Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8450660f-e06c-43ee-910d-d4b472fdc395/778ff5f3-82a1-3aa0-8ba0-24d3653e91b6.roa
File:                     778ff5f3-82a1-3aa0-8ba0-24d3653e91b6.roa (raw, json)
Hash identifier:          Hk8XxHmLI9Meb3NUgspXfPUbjEtWFklK+jxcMSrZ1Dw=
Subject key identifier:   2D:78:56:AA:79:8F:39:29:66:B5:1A:1D:3A:A4:51:1F:3C:5E:D9:40
Certificate issuer:       /CN=8450660f-e06c-43ee-910d-d4b472fdc395
Certificate serial:       010D0C9F4328584D27AB54DB03FDBCECE06F4D00
Authority key identifier: 69:25:75:77:04:3B:95:B1:7E:16:48:72:04:EF:23:AC:0A:A8:81:CD
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8450660f-e06c-43ee-910d-d4b472fdc395.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8450660f-e06c-43ee-910d-d4b472fdc395/778ff5f3-82a1-3aa0-8ba0-24d3653e91b6.roa
Signing time:             Fri 13 Mar 2026 13:03:19 +0000
ROA not before:           Fri 13 Mar 2026 13:03:19 +0000
ROA not after:            Thu 11 Jun 2026 13:03:19 +0000
asID:                     63099
IP address blocks:        204.237.134.0/24 maxlen: 24
                          204.237.162.0/24 maxlen: 24
                          204.237.174.0/24 maxlen: 24
                          204.237.177.0/24 maxlen: 24
                          204.237.178.0/24 maxlen: 24
                          204.237.183.0/24 maxlen: 24
                          204.237.184.0/24 maxlen: 24
                          204.237.197.0/24 maxlen: 24
                          204.237.198.0/24 maxlen: 24
                          204.237.203.0/24 maxlen: 24
                          204.237.224.0/24 maxlen: 24
                          204.237.231.0/24 maxlen: 24
                          204.237.236.0/24 maxlen: 24
                          204.237.238.0/24 maxlen: 24
                          204.237.250.0/24 maxlen: 24
                          204.237.252.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8450660f-e06c-43ee-910d-d4b472fdc395/8450660f-e06c-43ee-910d-d4b472fdc395.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8450660f-e06c-43ee-910d-d4b472fdc395/8450660f-e06c-43ee-910d-d4b472fdc395.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8450660f-e06c-43ee-910d-d4b472fdc395.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 23 Mar 2026 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:27:ab:54:db:03:fd:bc:ec:e0:6f:4d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8450660f-e06c-43ee-910d-d4b472fdc395
        Validity
            Not Before: Mar 13 13:03:19 2026 GMT
            Not After : Jun 11 13:03:19 2026 GMT
        Subject: CN=9beb3139-f643-4730-bcff-95f0a608a2dc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:31:12:91:e8:9c:cc:0a:37:d5:87:8b:ce:ca:
                    7b:1e:9d:35:8a:a1:b6:41:8e:11:e5:37:39:50:a9:
                    fd:73:24:af:20:bf:8d:f7:65:33:9a:06:2a:4a:4b:
                    e7:b6:d6:11:39:24:8a:92:fd:f3:bf:ee:3a:58:f7:
                    39:ad:e0:58:1b:26:1a:2a:9e:77:07:54:05:00:ed:
                    b5:16:7f:15:bd:24:dd:4e:e5:b7:c7:4e:94:31:47:
                    23:df:f5:b2:c1:9c:dd:66:20:12:fb:78:65:df:c2:
                    ad:4b:eb:66:0f:f5:39:08:27:06:4f:f7:f5:01:e9:
                    5d:2e:00:8e:fc:5f:d4:8b:c9:6f:53:bc:00:eb:17:
                    a4:57:0e:65:2c:26:2a:4e:ce:9c:03:f7:30:ae:af:
                    b5:72:bd:2d:ec:a2:f9:60:37:97:d5:54:de:1e:31:
                    49:4b:8a:47:25:1f:3b:3f:4b:30:b5:60:42:46:98:
                    14:80:e3:75:29:be:56:7e:a2:5f:b8:61:c3:00:de:
                    95:cf:8e:2d:47:b5:6b:ea:87:51:7b:52:49:fb:63:
                    16:f5:dc:ca:9a:92:a1:52:8e:3e:e4:8a:75:52:e6:
                    7e:bb:53:4b:a5:9b:7b:ec:6a:bf:a7:be:94:7f:19:
                    d2:0d:7a:ea:21:9b:e5:f5:27:7a:09:17:4c:d5:bd:
                    b5:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:78:56:AA:79:8F:39:29:66:B5:1A:1D:3A:A4:51:1F:3C:5E:D9:40
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8450660f-e06c-43ee-910d-d4b472fdc395/778ff5f3-82a1-3aa0-8ba0-24d3653e91b6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8450660f-e06c-43ee-910d-d4b472fdc395/8450660f-e06c-43ee-910d-d4b472fdc395.crl

            X509v3 Authority Key Identifier:
                keyid:69:25:75:77:04:3B:95:B1:7E:16:48:72:04:EF:23:AC:0A:A8:81:CD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8450660f-e06c-43ee-910d-d4b472fdc395.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.237.134.0/24
                  204.237.162.0/24
                  204.237.174.0/24
                  204.237.177.0-204.237.178.255
                  204.237.183.0-204.237.184.255
                  204.237.197.0-204.237.198.255
                  204.237.203.0/24
                  204.237.224.0/24
                  204.237.231.0/24
                  204.237.236.0/24
                  204.237.238.0/24
                  204.237.250.0/24
                  204.237.252.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1a:ad:af:26:7c:94:6b:9b:c1:98:a7:0c:b5:8c:c8:10:aa:23:
         0c:dc:ab:90:75:14:71:f4:3f:b9:4b:72:20:4d:e7:f1:98:c7:
         55:94:5c:1d:71:bb:cb:d6:b2:3f:65:73:a8:cf:23:0d:a6:db:
         3f:ef:b4:37:ae:09:c3:8c:dc:d8:9c:ca:31:77:37:65:ca:e6:
         6a:98:36:b1:8b:cc:a5:f2:72:e9:ca:af:94:0b:d5:41:dd:bc:
         93:27:ed:51:42:51:6f:41:3d:2b:b1:44:5f:fa:17:85:eb:82:
         f4:53:d7:46:9a:3c:47:4b:b6:2f:f9:e5:bb:a5:20:26:a6:6c:
         43:cc:e2:40:d4:5a:41:4b:ab:dd:d8:6c:79:65:ca:fe:e4:65:
         9a:e3:69:13:b1:b3:cf:89:c7:70:52:eb:32:3f:f9:a0:e8:14:
         3f:a7:fa:77:3f:7d:3c:2c:34:38:32:5e:bb:6a:df:57:ac:ac:
         b6:f5:4a:0c:3e:e0:c2:7a:7d:00:73:e9:63:6b:59:fd:7b:ed:
         78:c0:20:c4:62:d7:72:94:a7:09:4e:16:8a:9b:2c:7a:d1:2e:
         9d:3b:13:a1:6b:5f:75:27:7c:2e:a8:7c:91:7e:c2:2d:97:35:
         57:7a:8b:fe:e8:58:8a:2f:dd:19:59:69:e3:f2:cb:0e:9e:eb:
         e1:b4:a4:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 21 20:38:03 2026 by rpki-client