Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c3e3599f-a90f-4544-a440-c15eca99db7f/6fc5b20a-f85b-3f9a-9274-2dfd90a78800.roa
File:                     6fc5b20a-f85b-3f9a-9274-2dfd90a78800.roa (raw, json)
Hash identifier:          O4FtcBV8JAtkIATJ70eycn2iWupPUUeNX/LAHyiG7dY=
Subject key identifier:   05:8F:8D:C0:C1:36:F8:ED:57:91:7B:75:B6:A3:74:71:A5:E9:16:B4
Certificate issuer:       /CN=c3e3599f-a90f-4544-a440-c15eca99db7f
Certificate serial:       010D0C9F4328584F225CFF68E959B6520CAF79C0
Authority key identifier: 66:2D:F9:A3:3C:93:D0:EE:E2:AC:8B:F7:04:D9:73:D5:15:6C:7F:55
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c3e3599f-a90f-4544-a440-c15eca99db7f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c3e3599f-a90f-4544-a440-c15eca99db7f/6fc5b20a-f85b-3f9a-9274-2dfd90a78800.roa
Signing time:             Fri 11 Sep 2026 01:00:12 +0000
ROA not before:           Fri 11 Sep 2026 01:00:12 +0000
ROA not after:            Thu 10 Dec 2026 02:00:12 +0000
asID:                     22952
IP address blocks:        66.187.200.0/22 maxlen: 24
                          162.246.208.0/21 maxlen: 24
                          2604:c240::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c3e3599f-a90f-4544-a440-c15eca99db7f/c3e3599f-a90f-4544-a440-c15eca99db7f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c3e3599f-a90f-4544-a440-c15eca99db7f/c3e3599f-a90f-4544-a440-c15eca99db7f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c3e3599f-a90f-4544-a440-c15eca99db7f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 16 Sep 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:22:5c:ff:68:e9:59:b6:52:0c:af:79:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c3e3599f-a90f-4544-a440-c15eca99db7f
        Validity
            Not Before: Sep 11 01:00:12 2026 GMT
            Not After : Dec 10 02:00:12 2026 GMT
        Subject: CN=cc2884d8-8633-4e31-b47e-b414fbfb0632
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:14:ee:44:c8:c1:65:d0:d5:ad:5d:18:33:da:
                    a6:75:20:38:ab:b7:36:48:be:73:dc:3b:a4:bc:81:
                    08:b9:36:2f:a1:c3:73:1b:7d:85:93:62:4b:2b:30:
                    db:12:38:45:5f:38:91:4f:a4:41:45:b9:9f:f4:a1:
                    91:65:ee:9e:65:a2:d6:d3:63:a8:a4:5f:22:85:64:
                    01:f9:0a:13:e2:5a:ae:76:0b:42:c0:5b:22:c3:95:
                    0f:4d:91:8e:90:8f:a2:51:b7:0e:f2:e0:76:05:3d:
                    98:3c:d6:69:06:2f:f7:8d:74:77:e8:b4:7d:12:19:
                    01:48:c2:b2:a0:67:52:f5:04:a8:c2:11:9f:6d:4d:
                    b0:ab:41:d8:cc:4a:64:f8:f7:dc:69:5e:71:a8:be:
                    38:7f:ee:9c:14:ad:79:b5:26:ea:e1:0d:30:14:42:
                    c5:6e:ca:9e:e4:d1:dd:83:1c:e9:aa:f1:c0:55:c4:
                    19:ef:5a:79:4e:79:48:05:3f:95:24:e1:69:e4:9c:
                    17:47:d2:62:6f:00:2a:21:af:51:48:0d:8d:ae:3a:
                    11:9a:ae:21:6d:8f:e6:78:2c:e8:23:5b:74:a7:c5:
                    76:82:e6:8b:5e:36:43:18:4d:93:e8:34:57:34:52:
                    e1:c7:00:37:f2:bd:26:25:af:b8:b5:1e:6d:96:a8:
                    c8:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:8F:8D:C0:C1:36:F8:ED:57:91:7B:75:B6:A3:74:71:A5:E9:16:B4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c3e3599f-a90f-4544-a440-c15eca99db7f/6fc5b20a-f85b-3f9a-9274-2dfd90a78800.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c3e3599f-a90f-4544-a440-c15eca99db7f/c3e3599f-a90f-4544-a440-c15eca99db7f.crl

            X509v3 Authority Key Identifier:
                keyid:66:2D:F9:A3:3C:93:D0:EE:E2:AC:8B:F7:04:D9:73:D5:15:6C:7F:55

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c3e3599f-a90f-4544-a440-c15eca99db7f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.187.200.0/22
                  162.246.208.0/21
                IPv6:
                  2604:c240::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         36:8c:59:c7:25:10:52:5e:d8:3e:01:a0:b4:15:6f:43:34:ee:
         07:fe:fd:2b:57:89:5d:d3:69:3c:16:0f:b3:01:06:0b:f5:59:
         90:d8:b8:0c:53:e3:09:0f:8d:58:a6:6b:da:45:ca:0b:bb:ab:
         ac:be:71:4d:ca:82:72:f5:21:13:61:e5:9b:1a:6f:4f:7f:d5:
         71:0c:33:d0:d1:b7:65:88:9f:ba:bf:1b:71:73:74:2d:4b:f8:
         69:69:14:17:6d:bd:17:87:86:ec:6b:a3:06:e3:80:fa:ba:c5:
         b5:34:4b:6a:36:54:d3:3c:ee:1c:53:5b:22:f4:04:99:8e:74:
         00:47:38:2a:86:c9:e8:67:02:c6:b4:09:38:a9:7d:f7:52:c3:
         27:d7:96:e2:f9:7f:0a:16:c9:f2:fc:d3:9a:a1:8d:a6:a4:b9:
         a7:8f:ba:ca:a5:97:c8:13:09:7f:35:e7:98:34:2c:df:18:be:
         3b:d6:bd:ee:b6:6a:15:34:31:e1:8d:03:ab:e1:8c:b7:2a:91:
         c7:4b:37:96:8e:56:7f:c8:d4:62:24:49:0d:50:38:aa:65:7b:
         cb:e7:36:e2:17:7d:a5:5e:13:cb:c1:58:c8:79:f3:60:d2:eb:
         19:ad:c8:10:0e:de:11:e0:63:4a:60:fc:c3:d8:71:ae:0b:a6:
         32:11:1b:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 14 18:28:27 2026 by rpki-client