Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/418536e3-a238-4d5c-85de-f77873e419af/0cc982f6-b60e-35b5-b0aa-0b9f4c802a3b.roa
File:                     0cc982f6-b60e-35b5-b0aa-0b9f4c802a3b.roa (raw, json)
Hash identifier:          tV12xNkljuTN3PjPfO/FlGibkjledLImCxFJgELCTw8=
Subject key identifier:   9D:60:93:8C:A8:B4:59:C7:3D:4E:C6:9B:58:A8:79:C3:B4:27:4A:C3
Certificate issuer:       /CN=418536e3-a238-4d5c-85de-f77873e419af
Certificate serial:       010D0C9F4328584DDBBB22206487B9C81AF98F00
Authority key identifier: 86:30:08:47:96:08:91:BF:19:5C:82:DE:7F:52:59:C1:30:76:FE:2E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/418536e3-a238-4d5c-85de-f77873e419af.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/418536e3-a238-4d5c-85de-f77873e419af/0cc982f6-b60e-35b5-b0aa-0b9f4c802a3b.roa
Signing time:             Sun 17 May 2026 01:00:24 +0000
ROA not before:           Sun 17 May 2026 01:00:24 +0000
ROA not after:            Sat 15 Aug 2026 01:00:24 +0000
asID:                     21777
IP address blocks:        72.18.208.0/24 maxlen: 24
                          72.18.210.0/24 maxlen: 24
                          72.18.212.0/23 maxlen: 23
                          72.18.217.0/24 maxlen: 24
                          72.18.218.0/23 maxlen: 23
                          72.18.220.0/24 maxlen: 24
                          72.18.223.0/24 maxlen: 24
                          199.45.166.0/24 maxlen: 24
                          199.45.236.0/22 maxlen: 22
                          199.45.240.0/24 maxlen: 24
                          199.45.255.0/24 maxlen: 24
                          199.127.200.0/22 maxlen: 22
                          204.144.128.0/22 maxlen: 22
                          204.144.132.0/23 maxlen: 23
                          204.144.134.0/24 maxlen: 24
                          204.144.140.0/23 maxlen: 23
                          204.144.151.0/24 maxlen: 24
                          204.144.181.0/24 maxlen: 24
                          204.144.184.0/24 maxlen: 24
                          206.168.0.0/24 maxlen: 24
                          206.168.13.0/24 maxlen: 24
                          206.168.39.0/24 maxlen: 24
                          206.168.96.0/24 maxlen: 24
                          206.168.112.0/24 maxlen: 24
                          206.168.114.0/24 maxlen: 24
                          206.168.117.0/24 maxlen: 24
                          206.168.153.0/24 maxlen: 24
                          206.168.172.0/24 maxlen: 24
                          206.168.187.0/24 maxlen: 24
                          206.168.188.0/24 maxlen: 24
                          206.168.189.0/24 maxlen: 24
                          206.168.216.0/22 maxlen: 22
                          206.168.220.0/24 maxlen: 24
                          206.168.222.0/23 maxlen: 23
                          206.168.224.0/21 maxlen: 21
                          207.174.8.0/24 maxlen: 24
                          207.174.21.0/24 maxlen: 24
                          207.174.72.0/23 maxlen: 23
                          207.174.76.0/24 maxlen: 24
                          207.174.77.0/24 maxlen: 24
                          207.174.98.0/24 maxlen: 24
                          207.174.113.0/24 maxlen: 24
                          207.174.114.0/24 maxlen: 24
                          207.174.117.0/24 maxlen: 24
                          207.174.130.0/24 maxlen: 24
                          207.174.137.0/24 maxlen: 24
                          207.174.138.0/23 maxlen: 23
                          207.174.140.0/22 maxlen: 22
                          207.174.157.0/24 maxlen: 24
                          207.174.175.0/24 maxlen: 24
                          207.174.201.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/418536e3-a238-4d5c-85de-f77873e419af/418536e3-a238-4d5c-85de-f77873e419af.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/418536e3-a238-4d5c-85de-f77873e419af/418536e3-a238-4d5c-85de-f77873e419af.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/418536e3-a238-4d5c-85de-f77873e419af.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 04 Jun 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:db:bb:22:20:64:87:b9:c8:1a:f9:8f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=418536e3-a238-4d5c-85de-f77873e419af
        Validity
            Not Before: May 17 01:00:24 2026 GMT
