Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/533bea0e-cd52-49a8-9cca-a05cc33ce073/d5978de5-de11-363c-8105-0036b6008ff2.roa
File:                     d5978de5-de11-363c-8105-0036b6008ff2.roa (raw, json)
Hash identifier:          ij3YYoRzEWpu1C4mRn4PMgjreq24KkibQIQzYQv00HE=
Subject key identifier:   BB:15:C5:24:74:0E:1E:7F:14:8F:43:E1:AE:EB:83:3E:06:4A:92:86
Certificate issuer:       /CN=533bea0e-cd52-49a8-9cca-a05cc33ce073
Certificate serial:       010D0C9F4328584DFBD5DE3F3DD1ACBD07C423C0
Authority key identifier: 33:18:BF:25:9A:A7:B2:43:AA:A8:B2:C2:1D:7C:A3:8F:E9:B3:65:6B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/533bea0e-cd52-49a8-9cca-a05cc33ce073.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/533bea0e-cd52-49a8-9cca-a05cc33ce073/d5978de5-de11-363c-8105-0036b6008ff2.roa
Signing time:             Thu 28 May 2026 13:00:12 +0000
ROA not before:           Thu 28 May 2026 13:00:12 +0000
ROA not after:            Wed 26 Aug 2026 13:00:12 +0000
asID:                     11878
IP address blocks:        68.235.32.0/24 maxlen: 32
                          68.235.33.0/24 maxlen: 32
                          68.235.34.0/24 maxlen: 32
                          68.235.35.0/24 maxlen: 32
                          68.235.36.0/24 maxlen: 32
                          68.235.37.0/24 maxlen: 32
                          68.235.38.0/24 maxlen: 32
                          68.235.39.0/24 maxlen: 32
                          68.235.40.0/24 maxlen: 32
                          68.235.41.0/24 maxlen: 32
                          68.235.42.0/24 maxlen: 32
                          68.235.43.0/24 maxlen: 32
                          68.235.44.0/24 maxlen: 32
                          68.235.45.0/24 maxlen: 32
                          68.235.46.0/24 maxlen: 32
                          68.235.47.0/24 maxlen: 32
                          68.235.48.0/24 maxlen: 32
                          68.235.49.0/24 maxlen: 32
                          68.235.50.0/24 maxlen: 32
                          68.235.51.0/24 maxlen: 32
                          68.235.52.0/24 maxlen: 32
                          68.235.53.0/24 maxlen: 32
                          68.235.54.0/24 maxlen: 32
                          68.235.55.0/24 maxlen: 32
                          68.235.56.0/24 maxlen: 32
                          68.235.57.0/24 maxlen: 32
                          68.235.58.0/24 maxlen: 32
                          68.235.59.0/24 maxlen: 32
                          68.235.60.0/24 maxlen: 32
                          68.235.61.0/24 maxlen: 32
                          68.235.62.0/24 maxlen: 32
                          68.235.63.0/24 maxlen: 32
                          208.77.16.0/24 maxlen: 32
                          208.77.17.0/24 maxlen: 32
                          208.77.18.0/24 maxlen: 32
                          208.77.19.0/24 maxlen: 32
                          208.77.20.0/24 maxlen: 32
                          208.77.21.0/24 maxlen: 32
                          208.77.22.0/24 maxlen: 32
                          208.77.23.0/24 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/533bea0e-cd52-49a8-9cca-a05cc33ce073/533bea0e-cd52-49a8-9cca-a05cc33ce073.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/533bea0e-cd52-49a8-9cca-a05cc33ce073/533bea0e-cd52-49a8-9cca-a05cc33ce073.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/533bea0e-cd52-49a8-9cca-a05cc33ce073.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 13 Jun 2026 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:fb:d5:de:3f:3d:d1:ac:bd:07:c4:23:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=533bea0e-cd52-49a8-9cca-a05cc33ce073
