Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/87a7a98d-6ed8-48cc-953b-32292e94edde/3dbaf674-ab15-3caf-8acc-3d2c1a71c59e.roa
File:                     3dbaf674-ab15-3caf-8acc-3d2c1a71c59e.roa (raw, json)
Hash identifier:          Gh1KgxB028ejD/plqRJ5dbjfwDtiUbAdkL+DAwLudts=
Subject key identifier:   F6:51:43:BA:E0:CC:07:A6:E1:E1:F6:51:BF:84:C5:B4:37:EA:53:E5
Certificate issuer:       /CN=87a7a98d-6ed8-48cc-953b-32292e94edde
Certificate serial:       010D0C9F4328584DF4DB8A4C6A62A237892B5F00
Authority key identifier: B3:48:FE:63:A1:FE:47:57:64:FF:44:53:06:55:C0:57:45:25:DF:CD
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/87a7a98d-6ed8-48cc-953b-32292e94edde.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/87a7a98d-6ed8-48cc-953b-32292e94edde/3dbaf674-ab15-3caf-8acc-3d2c1a71c59e.roa
Signing time:             Tue 26 May 2026 01:00:24 +0000
ROA not before:           Tue 26 May 2026 01:00:24 +0000
ROA not after:            Mon 24 Aug 2026 01:00:24 +0000
asID:                     11115
IP address blocks:        64.9.194.0/24 maxlen: 24
                          72.13.0.0/20 maxlen: 24
                          205.145.128.0/20 maxlen: 24
                          216.71.161.0/24 maxlen: 24
                          216.71.164.0/24 maxlen: 24
                          216.71.186.0/24 maxlen: 24
                          216.71.188.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/87a7a98d-6ed8-48cc-953b-32292e94edde/87a7a98d-6ed8-48cc-953b-32292e94edde.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/87a7a98d-6ed8-48cc-953b-32292e94edde/87a7a98d-6ed8-48cc-953b-32292e94edde.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/87a7a98d-6ed8-48cc-953b-32292e94edde.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 12 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:f4:db:8a:4c:6a:62:a2:37:89:2b:5f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=87a7a98d-6ed8-48cc-953b-32292e94edde
        Validity
            Not Before: May 26 01:00:24 2026 GMT
            Not After : Aug 24 01:00:24 2026 GMT
        Subject: CN=fa6e1d71-366a-4872-ac7d-3b20b38aa5dd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:b5:b6:5e:a0:0a:2b:5c:2a:da:3b:f1:b3:29:
                    ff:4c:5f:ae:b5:7e:8f:8f:78:70:48:a8:04:47:02:
                    b2:c3:8c:af:56:95:8f:8a:84:b9:e5:ae:0c:03:21:
                    c5:5f:64:49:6f:d2:5a:2c:b1:95:3c:d7:24:74:bf:
                    ea:46:7b:ee:3d:4b:1c:a6:ff:50:dd:70:95:5e:be:
                    63:14:17:bc:b7:0a:aa:7c:20:b2:3d:ac:7d:e0:a6:
                    89:24:5b:7f:33:7a:7a:02:3f:b6:95:ef:87:cf:86:
                    ec:cb:06:fc:ab:d4:54:3c:8b:23:e0:92:4d:85:7d:
                    d6:f5:49:96:86:e5:1d:80:89:a2:3b:ee:ce:e2:40:
                    e3:2d:02:a8:cf:18:c7:7d:a0:20:c6:b9:a0:a6:81:
                    17:08:74:b6:7b:88:25:dd:31:95:5a:59:fb:b6:31:
                    d7:0d:48:ee:47:92:f3:c7:a2:56:14:54:c8:d5:43:
                    2f:e5:01:27:99:08:b8:9c:62:f9:a0:f4:92:61:42:
                    2e:dc:49:38:ec:e6:fe:30:8a:68:6d:b3:f5:f2:b9:
                    41:b3:d8:40:43:5c:61:25:36:9d:e7:f2:cd:72:c1:
                    3b:30:1d:d8:68:c7:f9:ce:14:ba:49:2a:6d:bd:22:
                    de:e4:ad:02:48:6e:67:fd:0c:a8:51:7c:2e:c5:66:
                    f9:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:51:43:BA:E0:CC:07:A6:E1:E1:F6:51:BF:84:C5:B4:37:EA:53:E5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/87a7a98d-6ed8-48cc-953b-32292e94edde/3dbaf674-ab15-3caf-8acc-3d2c1a71c59e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/87a7a98d-6ed8-48cc-953b-32292e94edde/87a7a98d-6ed8-48cc-953b-32292e94edde.crl

            X509v3 Authority Key Identifier:
                keyid:B3:48:FE:63:A1:FE:47:57:64:FF:44:53:06:55:C0:57:45:25:DF:CD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/87a7a98d-6ed8-48cc-953b-32292e94edde.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.9.194.0/24
                  72.13.0.0/20
                  205.145.128.0/20
                  216.71.161.0/24
                  216.71.164.0/24
                  216.71.186.0/24
                  216.71.188.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         88:02:b5:d5:f5:7e:0f:00:d8:e9:f0:9b:6f:b4:a7:c7:2e:cc:
         b3:84:ff:1d:41:eb:bf:e9:3f:04:43:c9:6e:9f:9b:ec:a0:4a:
         19:cd:4e:9c:3c:b1:62:ff:7e:72:c7:ec:2c:65:b0:21:25:21:
         cd:02:d2:22:67:a2:4a:74:ac:75:1d:9f:72:8c:67:f3:49:2c:
         db:dc:c5:55:9c:28:46:ca:d5:f7:91:8c:80:70:73:a3:ea:be:
         20:df:3a:4c:d2:b1:78:0f:d2:76:03:3f:7b:8d:e9:e8:7c:f8:
         35:38:df:0f:bc:64:01:69:7b:8e:e5:5d:d9:71:00:2f:3a:d9:
         c4:ac:04:d2:23:ce:52:e1:ae:69:55:2c:f6:42:41:ac:f9:dd:
         6f:6a:87:6c:f3:1a:3d:f5:dc:13:52:a6:37:f2:72:8b:72:2a:
         22:c8:ee:a2:70:75:d8:b0:15:e0:5e:be:6c:00:31:be:97:cf:
         34:39:3c:64:f5:df:2c:20:94:52:f5:7a:33:b7:74:50:b2:d1:
         53:97:51:ba:cf:f7:b9:ef:df:f3:b5:6a:83:6a:ec:5d:59:de:
         1c:1e:50:41:5a:2e:e3:1a:0e:63:63:f0:2b:cd:49:d6:a8:c3:
         a7:f2:e2:cd:26:18:6b:e7:ea:44:ac:ce:7b:83:1a:56:e5:d9:
         36:2d:50:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 10 03:38:57 2026 by rpki-client