Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/03957c67-2bbb-3aba-a6a2-f7abf6456bbb.roa
File:                     03957c67-2bbb-3aba-a6a2-f7abf6456bbb.roa (raw, json)
Hash identifier:          oNq9RNF3DD9pwXeI8OZlxJD70ODCZAE9rusZW/elv9g=
Subject key identifier:   BA:AC:7D:10:7E:4D:23:53:5D:85:90:E7:42:EF:32:6A:E8:00:23:06
Certificate issuer:       /CN=da370214-1d61-48bf-84a0-a60096ccaae7
Certificate serial:       010D0C9F4328584E0EF2A6589747E6AEA2C2F200
Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/03957c67-2bbb-3aba-a6a2-f7abf6456bbb.roa
Signing time:             Thu 04 Jun 2026 09:18:44 +0000
ROA not before:           Thu 04 Jun 2026 09:18:44 +0000
ROA not after:            Wed 02 Sep 2026 09:18:44 +0000
asID:                     19211
IP address blocks:        67.102.248.0/24 maxlen: 24
                          67.102.249.0/24 maxlen: 24
                          67.102.250.0/24 maxlen: 24
                          67.102.251.0/24 maxlen: 24
                          67.102.252.0/24 maxlen: 24
                          67.102.253.0/24 maxlen: 24
                          67.102.254.0/24 maxlen: 24
                          67.102.255.0/24 maxlen: 24
                          68.167.240.0/24 maxlen: 24
                          68.167.241.0/24 maxlen: 24
                          68.167.242.0/24 maxlen: 24
                          68.167.243.0/24 maxlen: 24
                          68.167.244.0/24 maxlen: 24
                          68.167.245.0/24 maxlen: 24
                          68.167.246.0/24 maxlen: 24
                          68.167.247.0/24 maxlen: 24
                          216.175.204.0/24 maxlen: 24
                          216.175.205.0/24 maxlen: 24
                          216.175.206.0/24 maxlen: 24
                          216.175.207.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 10 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:0e:f2:a6:58:97:47:e6:ae:a2:c2:f2:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7
        Validity
            Not Before: Jun  4 09:18:44 2026 GMT
            Not After : Sep  2 09:18:44 2026 GMT
        Subject: CN=c6ee391c-9208-4f65-aa71-26de36c6d418
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:39:3d:cf:72:1e:d8:5b:cf:f0:59:a6:33:cf:
                    0e:a9:ef:df:20:45:4e:cc:73:0f:f9:95:ee:5d:ef:
                    b6:fd:86:a0:c6:1d:2d:d5:74:41:d1:2f:4e:08:dd:
                    86:6b:91:63:a9:50:09:c3:7e:45:3d:5a:a2:5c:a9:
                    c6:00:33:21:06:f0:e8:52:d3:ed:e9:2b:66:f9:23:
                    f5:76:de:29:c9:df:ac:25:de:d0:8c:0c:2b:bc:6a:
                    dd:ca:13:f9:32:f7:ea:69:50:a7:a6:94:08:21:36:
                    59:13:57:8b:32:a9:4f:f3:d1:fd:d0:32:7c:ce:e5:
                    91:c8:e8:36:26:4a:94:ed:ba:27:da:d1:6e:84:71:
                    37:9a:6a:bd:cc:39:d5:f5:f6:5b:95:72:b1:bd:7e:
                    c8:89:27:78:b8:ef:fb:95:cf:f8:e4:3e:23:95:fe:
                    be:b8:d2:25:0b:d7:3d:e6:da:a5:8a:f5:97:5a:88:
                    dc:cb:93:cd:0f:cd:29:b9:52:24:4b:2e:7f:de:08:
                    0d:fa:75:e7:ed:2b:10:b2:cc:bd:23:80:b2:ab:91:
                    9c:b4:e1:f2:33:9d:53:97:49:3e:a5:55:7b:b7:f8:
                    24:1c:64:57:8d:9e:79:62:7e:66:b5:a4:6b:97:41:
                    63:d2:dc:36:44:74:14:4d:71:14:48:26:f0:e4:54:
                    df:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:AC:7D:10:7E:4D:23:53:5D:85:90:E7:42:EF:32:6A:E8:00:23:06
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/03957c67-2bbb-3aba-a6a2-f7abf6456bbb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl

            X509v3 Authority Key Identifier:
                keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.102.248.0/21
                  68.167.240.0/21
                  216.175.204.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a9:11:c4:e2:08:9f:25:18:4b:8b:0e:38:59:4b:67:2a:82:1d:
         d6:7e:ab:21:04:3b:2e:6e:d3:ee:73:f6:6b:14:8e:ed:00:db:
         32:e6:f6:fa:5a:bd:c7:40:28:b2:b3:07:d0:21:00:63:31:68:
         c9:b0:5e:19:2a:9e:30:38:5b:aa:86:af:5b:72:a0:55:24:80:
         68:32:2d:7e:51:47:00:69:72:1a:2b:8e:be:a9:71:3c:5e:12:
         35:15:2b:f1:a0:a4:01:bb:ed:84:54:dc:f0:da:fd:68:4e:65:
         65:e0:a1:50:64:15:61:ef:5e:69:5b:09:51:60:af:44:42:22:
         f5:33:51:eb:ca:db:55:e4:82:ec:bb:c4:1c:d1:34:a7:cd:d7:
         73:ca:56:d3:94:b7:0b:0a:4d:67:1c:b5:56:61:89:ed:ef:27:
         4d:ee:9a:05:f7:02:a8:85:db:6a:70:cb:00:22:e8:ac:34:e6:
         e6:1f:72:fc:61:1f:d9:84:43:cd:94:2e:80:04:22:4f:0b:71:
         bf:50:da:cc:71:c6:6f:39:94:d8:da:a2:92:e7:41:6b:e5:a2:
         92:45:9b:68:75:26:7c:7c:d9:99:fd:15:f2:71:9c:1b:e4:6e:
         3e:32:da:f5:5f:85:07:f6:7d:42:b8:ae:23:4c:e4:de:6a:5b:
         f9:b1:39:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 8 22:57:40 2026 by rpki-client