        Validity
            Not Before: May 28 13:00:12 2026 GMT
            Not After : Aug 26 13:00:12 2026 GMT
        Subject: CN=edd4eef6-6822-48b0-95cc-62ce83cf236a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:80:aa:fd:d8:25:39:c7:45:12:87:74:bc:c1:
                    1d:47:42:41:84:75:0f:fa:a3:f7:b7:bd:6b:53:4a:
                    40:0c:5a:ae:4c:e7:2e:ab:b3:d1:fe:aa:8b:03:aa:
                    c7:2a:02:d2:65:a9:3e:f7:0e:50:c5:a6:6f:d3:08:
                    16:d7:7c:ee:1d:95:6e:ac:81:4b:7e:0f:ed:ba:8b:
                    ae:43:60:b8:23:42:2e:f9:3b:86:7b:05:64:c7:2d:
                    d3:cf:01:33:22:f0:a7:0d:55:5c:48:63:9e:00:b9:
                    3a:b2:c1:92:34:c7:67:c3:2c:8a:db:40:bd:46:9e:
                    6a:c5:4b:e4:9f:c0:60:55:5a:cf:46:82:21:04:e9:
                    08:14:7e:b9:b0:f3:7f:01:6c:a5:ef:4e:4c:35:a8:
                    41:2c:bf:62:4c:8f:eb:8c:10:48:33:1f:88:92:e6:
                    30:f2:7b:39:55:69:e3:ff:f8:16:14:e4:7e:4e:66:
                    32:83:fa:34:4c:9d:c0:7c:85:bb:70:95:37:d3:1e:
                    39:5d:92:93:50:d3:d8:b2:cb:dc:2f:69:c6:67:ed:
                    92:56:4f:99:35:96:d6:ff:88:48:b6:00:6d:12:da:
                    db:5f:e7:67:f3:9e:7b:53:0e:2f:ab:82:cd:c4:37:
                    64:ac:9c:e6:6c:31:6c:a6:00:6c:a8:50:03:f8:05:
                    09:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:15:C5:24:74:0E:1E:7F:14:8F:43:E1:AE:EB:83:3E:06:4A:92:86
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/533bea0e-cd52-49a8-9cca-a05cc33ce073/d5978de5-de11-363c-8105-0036b6008ff2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/533bea0e-cd52-49a8-9cca-a05cc33ce073/533bea0e-cd52-49a8-9cca-a05cc33ce073.crl

            X509v3 Authority Key Identifier:
                keyid:33:18:BF:25:9A:A7:B2:43:AA:A8:B2:C2:1D:7C:A3:8F:E9:B3:65:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/533bea0e-cd52-49a8-9cca-a05cc33ce073.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.235.32.0/19
                  208.77.16.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0d:05:74:4a:98:e1:ca:7f:f2:11:31:3a:c8:80:41:9d:77:3b:
         d2:0e:7e:eb:18:4b:78:f8:55:12:61:6b:f6:e4:06:32:b8:f0:
         f6:eb:65:eb:1b:b5:90:f1:a1:5c:0e:cf:26:51:93:09:90:f1:
         ee:03:72:d1:49:25:07:e9:24:c4:58:77:e5:16:48:5f:be:6f:
         c6:fc:f4:7e:3b:55:ed:d7:f9:44:ec:d1:8b:54:7d:88:28:e9:
         f1:dd:0a:ad:3d:19:3b:b4:fc:a7:d6:cd:b4:bf:bf:27:30:42:
         87:aa:c8:08:93:f5:2a:34:c8:96:07:6e:46:5a:33:b9:1c:af:
         18:82:09:91:a3:92:e8:15:b5:7b:1b:b6:8a:e4:eb:f1:df:3a:
         e0:9d:94:17:e4:af:22:84:14:87:32:80:c0:2c:4a:09:45:66:
         be:51:07:3e:4c:5b:be:76:94:55:54:80:69:55:2f:6e:c8:15:
         ad:c7:45:e9:fd:33:b4:23:51:ad:71:57:28:89:72:d4:9c:41:
         b5:e7:fd:26:81:ca:73:65:2d:ca:f3:6c:9a:a8:30:dc:2e:82:
         5e:35:14:c6:17:05:4d:87:1d:70:f2:ab:db:d6:96:66:ab:1b:
         24:2e:c7:6d:3c:fd:f1:99:78:6f:5d:2e:51:1e:5a:58:b0:c1:
         52:6a:12:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 06:12:01 2026 by rpki-client