Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/d6d8c1eb-e9e6-315a-a243-327a6ac14699.roa
File:                     d6d8c1eb-e9e6-315a-a243-327a6ac14699.roa (raw, json)
Hash identifier:          XlGzBn1xJy2N9yTcTQaclt8g7Ty83umMOyNgEi4t1Ho=
Subject key identifier:   A9:4D:9A:B5:30:4B:63:82:5C:1B:EA:A8:A1:46:AE:FB:E7:03:97:60
Certificate issuer:       /CN=da370214-1d61-48bf-84a0-a60096ccaae7
Certificate serial:       010D0C9F4328584D4EAB81ABDA0D263DBB994840
Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/d6d8c1eb-e9e6-315a-a243-327a6ac14699.roa
Signing time:             Fri 27 Mar 2026 12:20:11 +0000
ROA not before:           Fri 27 Mar 2026 12:20:11 +0000
ROA not after:            Thu 25 Jun 2026 12:20:11 +0000
asID:                     2914
IP address blocks:        69.3.132.0/22 maxlen: 22
                          205.179.244.0/22 maxlen: 22
                          216.133.104.0/22 maxlen: 22
                          216.133.108.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 09 Apr 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:4e:ab:81:ab:da:0d:26:3d:bb:99:48:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7
        Validity
            Not Before: Mar 27 12:20:11 2026 GMT
            Not After : Jun 25 12:20:11 2026 GMT
        Subject: CN=4095e759-0911-454c-9068-777d0d3774ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:23:36:a7:54:32:40:3b:27:f0:b2:d0:69:a9:
                    05:82:d3:f0:46:dd:df:70:99:2e:6d:94:26:6a:d4:
                    a3:c1:0b:04:2a:6e:eb:d1:26:58:ae:df:0b:3f:fb:
                    f8:7e:b2:a0:4b:32:2a:8d:df:7a:d1:20:08:45:2e:
                    b4:00:0d:b4:8a:5b:5e:46:70:5b:1d:53:38:e7:02:
                    93:22:46:2c:ab:89:1f:03:5c:b8:d8:ad:bd:4e:5a:
                    e5:f2:79:69:fd:84:37:32:1b:da:ff:ba:83:7f:95:
                    6b:6d:28:ff:15:d3:aa:54:9a:a6:9e:d0:fc:58:e0:
                    70:25:ad:60:f1:b3:9e:67:ab:8e:cb:40:fa:e5:2e:
                    c4:5d:8c:54:93:91:ae:c7:b9:b3:4c:ac:74:de:a1:
                    67:cc:58:cd:93:44:b4:90:cc:14:d7:39:40:94:62:
                    44:12:d6:e5:d6:b8:5a:fa:a9:90:2b:aa:99:f4:17:
                    b2:47:1d:51:56:db:be:6b:86:53:fd:fa:d8:d7:cf:
                    6d:b1:25:f1:5b:51:42:33:ea:88:11:46:7f:44:2b:
                    54:93:90:af:36:17:f8:f7:a4:71:a4:09:d6:79:13:
                    49:e2:39:e2:d0:97:9f:70:fb:48:da:52:f1:e8:1e:
                    48:a9:56:8e:11:68:54:84:1a:90:0d:45:44:d1:6f:
                    5c:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:4D:9A:B5:30:4B:63:82:5C:1B:EA:A8:A1:46:AE:FB:E7:03:97:60
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/d6d8c1eb-e9e6-315a-a243-327a6ac14699.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl

            X509v3 Authority Key Identifier:
                keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.3.132.0/22
                  205.179.244.0/22
                  216.133.104.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         70:65:be:ea:6e:83:03:87:b1:6e:25:d0:2b:51:cb:f1:80:ed:
         f8:fb:6a:d7:81:aa:b0:bf:4f:5c:19:b9:92:fe:93:56:fd:84:
         51:38:7c:2e:2b:67:d8:ea:b5:d8:d8:06:3f:91:18:18:f0:55:
         12:d8:50:8f:a5:a1:27:84:12:53:b8:cf:b7:46:02:c9:93:ab:
         48:46:45:60:b6:cd:a8:9b:35:ac:33:9a:c6:05:59:7a:f5:f9:
         00:9e:5e:38:a5:ee:ce:ed:a5:1f:39:a5:3a:59:c2:67:cb:37:
         85:9a:85:7f:9a:65:96:1a:19:44:77:1c:31:eb:48:f6:50:8f:
         d5:1c:7f:ec:6e:6b:76:f6:8f:9e:df:47:d6:99:17:2d:1a:80:
         f7:82:18:df:0e:87:cc:9a:81:0d:48:f7:db:d5:e7:ff:0a:55:
         81:04:0d:38:fc:27:c0:b4:76:28:1f:96:bc:c1:e1:4c:b2:0a:
         bc:1a:77:e7:28:ad:a4:dd:b3:b8:be:e3:9f:76:4e:fe:46:85:
         e3:09:2b:d9:01:d5:9e:ad:74:d1:a3:a8:92:b3:9b:ba:0a:34:
         09:90:b5:ef:87:b3:19:9c:36:4f:99:c4:5f:ac:e8:ac:05:d4:
         04:c4:c2:4f:29:68:41:84:2f:dc:a9:b1:e2:83:9c:50:99:23:
         9f:42:fc:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 8 14:50:09 2026 by rpki-client