Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e2b04e47-5052-4735-8ac7-6c3f429b939a/ec82f193-b8be-335f-bdac-a5d0ba8df2d7.roa
File:                     ec82f193-b8be-335f-bdac-a5d0ba8df2d7.roa (raw, json)
Hash identifier:          PnB3VJ8EiWnRabCq+nd+7FuWRMTJ97aqvh+3JgxqhEo=
Subject key identifier:   61:B9:C5:43:47:55:A1:E1:77:E5:75:37:C1:40:9F:3D:C3:55:2C:51
Certificate issuer:       /CN=e2b04e47-5052-4735-8ac7-6c3f429b939a
Certificate serial:       010D0C9F4328584EA79C88AD16C6A536B6B0BB00
Authority key identifier: FF:44:F9:53:6E:FE:5B:AF:C1:37:8B:F1:9A:9E:C6:3B:66:69:69:A3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e2b04e47-5052-4735-8ac7-6c3f429b939a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e2b04e47-5052-4735-8ac7-6c3f429b939a/ec82f193-b8be-335f-bdac-a5d0ba8df2d7.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     397332
IP address blocks:        23.90.88.0/22 maxlen: 22
                          45.115.204.0/22 maxlen: 22
                          75.119.180.0/22 maxlen: 22
                          152.228.36.0/22 maxlen: 22
                          168.203.12.0/22 maxlen: 22
                          2602:fdfa::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e2b04e47-5052-4735-8ac7-6c3f429b939a/e2b04e47-5052-4735-8ac7-6c3f429b939a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e2b04e47-5052-4735-8ac7-6c3f429b939a/e2b04e47-5052-4735-8ac7-6c3f429b939a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e2b04e47-5052-4735-8ac7-6c3f429b939a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 28 Aug 2026 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:9c:88:ad:16:c6:a5:36:b6:b0:bb:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e2b04e47-5052-4735-8ac7-6c3f429b939a
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=bc3d4a0f-42b0-4fb7-ae82-6997c0716a66
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:1e:7a:cf:5f:30:9f:ab:a5:6e:52:23:5a:15:
                    86:63:b7:6d:40:0f:3c:57:8e:6c:0e:f7:87:f3:a0:
                    70:72:3c:83:97:43:0c:cb:3c:59:df:4d:00:c2:3a:
                    fc:b6:79:8b:f8:bf:52:52:92:67:2d:53:51:38:39:
                    da:24:fd:2e:86:a2:c1:a6:f4:3f:7d:01:59:a6:06:
                    be:86:64:fe:d7:ff:c1:78:b6:36:c9:45:e2:52:1c:
                    64:17:21:1a:71:62:78:a0:e7:92:4b:11:4a:02:90:
                    b4:55:66:25:bc:38:22:c2:b7:19:e1:77:03:a6:c9:
                    8e:1d:e3:fd:b7:ab:d3:a5:7e:a9:7b:a2:c3:fe:e1:
                    06:53:23:db:65:3b:a4:04:21:e9:50:77:53:a0:da:
                    46:16:1f:6e:66:e9:da:5e:c4:6c:8f:5f:61:cc:dc:
                    ff:c5:57:f7:e8:35:3b:63:17:36:52:46:96:31:54:
                    7d:0d:47:4b:5c:32:58:18:76:b2:6d:8c:e8:c9:b6:
                    dc:38:7e:76:cb:80:4e:3c:2f:de:fb:be:7d:c8:3a:
                    7a:00:92:5d:53:eb:6d:4e:da:75:65:b0:20:c8:a8:
                    f0:71:c9:5c:cc:af:d6:22:58:90:2b:57:13:67:d4:
                    1d:3f:92:e9:51:f0:6a:64:36:0c:dd:d1:91:d6:51:
                    d0:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:B9:C5:43:47:55:A1:E1:77:E5:75:37:C1:40:9F:3D:C3:55:2C:51
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e2b04e47-5052-4735-8ac7-6c3f429b939a/ec82f193-b8be-335f-bdac-a5d0ba8df2d7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e2b04e47-5052-4735-8ac7-6c3f429b939a/e2b04e47-5052-4735-8ac7-6c3f429b939a.crl

            X509v3 Authority Key Identifier:
                keyid:FF:44:F9:53:6E:FE:5B:AF:C1:37:8B:F1:9A:9E:C6:3B:66:69:69:A3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e2b04e47-5052-4735-8ac7-6c3f429b939a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.90.88.0/22
                  45.115.204.0/22
                  75.119.180.0/22
                  152.228.36.0/22
                  168.203.12.0/22
                IPv6:
                  2602:fdfa::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         13:a3:7d:03:69:ba:21:33:3e:e3:c6:34:70:42:5f:25:77:c9:
         65:16:69:22:88:f3:81:0e:5d:71:88:f0:95:88:8d:10:32:b6:
         fb:51:6e:35:59:ed:77:44:8a:bd:fa:d7:74:91:83:27:81:28:
         c6:75:ee:4d:8d:2f:3d:c8:8c:75:8d:e5:4f:b8:7d:af:3d:96:
         36:bb:df:3e:93:82:c9:f1:fa:e4:98:af:36:41:8b:3f:1f:ee:
         57:b9:d8:19:22:f4:1a:77:9e:36:0e:ac:3a:58:2c:df:fc:cc:
         82:09:6b:ef:0d:5a:ec:a7:10:55:6d:ae:62:56:79:f9:06:74:
         46:d3:28:84:78:7b:5e:2f:26:eb:8b:74:64:fe:93:31:df:d0:
         2a:4e:ed:30:09:a5:49:58:7b:b6:97:f9:93:09:5a:54:34:46:
         0c:c2:97:92:7d:38:d1:af:98:2b:38:30:03:a5:4b:5f:da:be:
         29:69:e9:11:ba:0f:fd:79:5b:48:27:0a:22:79:20:69:d9:4f:
         ae:4d:55:3a:4a:37:a2:2c:c8:6c:82:aa:11:76:55:63:45:9a:
         a7:75:92:47:f2:cb:fb:63:d2:9d:2e:b6:f6:71:7f:54:60:e3:
         cd:ed:0d:56:65:4c:46:88:d1:d8:08:60:14:f7:dd:d6:90:8e:
         8e:86:88:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 26 22:36:31 2026 by rpki-client