Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/ebf567a0-4cf8-429d-82b3-3d284a246421/5e6b3956-f389-30ac-a866-34bb38831507.roa
File:                     5e6b3956-f389-30ac-a866-34bb38831507.roa (raw, json)
Hash identifier:          DFj/ETgBMOoLix8dcBQ0KNH0KgYqHolu3LpCQmshV5Y=
Subject key identifier:   5C:EB:FA:D7:CF:58:95:75:EB:73:34:9F:A3:88:80:47:8B:69:C2:2A
Certificate issuer:       /CN=ebf567a0-4cf8-429d-82b3-3d284a246421
Certificate serial:       010D0C9F4328584D148E5AAB5826953639312AC0
Authority key identifier: BC:DC:60:56:34:F7:B9:03:E6:E5:5E:C5:FD:4D:EE:CC:69:95:41:37
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/ebf567a0-4cf8-429d-82b3-3d284a246421.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/ebf567a0-4cf8-429d-82b3-3d284a246421/5e6b3956-f389-30ac-a866-34bb38831507.roa
Signing time:             Fri 09 Jan 2026 02:00:31 +0000
ROA not before:           Fri 09 Jan 2026 02:00:31 +0000
ROA not after:            Thu 09 Apr 2026 01:00:31 +0000
asID:                     1421
IP address blocks:        66.39.192.0/20 maxlen: 24
                          66.39.208.0/20 maxlen: 24
                          66.220.58.0/24 maxlen: 24
                          69.64.240.0/20 maxlen: 24
                          162.211.176.0/22 maxlen: 24
                          162.216.96.0/23 maxlen: 24
                          162.216.100.0/22 maxlen: 24
                          199.38.232.0/22 maxlen: 24
                          199.101.92.0/22 maxlen: 24
                          2001:4848::/32 maxlen: 48
                          2605:dc80::/32 maxlen: 48
                          2606:9100::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/ebf567a0-4cf8-429d-82b3-3d284a246421/ebf567a0-4cf8-429d-82b3-3d284a246421.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/ebf567a0-4cf8-429d-82b3-3d284a246421/ebf567a0-4cf8-429d-82b3-3d284a246421.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/ebf567a0-4cf8-429d-82b3-3d284a246421.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Mar 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:14:8e:5a:ab:58:26:95:36:39:31:2a:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ebf567a0-4cf8-429d-82b3-3d284a246421
        Validity
            Not Before: Jan  9 02:00:31 2026 GMT
            Not After : Apr  9 01:00:31 2026 GMT
        Subject: CN=c1ba9673-f43f-41a8-a2b0-2acebc37023b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:8a:f5:ee:24:b1:a7:30:c0:1d:d8:dd:04:3f:
                    d5:79:82:a9:2d:0e:02:49:60:bc:2e:45:64:9b:31:
                    7b:b8:55:4e:49:53:99:bd:7e:cf:54:2c:17:2e:0a:
                    f0:8b:a0:16:83:11:0f:02:4c:c1:10:9c:44:ee:9e:
                    46:fc:64:6b:4b:f2:e0:73:3f:5e:79:27:2c:a2:5e:
                    82:19:d0:8f:c0:b4:54:5d:4d:b6:c4:be:b3:d1:b0:
                    65:14:d7:13:b4:bd:04:13:40:db:31:32:ff:df:65:
                    b9:b8:ad:4a:b0:c2:2d:8c:94:6b:75:5a:c6:a0:3d:
                    b2:3a:cb:d0:93:95:ce:9d:97:17:e2:2f:6f:45:c9:
                    74:dc:4e:d5:f8:72:f0:3b:c0:dd:24:56:c8:fe:5d:
                    2d:6b:a4:82:aa:61:12:49:c6:78:5c:51:78:19:91:
                    02:3f:15:68:e8:24:2c:8c:2c:c5:09:14:21:69:a3:
                    fd:25:0b:4a:f7:b2:34:55:d4:6a:9e:44:88:0f:5d:
                    e4:6b:ba:4a:44:08:ee:59:95:35:79:3f:fe:08:a9:
                    1b:0a:4b:e4:ef:21:cf:8e:f3:fd:9d:3f:15:8b:82:
                    43:b8:5c:11:72:da:72:8a:a3:89:e2:23:ea:d0:6a:
                    6a:f2:8f:5d:84:7c:6e:ee:35:b0:07:3c:2d:8b:cf:
                    d2:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:EB:FA:D7:CF:58:95:75:EB:73:34:9F:A3:88:80:47:8B:69:C2:2A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/ebf567a0-4cf8-429d-82b3-3d284a246421/5e6b3956-f389-30ac-a866-34bb38831507.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/ebf567a0-4cf8-429d-82b3-3d284a246421/ebf567a0-4cf8-429d-82b3-3d284a246421.crl

            X509v3 Authority Key Identifier:
                keyid:BC:DC:60:56:34:F7:B9:03:E6:E5:5E:C5:FD:4D:EE:CC:69:95:41:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/ebf567a0-4cf8-429d-82b3-3d284a246421.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.39.192.0/19
                  66.220.58.0/24
                  69.64.240.0/20
                  162.211.176.0/22
                  162.216.96.0/23
                  162.216.100.0/22
                  199.38.232.0/22
                  199.101.92.0/22
                IPv6:
                  2001:4848::/32
                  2605:dc80::/32
                  2606:9100::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5a:57:35:dd:71:bc:c7:8d:51:f9:a5:a1:fe:e4:c1:93:ee:04:
         54:40:f2:2b:d8:6e:b4:84:a4:76:e0:72:5a:68:a7:c6:e5:6f:
         be:2d:83:59:18:d0:e6:76:99:70:49:75:24:7e:91:9b:66:bf:
         17:0f:6a:f8:c8:aa:6f:63:60:51:f5:26:82:c8:17:c3:0a:5f:
         3f:4b:b6:53:a6:fe:88:87:8a:84:5d:a5:d1:0f:a8:2b:34:92:
         af:45:4e:d3:b1:df:e7:92:75:63:39:6e:57:dd:39:7b:b3:bd:
         72:f4:58:95:12:53:ac:26:d6:24:78:57:71:9b:2e:33:c1:63:
         62:84:62:74:c4:8f:13:bd:70:3a:11:db:d9:bd:a5:17:45:9e:
         49:ce:1d:33:03:b7:ed:02:54:72:ba:f2:ba:18:bb:3e:80:6d:
         49:a0:a0:7e:8c:39:92:75:93:67:6a:c9:e5:99:3c:77:fc:b3:
         b7:dd:12:c3:46:fe:a3:20:7a:82:55:9f:a8:4c:9c:8b:1b:92:
         19:71:bd:a2:91:de:a8:1e:04:ad:00:be:db:03:2e:92:e7:38:
         2b:7a:c8:e9:d6:5a:7a:55:f3:9d:46:cb:9e:3c:a0:26:57:f7:
         4d:c0:f6:a6:f7:aa:30:13:ed:91:9b:47:55:d0:2b:80:26:40:
         fc:f9:73:4f
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Mar 14 20:41:27 2026 by rpki-client