Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/732b8b8f-9ef3-335d-bd00-283a77bf1f30.roa
File:                     732b8b8f-9ef3-335d-bd00-283a77bf1f30.roa (raw, json)
Hash identifier:          jH8tsU5rq7n/K4gC7q5P1jqf6HBjub+sxn6VdUGl6n8=
Subject key identifier:   6D:0F:2A:58:01:0A:53:76:81:0D:87:10:C1:B4:D4:60:7A:32:A8:83
Certificate issuer:       /CN=da370214-1d61-48bf-84a0-a60096ccaae7
Certificate serial:       010D0C9F4328584E5CD6AFC6E91064530EAFA180
Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/732b8b8f-9ef3-335d-bd00-283a77bf1f30.roa
Signing time:             Thu 02 Jul 2026 06:55:27 +0000
ROA not before:           Thu 02 Jul 2026 06:55:27 +0000
ROA not after:            Tue 29 Sep 2026 13:07:33 +0000
asID:                     2914
IP address blocks:        69.3.220.0/22 maxlen: 24
                          206.135.148.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 09 Jul 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:5c:d6:af:c6:e9:10:64:53:0e:af:a1:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7
        Validity
            Not Before: Jul  2 06:55:27 2026 GMT
            Not After : Sep 29 13:07:33 2026 GMT
        Subject: CN=d65d88bd-c87c-4854-8276-560b38aebd42
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:ef:48:66:1f:fd:1d:3c:82:39:91:f1:34:8c:
                    13:d3:27:4d:58:0d:36:50:e6:e0:09:4d:bd:ea:d9:
                    f8:8c:37:46:b8:de:36:f5:0c:84:24:bc:b9:1a:f7:
                    27:e5:6d:13:d7:b7:d1:5f:0f:ef:34:09:8c:65:93:
                    b1:25:08:dd:bb:4f:1a:33:ac:80:5e:da:57:85:a2:
                    a1:7a:af:2b:ea:67:ce:13:46:a9:3d:f8:a7:c7:83:
                    b4:ae:87:21:10:93:e7:93:90:23:64:67:a4:a5:19:
                    70:61:a0:53:b1:52:6a:0c:a3:cf:40:e2:90:dc:6d:
                    b7:55:28:1e:03:78:a4:e6:e7:e0:0a:a1:73:f6:a1:
                    00:53:0f:27:aa:f4:d9:40:1c:0e:26:05:88:cd:80:
                    13:ca:52:ef:f3:c2:83:a7:df:8c:c4:2f:d3:cb:9b:
                    e9:e5:5c:c3:72:8e:aa:71:a5:ca:6c:18:33:2d:6d:
                    22:ef:73:0a:bf:0b:e1:a8:66:6b:20:6f:a0:31:9a:
                    b4:9b:07:3c:cc:2e:dd:2f:6b:33:36:2f:1c:b7:f8:
                    d9:28:5c:de:d4:0c:cb:f5:c7:c2:81:1d:9c:2f:4b:
                    70:fd:fb:77:56:83:31:66:74:82:3c:58:81:57:30:
                    3b:26:ee:0e:f0:44:88:89:6f:63:01:00:e9:4a:c5:
                    52:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:0F:2A:58:01:0A:53:76:81:0D:87:10:C1:B4:D4:60:7A:32:A8:83
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/732b8b8f-9ef3-335d-bd00-283a77bf1f30.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl

            X509v3 Authority Key Identifier:
                keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.3.220.0/22
                  206.135.148.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a4:b7:af:52:54:a0:9e:80:d6:d4:e0:94:d4:0f:31:fe:39:d6:
         4e:81:26:9b:e1:39:94:b7:63:22:a9:9b:97:ff:34:00:44:b2:
         8e:b9:54:6a:57:11:02:e2:c5:66:94:e5:ee:31:67:a5:a8:5c:
         9f:eb:7b:50:ed:2a:16:25:1d:3f:bd:aa:3f:f9:5a:42:c0:48:
         e6:dc:81:ba:17:21:90:89:c9:9f:60:83:c8:f6:fb:2c:35:60:
         74:38:bc:f0:cc:64:35:65:3b:e8:8d:f9:0e:ef:2b:64:55:6b:
         45:df:6c:91:3b:8c:70:57:c4:91:14:82:72:8c:56:88:e8:61:
         9e:24:c1:94:bc:e0:06:21:9f:33:c2:22:f7:3a:17:08:47:ac:
         62:25:67:05:3c:d8:39:23:84:0d:3b:81:bb:eb:10:da:26:0e:
         71:42:2d:b0:28:80:a1:20:f0:14:a1:e7:17:a3:cd:fb:16:b7:
         57:76:d3:31:34:f9:a5:1b:c1:6e:55:d2:73:57:13:ff:3d:65:
         c8:e9:57:dd:a9:39:93:3d:7e:86:61:f6:73:30:12:a5:3f:f6:
         ec:c8:92:7d:31:3d:76:d5:af:0e:c1:5b:18:a1:ff:88:7b:20:
         18:7b:d3:75:c0:d9:0c:f7:0b:b0:aa:1a:d5:05:ce:e8:af:fd:
         fb:9f:0d:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 7 22:11:25 2026 by rpki-client