Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/13ad82b6-ebd8-4d46-876d-4226d25a7871/2cd624a7-7072-32d4-b0db-3d924b2297f5.roa
File:                     2cd624a7-7072-32d4-b0db-3d924b2297f5.roa (raw, json)
Hash identifier:          Dp0BhCqCGqfcnGZUtuW3jCeom27BthRanjj/xeQrJTQ=
Subject key identifier:   F4:66:7F:B8:A0:D7:44:90:DA:F5:55:3F:BD:F4:58:3F:BD:87:A8:34
Certificate issuer:       /CN=13ad82b6-ebd8-4d46-876d-4226d25a7871
Certificate serial:       010D0C9F4328584DF375EBC8394F1DBDE1554200
Authority key identifier: 14:03:3D:B7:E7:D9:AE:F7:CB:42:0D:31:D9:A0:FE:21:9D:CF:51:0A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/13ad82b6-ebd8-4d46-876d-4226d25a7871.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/13ad82b6-ebd8-4d46-876d-4226d25a7871/2cd624a7-7072-32d4-b0db-3d924b2297f5.roa
Signing time:             Mon 25 May 2026 13:00:31 +0000
ROA not before:           Mon 25 May 2026 13:00:31 +0000
ROA not after:            Sun 23 Aug 2026 13:00:31 +0000
asID:                     25853
IP address blocks:        24.75.160.0/20 maxlen: 24
                          24.239.16.0/20 maxlen: 24
                          69.85.96.0/19 maxlen: 24
                          69.194.16.0/20 maxlen: 24
                          72.255.192.0/20 maxlen: 24
                          89.239.48.0/20 maxlen: 24
                          104.36.188.0/22 maxlen: 24
                          151.210.96.0/19 maxlen: 24
                          162.212.184.0/22 maxlen: 24
                          172.102.160.0/19 maxlen: 24
                          192.119.2.0/23 maxlen: 24
                          192.206.70.0/23 maxlen: 24
                          204.16.12.0/22 maxlen: 24
                          206.126.226.0/23 maxlen: 24
                          207.89.0.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/13ad82b6-ebd8-4d46-876d-4226d25a7871/13ad82b6-ebd8-4d46-876d-4226d25a7871.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/13ad82b6-ebd8-4d46-876d-4226d25a7871/13ad82b6-ebd8-4d46-876d-4226d25a7871.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/13ad82b6-ebd8-4d46-876d-4226d25a7871.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 02 Jun 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:f3:75:eb:c8:39:4f:1d:bd:e1:55:42:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=13ad82b6-ebd8-4d46-876d-4226d25a7871
        Validity
            Not Before: May 25 13:00:31 2026 GMT
            Not After : Aug 23 13:00:31 2026 GMT
        Subject: CN=165b9c41-88fe-483f-b0cd-57e21fbce392
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:c8:da:ed:9d:41:f3:bf:e2:e0:23:3b:66:15:
                    b3:b1:63:f3:f8:46:6c:94:52:6d:b5:f5:09:b1:64:
                    ce:73:76:c1:90:d5:f9:b3:d5:37:b8:0e:df:b1:29:
                    76:06:2a:5c:f4:63:b3:1f:a8:1b:6c:99:7e:92:50:
                    d8:2d:e9:d5:a1:3c:6d:f2:fb:c2:0b:3e:0a:29:9b:
                    1d:e8:a5:2c:73:0f:58:a3:39:35:30:5d:97:5b:58:
                    c9:77:b0:f7:0b:7b:38:cb:cc:a7:b0:d1:26:81:68:
                    5e:61:b9:01:24:45:f7:1a:80:09:41:85:84:49:a2:
                    6b:96:f8:f8:e9:fb:08:8a:c6:65:db:68:5c:89:54:
                    0b:d4:da:e3:52:1c:a6:13:6e:e8:5c:6e:30:26:48:
                    56:52:48:e7:d0:fd:11:cf:95:07:c1:49:3f:04:fc:
                    15:b3:a3:2e:86:f6:d9:16:27:81:84:25:45:ea:ee:
                    ea:89:f8:44:80:2d:9a:32:66:c3:7d:e0:b0:a9:88:
                    f9:2e:21:84:f1:80:27:1e:d9:1e:3c:ee:f1:04:48:
                    c0:5f:d6:e9:26:7e:92:43:c5:c3:63:80:7e:2c:31:
                    1b:b1:ca:76:06:4c:d8:55:28:96:c2:04:71:b4:3b:
                    66:0d:d3:b2:e6:04:2e:20:ae:99:c7:c7:87:31:93:
                    5d:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:66:7F:B8:A0:D7:44:90:DA:F5:55:3F:BD:F4:58:3F:BD:87:A8:34
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/13ad82b6-ebd8-4d46-876d-4226d25a7871/2cd624a7-7072-32d4-b0db-3d924b2297f5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/13ad82b6-ebd8-4d46-876d-4226d25a7871/13ad82b6-ebd8-4d46-876d-4226d25a7871.crl

            X509v3 Authority Key Identifier:
                keyid:14:03:3D:B7:E7:D9:AE:F7:CB:42:0D:31:D9:A0:FE:21:9D:CF:51:0A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/13ad82b6-ebd8-4d46-876d-4226d25a7871.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.75.160.0/20
                  24.239.16.0/20
                  69.85.96.0/19
                  69.194.16.0/20
                  72.255.192.0/20
                  89.239.48.0/20
                  104.36.188.0/22
                  151.210.96.0/19
                  162.212.184.0/22
                  172.102.160.0/19
                  192.119.2.0/23
                  192.206.70.0/23
                  204.16.12.0/22
                  206.126.226.0/23
                  207.89.0.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2d:c1:39:0c:d5:df:33:bd:a9:75:ea:d2:72:b6:35:3c:b7:3e:
         c3:de:cc:fd:18:9a:c8:6f:45:88:56:05:29:e6:43:b2:17:e0:
         f4:d8:53:c9:39:07:82:74:3f:62:1a:5d:5a:f1:a3:ec:8b:91:
         04:00:19:b9:fe:fa:15:d1:82:6b:ba:e4:b8:1f:20:3e:57:63:
         28:f7:2f:58:97:e6:c0:90:92:3d:63:14:f1:cc:ed:2a:f1:49:
         67:6b:32:65:9a:ed:41:98:cc:29:70:3c:c9:a8:4b:c3:e4:38:
         ae:55:fc:10:a5:ee:95:76:69:10:03:15:f1:53:8e:57:85:d0:
         3a:b8:7e:70:19:78:6e:72:20:fb:4e:f4:a6:de:aa:1f:89:14:
         1f:84:f6:72:d2:33:05:32:e2:8e:85:e8:bd:11:d0:d0:e2:e5:
         11:ee:99:6c:9d:55:da:48:c5:b9:02:8e:8c:28:3d:c0:98:00:
         e3:5d:83:82:e0:50:85:b3:92:5f:48:b8:ca:b9:42:0d:60:84:
         68:5f:f2:1b:b5:5b:fa:a6:c5:8d:e5:a8:81:f8:4f:a9:cb:83:
         be:f7:bb:74:47:c1:77:67:af:e0:e6:9a:1a:77:18:f4:f2:90:
         c0:88:3b:f6:10:5b:4b:a6:65:fe:dc:e8:d4:c1:b1:05:d0:0e:
         4a:ff:93:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 1 22:01:01 2026 by rpki-client