            Not After : Aug 15 01:00:24 2026 GMT
        Subject: CN=fbf8178d-78b3-4681-afda-b75329d9b46c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:99:26:28:03:13:8f:b4:d6:36:34:57:58:7d:
                    3d:49:46:a2:41:38:38:c4:b8:2a:48:4b:f7:85:a5:
                    54:59:3b:0e:ef:f9:78:be:44:f3:96:a5:ed:9b:9b:
                    17:fb:d9:f4:8e:1b:95:39:77:cb:d5:aa:a9:16:34:
                    f5:69:16:21:68:aa:06:4d:ae:b6:63:b2:5c:ff:ea:
                    dc:97:6d:9f:a9:fc:f6:cd:57:3e:6d:d5:a1:f3:f7:
                    46:cf:cf:43:9e:36:81:70:c2:be:c6:50:f9:a4:d1:
                    e8:98:c7:05:7e:a5:a6:77:b8:63:74:59:91:e6:07:
                    d5:ed:8f:f3:22:91:0c:97:2e:7c:8e:3f:c7:9f:87:
                    b6:12:c4:ee:07:3c:48:2a:d7:4d:be:d1:a0:3e:2e:
                    1b:8a:0b:cc:7b:02:00:c1:c4:00:d3:5b:49:df:cd:
                    c4:9f:15:67:42:a8:a0:b4:ab:b8:96:95:bf:0b:ef:
                    8a:6a:c2:8f:f6:4c:ee:b9:cc:a6:89:f3:b3:75:56:
                    08:09:7a:a4:18:ec:27:d1:82:10:32:58:b7:3d:84:
                    81:8f:b6:38:a2:a1:c7:49:04:1a:9f:c0:c2:dc:84:
                    b6:60:e0:07:9a:7f:42:71:f5:57:89:47:1c:0e:f5:
                    9f:6e:72:33:3f:f7:39:8e:0d:db:f0:9c:84:42:73:
                    73:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:60:93:8C:A8:B4:59:C7:3D:4E:C6:9B:58:A8:79:C3:B4:27:4A:C3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/418536e3-a238-4d5c-85de-f77873e419af/0cc982f6-b60e-35b5-b0aa-0b9f4c802a3b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/418536e3-a238-4d5c-85de-f77873e419af/418536e3-a238-4d5c-85de-f77873e419af.crl

            X509v3 Authority Key Identifier:
                keyid:86:30:08:47:96:08:91:BF:19:5C:82:DE:7F:52:59:C1:30:76:FE:2E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/418536e3-a238-4d5c-85de-f77873e419af.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.18.208.0/24
                  72.18.210.0/24
                  72.18.212.0/23
                  72.18.217.0-72.18.220.255
                  72.18.223.0/24
                  199.45.166.0/24
                  199.45.236.0-199.45.240.255
                  199.45.255.0/24
                  199.127.200.0/22
                  204.144.128.0-204.144.134.255
                  204.144.140.0/23
                  204.144.151.0/24
                  204.144.181.0/24
                  204.144.184.0/24
                  206.168.0.0/24
                  206.168.13.0/24
                  206.168.39.0/24
                  206.168.96.0/24
                  206.168.112.0/24
                  206.168.114.0/24
                  206.168.117.0/24
                  206.168.153.0/24
                  206.168.172.0/24
                  206.168.187.0-206.168.189.255
                  206.168.216.0-206.168.220.255
                  206.168.222.0-206.168.231.255
                  207.174.8.0/24
                  207.174.21.0/24
                  207.174.72.0/23
                  207.174.76.0/23
                  207.174.98.0/24
                  207.174.113.0-207.174.114.255
                  207.174.117.0/24
                  207.174.130.0/24
                  207.174.137.0-207.174.143.255
                  207.174.157.0/24
                  207.174.175.0/24
                  207.174.201.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         90:91:9a:74:3f:f0:ad:57:7c:64:78:db:31:c1:d6:84:bf:ad:
         f7:5d:71:b7:7d:5b:fa:20:ee:23:85:e5:bd:56:b5:ff:be:6f:
         26:44:9f:90:c7:a9:e6:ab:ae:00:99:f7:98:c8:8a:f5:bc:94:
         34:64:64:03:43:74:7e:3e:b2:4c:ef:0f:8e:35:dc:46:cf:9f:
         80:60:06:5b:b3:b0:e3:9f:4f:84:11:c3:88:5f:63:86:20:3e:
         86:e8:63:d4:44:a3:5b:2c:db:ad:0b:42:0b:21:56:1f:2f:2b:
         04:78:17:45:a1:02:d9:c5:85:c6:8f:28:7e:ef:15:78:bb:0c:
         0c:2e:a5:d1:97:77:52:a3:b9:4b:c3:7d:a7:10:6e:61:c2:ca:
         fc:fb:f4:86:33:8e:8a:10:e5:a0:a1:e3:70:a6:4a:ee:f7:f5:
         87:a0:03:21:ef:08:ab:aa:c3:2f:03:0f:85:80:2b:f2:57:02:
         fa:df:20:67:98:1a:46:65:67:e2:c5:d1:0c:e9:e3:ce:cf:f3:
         55:b2:53:84:f3:83:0e:b3:37:e9:43:d0:9a:62:75:c3:7a:03:
         e6:b6:e7:2d:1f:e1:77:5c:e8:67:74:0d:c6:96:ce:66:63:39:
         50:ad:5d:4c:f2:a6:f4:79:80:3b:f7:46:ca:0e:d9:06:86:96:
         a2:49:09:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 1 22:04:07 2026 by rpki-client