Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3975c39a-715c-4dc0-891a-b38f9d7cb3e8/5772613c-107e-3d66-a260-5c28ad608118.roa
File:                     5772613c-107e-3d66-a260-5c28ad608118.roa (raw, json)
Hash identifier:          XQaVnokS+6jk5pWrx6yKtsVMjMbrSTbhSOQwSaM4Y4c=
Subject key identifier:   DD:39:A1:72:A1:8A:CC:5F:37:09:B2:94:D7:D5:EB:20:8D:B6:81:69
Certificate issuer:       /CN=3975c39a-715c-4dc0-891a-b38f9d7cb3e8
Certificate serial:       010D0C9F4328584E4F1F2EF111E2F725D4F2D340
Authority key identifier: EA:18:F7:B0:DF:9E:48:6A:B0:B0:6F:45:6D:0F:57:CC:95:0E:8A:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3975c39a-715c-4dc0-891a-b38f9d7cb3e8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3975c39a-715c-4dc0-891a-b38f9d7cb3e8/5772613c-107e-3d66-a260-5c28ad608118.roa
Signing time:             Sat 27 Jun 2026 09:00:12 +0000
ROA not before:           Sat 27 Jun 2026 09:00:12 +0000
ROA not after:            Fri 25 Sep 2026 09:00:12 +0000
asID:                     197537
IP address blocks:        64.74.117.0/24 maxlen: 24
                          64.74.120.0/24 maxlen: 24
                          64.74.123.0/24 maxlen: 24
                          64.74.124.0/23 maxlen: 24
                          64.95.62.0/23 maxlen: 24
                          64.95.64.0/23 maxlen: 24
                          69.25.90.0/23 maxlen: 24
                          209.191.166.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3975c39a-715c-4dc0-891a-b38f9d7cb3e8/3975c39a-715c-4dc0-891a-b38f9d7cb3e8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3975c39a-715c-4dc0-891a-b38f9d7cb3e8/3975c39a-715c-4dc0-891a-b38f9d7cb3e8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3975c39a-715c-4dc0-891a-b38f9d7cb3e8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Jul 2026 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:4f:1f:2e:f1:11:e2:f7:25:d4:f2:d3:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3975c39a-715c-4dc0-891a-b38f9d7cb3e8
        Validity
            Not Before: Jun 27 09:00:12 2026 GMT
            Not After : Sep 25 09:00:12 2026 GMT
        Subject: CN=f44515a2-d8dc-485e-a372-8c498a973878
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:12:12:7a:40:9a:8a:51:62:ce:44:c2:6b:21:
                    fa:53:e6:59:09:47:e7:88:f6:0c:c5:b2:0d:ab:0f:
                    d5:bd:26:f5:76:e0:85:b0:38:79:86:9e:e5:57:f0:
                    b7:dd:1e:97:1e:8c:32:58:cd:23:a3:9c:99:32:78:
                    72:50:54:89:03:62:fa:20:93:45:c1:8d:95:dc:0e:
                    50:d2:61:6e:12:52:07:82:fc:6e:f1:7f:b3:73:32:
                    5b:92:84:5a:b6:64:4d:d0:7d:7f:58:89:1c:7d:b7:
                    ba:55:b7:18:cd:aa:3e:ee:8d:34:01:f9:b6:e5:17:
                    a0:d3:06:e4:7e:58:b9:ea:ef:f4:52:31:28:44:c6:
                    51:86:03:11:8c:3c:b0:03:b7:4b:70:3e:7b:ab:e3:
                    c5:2d:89:b8:5d:99:a9:fd:5e:b3:c7:e2:c4:70:64:
                    f4:65:aa:92:76:51:46:02:13:4b:85:9e:c5:15:86:
                    c8:2f:1f:ea:65:67:02:c4:d7:21:e8:c1:93:2b:87:
                    39:7c:6a:47:4a:69:b6:02:c7:57:e9:4a:a2:a3:43:
                    dc:5f:d0:87:3f:cc:c2:12:21:81:b1:02:4d:54:4d:
                    38:53:95:3f:eb:fb:0e:10:5f:dd:ec:01:e0:21:5a:
                    47:50:f7:c0:a9:3b:f1:e2:72:d0:75:4b:bc:1f:3b:
                    ae:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:39:A1:72:A1:8A:CC:5F:37:09:B2:94:D7:D5:EB:20:8D:B6:81:69
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3975c39a-715c-4dc0-891a-b38f9d7cb3e8/5772613c-107e-3d66-a260-5c28ad608118.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3975c39a-715c-4dc0-891a-b38f9d7cb3e8/3975c39a-715c-4dc0-891a-b38f9d7cb3e8.crl

            X509v3 Authority Key Identifier:
                keyid:EA:18:F7:B0:DF:9E:48:6A:B0:B0:6F:45:6D:0F:57:CC:95:0E:8A:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3975c39a-715c-4dc0-891a-b38f9d7cb3e8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.74.117.0/24
                  64.74.120.0/24
                  64.74.123.0-64.74.125.255
                  64.95.62.0-64.95.65.255
                  69.25.90.0/23
                  209.191.166.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6d:36:3a:02:8d:c1:0f:54:f0:db:3d:5f:12:da:48:23:6f:ec:
         c3:44:af:4a:27:4e:f1:4d:e4:94:01:2a:00:92:2e:55:45:eb:
         80:23:01:37:ff:2e:b7:a0:8e:72:fd:14:fe:20:57:ce:85:8b:
         3e:f8:3d:ba:ee:f2:9a:01:61:c6:53:8f:05:1a:d8:de:93:24:
         b4:00:45:81:e0:3f:e1:bf:c3:72:6d:12:06:2f:0d:8f:4a:c9:
         ab:cd:aa:f1:d7:63:f3:7f:84:02:d6:16:f5:d9:92:8b:4a:ff:
         09:38:67:a5:bd:53:a0:99:04:e4:c4:98:6b:ac:67:05:74:89:
         33:05:3d:9d:f5:d8:3b:ae:b8:29:09:d4:41:2b:b2:5c:02:91:
         93:26:ce:de:b9:80:ed:a5:ae:a9:b5:ec:db:4a:e6:e8:88:fc:
         5d:aa:55:87:49:01:6b:43:5f:4d:cb:e3:e1:d4:b2:b1:21:87:
         2d:e4:81:b0:ec:7e:ab:e7:56:24:7c:39:5e:2a:9c:82:ae:c4:
         62:69:23:aa:d1:23:c7:43:9e:46:0a:0e:f8:6e:4d:27:69:c0:
         8e:a5:b1:18:e3:76:7d:6b:d6:1e:13:2f:4f:74:69:78:f2:69:
         8a:ce:9f:32:fc:7d:59:c3:53:9c:29:65:b1:8e:5a:8f:52:f7:
         24:54:3c:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 01:19:43 2026 by rpki-client