Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/2d6e18c2-b9cc-3c77-b067-82945e66810c.roa
File:                     2d6e18c2-b9cc-3c77-b067-82945e66810c.roa (raw, json)
Hash identifier:          0vJ6ykJ/z0bWpKE6FXrYQGRgvehw7eOC0whz9V+GVWI=
Subject key identifier:   C6:E3:29:50:79:74:0A:4D:BA:F7:8F:64:E0:CF:F5:B4:87:26:68:8C
Certificate issuer:       /CN=da370214-1d61-48bf-84a0-a60096ccaae7
Certificate serial:       010D0C9F4328584D6A1A36157F65BC860F820FC0
Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/2d6e18c2-b9cc-3c77-b067-82945e66810c.roa
Signing time:             Mon 06 Apr 2026 08:10:04 +0000
ROA not before:           Mon 06 Apr 2026 08:10:04 +0000
ROA not after:            Sun 05 Jul 2026 08:10:04 +0000
asID:                     16740
IP address blocks:        66.17.157.0/24 maxlen: 24
                          66.17.187.0/24 maxlen: 24
                          66.227.76.0/24 maxlen: 24
                          66.227.109.0/24 maxlen: 24
                          74.199.129.0/24 maxlen: 24
                          74.199.133.0/24 maxlen: 24
                          74.199.146.0/24 maxlen: 24
                          74.199.179.0/24 maxlen: 24
                          76.74.0.0/24 maxlen: 24
                          76.74.15.0/24 maxlen: 24
                          76.74.36.0/24 maxlen: 24
                          76.74.40.0/24 maxlen: 24
                          76.74.42.0/24 maxlen: 24
                          76.74.49.0/24 maxlen: 24
                          76.74.52.0/24 maxlen: 24
                          76.74.60.0/24 maxlen: 24
                          76.74.78.0/24 maxlen: 24
                          76.74.88.0/24 maxlen: 24
                          208.116.216.0/24 maxlen: 24
                          208.116.239.0/24 maxlen: 24
                          209.120.223.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Apr 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:6a:1a:36:15:7f:65:bc:86:0f:82:0f:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7
        Validity
            Not Before: Apr  6 08:10:04 2026 GMT
            Not After : Jul  5 08:10:04 2026 GMT
        Subject: CN=09a599be-12d8-453e-a64d-476b7b3f94eb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:ac:65:29:c5:d0:7d:a2:a3:f8:fd:bf:b6:c5:
                    2c:43:c5:5d:14:41:8a:b0:90:bb:c0:df:21:fa:48:
                    8a:e8:2f:34:f8:92:d1:45:1f:1c:e5:e0:5e:05:d7:
                    d7:04:a4:16:2d:85:79:e1:51:2f:01:31:4f:65:64:
                    bf:49:50:e0:78:a0:55:7b:26:47:1b:ae:8a:4f:4c:
                    05:51:72:2c:4e:03:e1:8d:ee:12:5e:e7:ae:16:9e:
                    f0:94:30:be:09:ea:a3:a8:64:8f:c3:61:d7:4f:39:
                    3d:00:24:ee:e1:ee:de:c3:f0:28:c1:53:10:25:fd:
                    1b:4b:6e:f8:4e:8b:30:3b:81:8f:70:5a:3a:21:7c:
                    28:bd:5b:1e:19:27:ee:a1:c9:4e:f8:64:55:1c:c5:
                    f0:73:2a:c2:22:7a:85:95:a1:1c:3f:46:e7:56:a1:
                    d3:ff:b5:08:a3:79:4a:9b:de:09:aa:88:79:87:68:
                    6b:06:53:3f:57:12:fb:cb:cd:da:55:b6:73:db:40:
                    ff:e8:cc:12:32:82:30:f6:74:3f:5e:a7:1d:e2:22:
                    22:73:a1:5a:aa:73:f5:bd:bc:79:86:fd:6e:61:10:
                    e9:78:df:be:33:3c:11:c9:9b:f4:c4:c1:2d:53:50:
                    93:d1:53:84:95:c3:a0:cb:c9:15:84:95:b3:49:62:
                    0a:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:E3:29:50:79:74:0A:4D:BA:F7:8F:64:E0:CF:F5:B4:87:26:68:8C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/2d6e18c2-b9cc-3c77-b067-82945e66810c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl

            X509v3 Authority Key Identifier:
                keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.17.157.0/24
                  66.17.187.0/24
                  66.227.76.0/24
                  66.227.109.0/24
                  74.199.129.0/24
                  74.199.133.0/24
                  74.199.146.0/24
                  74.199.179.0/24
                  76.74.0.0/24
                  76.74.15.0/24
                  76.74.36.0/24
                  76.74.40.0/24
                  76.74.42.0/24
                  76.74.49.0/24
                  76.74.52.0/24
                  76.74.60.0/24
                  76.74.78.0/24
                  76.74.88.0/24
                  208.116.216.0/24
                  208.116.239.0/24
                  209.120.223.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5e:66:ca:c9:e6:39:b1:a6:90:05:64:e9:83:df:0d:22:63:98:
         63:ce:1a:e9:ff:ea:2c:59:33:ac:63:6e:ac:eb:31:14:e0:f3:
         bb:16:ac:4e:13:84:03:93:a7:83:da:c4:1e:01:9a:4a:b1:d4:
         11:ff:73:31:34:cb:38:77:b1:ba:b2:2e:ad:81:55:29:76:23:
         b4:bb:82:bf:7f:61:31:da:fa:c6:14:74:30:3e:b0:a1:93:d3:
         52:ce:63:d5:53:1f:2a:00:12:4e:b2:1c:2d:80:15:34:89:8a:
         74:18:5b:dd:b1:42:37:42:04:cc:c5:cb:4b:2a:08:e2:b7:f1:
         2c:e9:0e:2a:46:97:2c:00:69:27:ac:89:5a:b0:39:67:1a:2b:
         d8:03:15:aa:8f:47:bf:b8:c7:ad:a0:59:7c:e7:e2:c3:6d:a0:
         8a:67:d5:29:09:f3:07:c1:14:46:3b:fc:58:08:26:9c:2b:e8:
         4d:6e:08:c0:db:f1:8a:35:d7:cc:50:eb:db:a3:67:45:8d:7b:
         b0:28:2f:8a:fd:97:fa:59:90:06:8d:98:ad:88:4e:79:75:1e:
         06:45:31:4e:2c:5a:56:05:92:1c:28:1f:b0:c5:1a:c7:d0:c6:
         c9:52:b4:35:87:18:af:57:d1:e5:c2:23:9c:c0:bb:b1:0d:32:
         ec:36:df:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 10 23:13:31 2026 by rpki-client