Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/4c674f1d-6a7a-3fd3-a712-2a8f23da0b2b.roa
File:                     4c674f1d-6a7a-3fd3-a712-2a8f23da0b2b.roa (raw, json)
Hash identifier:          hzGl9+DZA4dTWTx12lr/gngnZvjF+7T7Lo1gcRtlB6o=
Subject key identifier:   DF:1C:4D:96:DB:FE:4A:49:9A:37:DC:B7:87:6C:8D:93:86:CD:8F:58
Certificate issuer:       /CN=da370214-1d61-48bf-84a0-a60096ccaae7
Certificate serial:       010D0C9F4328584DF375E74F50BB8437174CA900
Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/4c674f1d-6a7a-3fd3-a712-2a8f23da0b2b.roa
Signing time:             Mon 25 May 2026 13:00:31 +0000
ROA not before:           Mon 25 May 2026 13:00:31 +0000
ROA not after:            Sun 23 Aug 2026 13:00:31 +0000
asID:                     2914
IP address blocks:        66.80.172.0/22 maxlen: 24
                          207.145.96.0/22 maxlen: 24
                          207.145.184.0/22 maxlen: 24
                          207.168.116.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 27 May 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:f3:75:e7:4f:50:bb:84:37:17:4c:a9:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7
        Validity
            Not Before: May 25 13:00:31 2026 GMT
            Not After : Aug 23 13:00:31 2026 GMT
        Subject: CN=5485d094-5a42-4c1a-bc82-75ced8b3c0c5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:08:40:8f:0a:ad:96:dc:d2:28:fd:b1:11:a8:
                    0e:6d:c8:61:1d:a7:cd:e5:15:14:f9:60:0e:e7:af:
                    b0:e0:ff:ba:78:2f:24:aa:9c:05:b6:53:7f:bf:45:
                    26:ff:c3:ed:c2:ec:a9:60:4e:85:fc:78:1c:80:cf:
                    47:ca:e0:41:92:35:ff:c5:aa:92:b7:19:2d:ea:87:
                    0a:ee:98:35:45:3d:b3:e1:07:91:36:87:70:9d:26:
                    7e:e5:7e:99:88:95:b5:11:9f:6e:10:40:80:89:96:
                    1e:35:80:dc:63:87:3a:33:b5:b5:5e:00:33:2c:72:
                    a0:8f:9d:ee:6f:27:99:69:04:64:95:0c:01:77:24:
                    fc:31:58:fa:28:12:82:ab:1c:0a:40:6e:49:1b:fe:
                    49:9b:4b:f4:ae:57:89:4e:82:4a:9a:b2:4a:9f:0e:
                    30:fc:ad:5c:ec:32:75:02:bf:53:2a:cb:82:27:13:
                    ed:d9:f6:27:d4:de:9a:e1:72:ac:c8:ea:0d:06:9f:
                    ee:78:64:83:93:9c:8f:a4:5a:f1:82:d3:bc:dd:6e:
                    2d:df:17:f4:d3:4e:82:cc:a6:7e:9b:58:3b:cb:fb:
                    3c:22:6f:75:15:68:26:46:c6:da:5c:49:ff:31:b8:
                    1e:a3:b6:11:70:da:10:b3:ab:7b:39:e4:07:6c:07:
                    b3:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:1C:4D:96:DB:FE:4A:49:9A:37:DC:B7:87:6C:8D:93:86:CD:8F:58
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/4c674f1d-6a7a-3fd3-a712-2a8f23da0b2b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl

            X509v3 Authority Key Identifier:
                keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.80.172.0/22
                  207.145.96.0/22
                  207.145.184.0/22
                  207.168.116.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5a:01:ff:2d:fc:4c:ef:8c:28:f7:04:f5:72:46:4a:60:dc:14:
         3c:ea:49:ba:30:fa:c3:4d:8c:2e:9c:ad:00:8b:be:1f:48:b4:
         14:c0:b0:21:32:03:7b:22:d8:fa:71:14:76:13:78:1d:1f:9f:
         dd:e5:34:3f:e2:44:04:23:16:47:ee:fb:7a:a4:f9:2b:e0:e4:
         a4:fc:07:ec:e6:13:37:97:34:4d:ca:cb:05:9c:94:78:2f:b3:
         e5:6f:fe:fd:35:47:bd:c8:9c:9e:9b:92:a8:f4:6a:84:ba:73:
         eb:cc:46:02:fc:05:07:9e:a0:4a:78:75:ac:a3:89:16:39:14:
         68:62:24:fa:d9:19:6a:44:aa:6b:7f:5e:47:05:c8:cf:4f:84:
         b6:14:fd:f5:8d:1e:5d:c1:a9:9e:93:c8:d8:e6:37:ef:c8:36:
         a5:ee:92:59:33:1d:d7:a4:df:54:e9:ef:ae:5e:91:c5:06:ef:
         88:3c:47:1c:1f:eb:7b:14:76:fa:71:63:54:14:02:fa:a1:7d:
         35:ce:bc:5d:71:95:f1:92:f4:a4:ea:6a:90:8c:22:cc:76:75:
         c8:75:34:ce:55:4b:8d:b8:e7:ca:83:15:30:64:4f:ba:c7:08:
         05:d5:3c:38:32:1b:e3:5e:61:04:60:14:fd:57:a9:10:19:86:
         b7:57:0a:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 26 02:31:39 2026 by rpki-client