Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/66f8375e-b198-31f4-9b36-a0fa7627ee2c.roa
File:                     66f8375e-b198-31f4-9b36-a0fa7627ee2c.roa (raw, json)
Hash identifier:          6WxcVrMRQnWjv1ki2Xqho50mFskboE/s7Lf1YtUvwCc=
Subject key identifier:   D8:1D:15:90:B7:23:0E:74:44:3B:34:D0:E4:43:36:A6:61:77:E5:B6
Certificate issuer:       /CN=da370214-1d61-48bf-84a0-a60096ccaae7
Certificate serial:       010D0C9F4328584E4989D5F5423F497A94EC4580
Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/66f8375e-b198-31f4-9b36-a0fa7627ee2c.roa
Signing time:             Thu 25 Jun 2026 09:00:13 +0000
ROA not before:           Thu 25 Jun 2026 09:00:13 +0000
ROA not after:            Wed 23 Sep 2026 09:00:13 +0000
asID:                     2914
IP address blocks:        69.3.236.0/24 maxlen: 24
                          74.211.232.0/24 maxlen: 24
                          74.211.233.0/24 maxlen: 24
                          74.211.234.0/24 maxlen: 24
                          205.179.208.0/24 maxlen: 24
                          205.179.210.0/24 maxlen: 24
                          205.179.211.0/24 maxlen: 24
                          205.179.212.0/24 maxlen: 24
                          205.179.213.0/24 maxlen: 24
                          205.179.252.0/24 maxlen: 24
                          205.179.254.0/24 maxlen: 24
                          205.179.255.0/24 maxlen: 24
                          216.133.97.0/24 maxlen: 24
                          216.133.101.0/24 maxlen: 24
                          216.133.102.0/24 maxlen: 24
                          216.133.103.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 Jul 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:49:89:d5:f5:42:3f:49:7a:94:ec:45:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7
        Validity
            Not Before: Jun 25 09:00:13 2026 GMT
            Not After : Sep 23 09:00:13 2026 GMT
        Subject: CN=70d29f76-ad0a-4e00-b401-378c993c392e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:07:22:05:9a:d0:cd:fe:77:52:60:2e:2b:4a:
                    25:f2:dd:a3:6a:e4:6b:f1:18:27:45:1d:1f:1e:14:
                    a1:8e:6a:fb:60:5c:98:d0:99:75:7d:c2:24:88:4c:
                    83:7c:8f:1e:56:25:f9:5a:46:6e:96:d7:71:b3:cc:
                    77:8e:14:7f:42:7f:37:07:80:18:f1:0f:ca:a8:33:
                    64:31:35:a8:a6:82:5c:56:74:9d:85:ef:2c:a1:15:
                    4a:db:cf:b1:28:e9:2d:0b:d5:ab:80:cb:b4:be:26:
                    5f:fd:72:ce:21:bf:3b:b0:ea:69:fe:f2:92:3c:ac:
                    8b:81:c3:d5:3e:7f:c5:0e:69:5b:69:82:1d:5a:f9:
                    2b:37:77:7c:c7:87:07:45:79:51:b8:a2:a0:b8:a6:
                    e7:64:19:72:f2:ea:1b:c8:0f:e7:67:2d:ad:59:9d:
                    4e:2f:85:bf:b8:d0:6a:4d:0c:a0:7e:af:c4:4f:47:
                    fa:5e:99:69:a4:08:44:d2:cf:63:f7:d4:34:a6:e8:
                    c3:6f:5a:f6:6f:02:03:f9:a7:b2:92:f6:2d:f5:80:
                    3e:d9:39:ca:4d:f8:d1:7e:57:98:19:eb:0a:95:c6:
                    bc:a3:d3:94:91:c0:c7:0a:d7:40:50:e4:d6:6b:85:
                    3a:54:ca:82:30:e1:12:4a:15:79:29:2d:d1:97:f2:
                    61:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:1D:15:90:B7:23:0E:74:44:3B:34:D0:E4:43:36:A6:61:77:E5:B6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/66f8375e-b198-31f4-9b36-a0fa7627ee2c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl

            X509v3 Authority Key Identifier:
                keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.3.236.0/24
                  74.211.232.0-74.211.234.255
                  205.179.208.0/24
                  205.179.210.0-205.179.213.255
                  205.179.252.0/24
                  205.179.254.0/23
                  216.133.97.0/24
                  216.133.101.0-216.133.103.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9f:e8:10:e6:52:c5:1e:79:cc:40:3b:3d:4b:a5:c8:04:b3:62:
         61:25:74:f6:ae:29:b5:e4:56:e5:f1:19:a0:9a:f3:4c:1a:d7:
         e4:f2:10:5d:70:93:e6:83:cd:06:ba:39:ed:96:fb:f4:9f:0c:
         b2:23:fa:30:ca:73:a4:80:6c:66:09:8c:68:ee:dc:cb:74:da:
         1e:c4:b0:44:8f:e0:b4:fb:6c:3c:fa:4b:d7:62:bf:f5:ac:c8:
         00:a0:4b:e6:3b:f7:e9:61:e9:ce:52:78:f5:a7:50:1a:52:a6:
         f7:8d:13:5c:1f:48:fb:da:0d:44:63:fa:c7:16:a7:06:34:a1:
         c7:1d:ee:54:57:15:a0:e0:fb:25:5d:ec:e6:b6:2b:b0:ee:0b:
         d0:c9:47:84:7a:77:f3:a0:8e:a2:cf:3d:08:14:cf:47:92:e2:
         7c:47:b3:ac:ef:fc:e6:66:6b:7b:5f:61:ef:e6:2c:ae:57:13:
         65:cf:58:34:3d:c9:a3:ac:8e:e2:d7:f7:f3:9f:f2:98:67:6d:
         fc:a2:9a:e6:e9:bc:39:aa:95:5a:ef:74:22:eb:aa:93:10:c3:
         86:38:af:1a:2c:2d:df:90:ce:b9:79:ed:f7:7e:73:4c:80:a8:
         2f:9d:1a:b8:ff:2c:c4:cc:06:65:8b:d3:b2:b9:c8:e4:f6:7a:
         d8:53:01:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 10 13:50:51 2026 by rpki-client