:e5:00:ca:61:9e:0e:
                    d7:3b:86:2c:1a:6f:38:c9:a3:47:e0:fd:2e:2f:e8:
                    38:83:e4:48:e8:68:45:8f:80:d8:7d:59:f3:20:e8:
                    19:88:1d:82:98:5a:2d:fb:52:bd:92:69:dc:c2:31:
                    90:6a:8d:68:cb:cb:ed:de:9d:15:d8:59:ff:e7:d0:
                    ad:dd:78:ec:9e:71:2e:7b:1d:a7:ab:03:47:84:de:
                    c4:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:D6:C5:EF:C6:F0:8B:EC:F4:CF:66:97:54:39:13:C7:32:96:17:63
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4049ac35-71e1-42c8-878b-af94c9280b59/fa4ba8d2-4c17-3670-9471-1ee9bf293e8d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4049ac35-71e1-42c8-878b-af94c9280b59/4049ac35-71e1-42c8-878b-af94c9280b59.crl

            X509v3 Authority Key Identifier:
                keyid:21:AD:BC:8B:E8:48:AA:89:BE:73:88:CD:98:85:32:CA:A8:AA:6C:32

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4049ac35-71e1-42c8-878b-af94c9280b59.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  164.47.0.0-164.47.79.255
                  164.47.82.0-164.47.255.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         79:18:3e:df:d6:52:5a:92:3e:d2:a7:ef:27:23:fb:2d:2b:0c:
         de:e8:3f:d2:ec:87:c7:56:9d:d2:0a:9f:50:ea:41:a0:0b:37:
         bc:f1:64:cc:21:b6:d3:58:68:da:88:f3:6b:4e:cf:b7:63:36:
         90:59:43:67:95:f2:ed:05:61:8c:0f:e8:b5:67:a7:da:7b:82:
         88:55:0a:c1:db:7b:67:7c:92:c0:eb:b5:8b:e6:bb:4e:56:74:
         b6:50:2b:91:cd:8b:19:f5:d4:3d:c7:96:56:55:33:94:0a:4b:
         11:40:1f:af:88:88:58:75:d4:6f:8e:88:94:a1:df:d0:d1:e5:
         a5:fb:2a:5c:79:a4:b1:59:b8:6a:88:8a:15:3e:66:70:48:61:
         6d:4a:e1:26:e2:99:07:07:9d:03:46:6b:fe:db:d6:f4:37:9c:
         13:ea:05:d7:44:d8:1b:e9:1a:43:6f:2d:0e:a0:11:c4:15:cd:
         a5:49:a7:b9:bd:cc:75:9a:48:7b:7f:2d:45:e9:1c:ce:bd:a1:
         0c:81:2a:e2:3b:c1:c4:ca:d5:05:77:f0:71:07:93:d6:7a:fd:
         fa:f5:db:a9:55:34:65:9f:30:97:44:a2:01:de:b0:ac:38:f6:
         db:97:32:21:c5:15:8a:46:01:3c:3e:16:7d:ac:0d:b6:78:4b:
         eb:a5:08:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 3 20:14:31 2026 by rpki-client