Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f509b96c-10eb-4731-ae65-8d698aade657/f7b4be52-f0ab-3fe5-bd6b-95f5c44faaa1.roa
File:                     f7b4be52-f0ab-3fe5-bd6b-95f5c44faaa1.roa (raw, json)
Hash identifier:          Y0/FpwCO9eiCWI2S+hYzftDqr85vKQBmmcT+DlqaHl0=
Subject key identifier:   FB:FB:5B:FA:2F:6D:1B:64:6E:C6:A3:27:49:23:28:33:F2:DF:B8:1F
Certificate issuer:       /CN=f509b96c-10eb-4731-ae65-8d698aade657
Certificate serial:       010D0C9F4328584E3EC14F0CA90F6478E3389780
Authority key identifier: 88:F1:2C:29:3C:34:F2:31:35:BB:BA:B2:23:D4:80:4C:D5:05:62:8C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f509b96c-10eb-4731-ae65-8d698aade657.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f509b96c-10eb-4731-ae65-8d698aade657/f7b4be52-f0ab-3fe5-bd6b-95f5c44faaa1.roa
Signing time:             Sun 21 Jun 2026 12:18:07 +0000
ROA not before:           Sun 21 Jun 2026 12:18:07 +0000
ROA not after:            Sat 19 Sep 2026 12:18:07 +0000
asID:                     402279
IP address blocks:        208.66.228.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f509b96c-10eb-4731-ae65-8d698aade657/f509b96c-10eb-4731-ae65-8d698aade657.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f509b96c-10eb-4731-ae65-8d698aade657/f509b96c-10eb-4731-ae65-8d698aade657.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f509b96c-10eb-4731-ae65-8d698aade657.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Jul 2026 23:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:3e:c1:4f:0c:a9:0f:64:78:e3:38:97:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f509b96c-10eb-4731-ae65-8d698aade657
        Validity
            Not Before: Jun 21 12:18:07 2026 GMT
            Not After : Sep 19 12:18:07 2026 GMT
        Subject: CN=177b7ee8-bb40-4007-aaee-6ad65ed12ab8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:12:7c:38:49:8c:b0:d6:fe:76:dd:b8:16:ce:
                    12:3b:fe:c7:29:92:15:a7:0b:2d:5e:e6:d4:fc:49:
                    f0:c9:28:3c:e8:b0:3a:24:cb:51:44:a6:cb:92:21:
                    bc:65:aa:76:ca:b0:94:e1:97:b8:e3:be:da:e6:4b:
                    e9:d6:a3:82:08:2a:14:2c:9a:66:d4:d7:b0:f3:ad:
                    b7:ea:8e:07:c4:41:f9:d4:34:da:7a:29:08:7f:63:
                    21:7d:0e:1d:03:ff:1c:24:8a:9c:09:60:c2:8b:d3:
                    a9:48:11:e1:fd:19:17:34:64:cf:25:9d:8e:c6:46:
                    80:0a:42:9e:01:8f:7c:af:0f:c2:94:ac:c5:88:de:
                    e4:52:3a:2e:1a:71:b9:b3:5d:19:dd:bc:a1:45:50:
                    51:51:94:33:2d:be:3f:3d:c9:5c:9d:21:a1:d0:2d:
                    b8:de:96:56:3a:77:6c:4b:7e:5e:ce:10:1e:cb:95:
                    5d:7b:b1:0d:bf:3b:d2:09:4c:12:4c:71:c4:c1:87:
                    a5:ff:31:41:ce:56:ff:55:ee:92:ce:00:bd:d2:d6:
                    b8:1e:52:e2:f2:1f:ac:56:4e:fa:24:03:45:b7:95:
                    50:98:da:8f:d9:b2:da:d8:54:fa:17:e1:f5:8e:62:
                    99:90:de:bd:10:e6:27:2b:23:81:4c:a1:bc:d6:01:
                    a7:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:FB:5B:FA:2F:6D:1B:64:6E:C6:A3:27:49:23:28:33:F2:DF:B8:1F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f509b96c-10eb-4731-ae65-8d698aade657/f7b4be52-f0ab-3fe5-bd6b-95f5c44faaa1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f509b96c-10eb-4731-ae65-8d698aade657/f509b96c-10eb-4731-ae65-8d698aade657.crl

            X509v3 Authority Key Identifier:
                keyid:88:F1:2C:29:3C:34:F2:31:35:BB:BA:B2:23:D4:80:4C:D5:05:62:8C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f509b96c-10eb-4731-ae65-8d698aade657.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.66.228.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5b:3d:02:5a:5f:04:ea:b7:6a:90:4d:dd:80:dc:e7:f4:00:1c:
         3e:84:ae:66:de:ac:a1:d5:de:37:f8:66:11:09:4a:79:bc:da:
         3b:58:64:c1:3e:12:11:0d:a4:f3:51:8d:ef:ad:75:97:54:8c:
         fd:7d:1a:b2:3c:c5:89:4c:66:89:f2:ba:d4:ea:68:4c:98:c6:
         5e:ce:ec:b8:ee:f8:0c:b7:29:2f:fe:90:1c:ac:e1:85:77:b2:
         ec:f6:bf:2f:c1:3f:73:d4:b7:9d:13:8a:51:d3:9b:0b:61:20:
         34:b0:3a:c3:ba:55:a0:1f:d8:c5:19:23:8c:94:c6:e8:83:1f:
         73:85:71:88:68:e0:6c:60:08:e0:3c:e0:d0:d9:70:6c:27:bd:
         2a:43:15:fa:db:85:9f:9a:a9:4f:ee:8e:c5:c8:05:a4:ce:a6:
         15:17:5d:f5:0c:1d:b2:c6:e0:cf:90:98:d4:53:71:d9:c2:b0:
         cc:c6:3f:e2:f6:75:41:af:69:07:eb:ef:03:c9:75:5c:cf:bc:
         ff:b4:48:b7:a3:13:d8:7c:61:81:4a:b9:07:dd:88:00:39:f6:
         29:ce:7d:ba:65:9d:b5:ee:49:04:6c:2f:07:c1:d8:50:be:02:
         fd:5e:ce:ee:b3:38:91:61:53:55:4b:07:74:b9:9b:9f:5a:28:
         9c:ee:81:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 16:17:33 2026 by rpki-client