Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460/59544e35-0c4d-3fbc-81cb-8a530d41787f.roa
File:                     59544e35-0c4d-3fbc-81cb-8a530d41787f.roa (raw, json)
Hash identifier:          Y0UpGdR/15CakjAHVYbrFOwmjmsXVSEa7BGoaK0hM20=
Subject key identifier:   34:0B:BA:A0:2B:F9:FC:65:C8:A4:4E:76:EA:FE:B1:2B:90:69:A7:AC
Certificate issuer:       /CN=d1f886df-6c58-4ea7-9d1f-0659e2324460
Certificate serial:       010D0C9F4328584EB2B1AA142C8BA9542266E680
Authority key identifier: DE:16:51:20:56:83:D6:08:13:E6:42:45:8E:FD:16:70:EE:87:6F:BB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460/59544e35-0c4d-3fbc-81cb-8a530d41787f.roa
Signing time:             Sun 02 Aug 2026 01:00:11 +0000
ROA not before:           Sun 02 Aug 2026 01:00:11 +0000
ROA not after:            Sat 31 Oct 2026 01:00:11 +0000
asID:                     6621
IP address blocks:        67.44.112.0/20 maxlen: 24
                          174.32.112.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460/d1f886df-6c58-4ea7-9d1f-0659e2324460.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460/d1f886df-6c58-4ea7-9d1f-0659e2324460.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Aug 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:b2:b1:aa:14:2c:8b:a9:54:22:66:e6:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d1f886df-6c58-4ea7-9d1f-0659e2324460
        Validity
            Not Before: Aug  2 01:00:11 2026 GMT
            Not After : Oct 31 01:00:11 2026 GMT
        Subject: CN=da4a7caa-3283-4d63-a38d-a44727a44fa4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:4a:37:54:47:87:ce:87:c2:0e:83:3d:b0:6b:
                    2f:dd:07:2b:bd:5e:61:0b:f6:b6:24:3c:cf:19:c8:
                    ba:ad:7b:c9:23:c6:c7:63:a2:f0:19:a8:0a:70:bc:
                    57:df:e7:65:66:86:d3:f4:0e:da:0b:f9:e5:35:4b:
                    de:c3:86:0d:48:06:91:64:4b:5b:e9:d9:f0:40:52:
                    18:01:35:ff:6e:b4:ed:1c:3a:ff:b9:1d:50:4b:3d:
                    20:e4:a7:0c:ce:c2:31:70:47:e7:a1:b9:e5:ae:ae:
                    65:67:c3:2c:20:0a:02:5f:ac:a3:b6:d5:14:ae:79:
                    4c:cd:50:55:91:2e:07:80:95:4f:f4:65:38:4a:75:
                    a6:ea:aa:f8:34:b4:d9:c3:ad:27:87:8f:7f:1b:e1:
                    7c:b5:90:e4:b6:c3:a9:f8:10:4d:74:6d:4f:0e:54:
                    32:57:21:f5:27:6e:d7:8e:e3:db:d9:20:28:06:96:
                    1a:fc:b5:ca:cd:6c:6f:f6:29:34:90:66:d1:89:83:
                    e3:83:14:75:86:77:94:83:a5:bd:aa:bc:e6:18:22:
                    6b:29:6b:14:52:bb:17:92:28:69:71:00:d4:27:d7:
                    8d:c3:78:35:d9:64:f9:c2:79:76:e0:2b:ab:ef:90:
                    81:ec:f3:ad:1f:99:d3:cb:eb:f4:74:2c:39:51:ab:
                    45:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:0B:BA:A0:2B:F9:FC:65:C8:A4:4E:76:EA:FE:B1:2B:90:69:A7:AC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460/59544e35-0c4d-3fbc-81cb-8a530d41787f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460/d1f886df-6c58-4ea7-9d1f-0659e2324460.crl

            X509v3 Authority Key Identifier:
                keyid:DE:16:51:20:56:83:D6:08:13:E6:42:45:8E:FD:16:70:EE:87:6F:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.44.112.0/20
                  174.32.112.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         93:e8:71:49:24:80:65:e4:ef:05:05:44:1d:1f:6f:6b:d0:c3:
         52:e5:75:ee:6b:39:79:ab:31:2c:fa:4e:02:1a:8f:86:e9:70:
         a9:b0:53:14:54:68:b2:c2:6c:ff:58:f4:98:d0:8f:5c:b2:3c:
         91:fd:f8:4e:4b:de:9d:5d:78:a2:f6:1f:d1:e1:af:3d:48:3a:
         b2:b5:53:af:ea:b3:86:46:de:88:29:40:89:a0:14:49:05:8a:
         f1:0c:c1:4c:13:28:0a:83:d2:07:84:44:d5:bd:2f:80:32:cf:
         2c:58:45:67:35:64:6c:d4:76:e0:b6:b3:b3:7e:03:3a:ce:ea:
         5a:ab:7e:8c:0b:56:0c:93:cd:8c:04:40:67:25:2b:07:f2:86:
         47:92:03:9d:7c:10:a9:d6:c5:4e:a3:3f:b8:d0:55:d7:3c:68:
         fc:b1:27:5f:de:a5:24:c9:be:c3:93:1b:7f:84:81:8b:f5:ff:
         79:f4:79:ba:3a:f7:8d:f6:7a:96:9e:ad:83:c7:c3:3b:11:06:
         8a:86:2a:fb:04:e6:36:f6:87:53:d4:1b:ad:fc:90:68:5b:2e:
         6b:f0:1a:15:6a:5a:4a:33:eb:06:27:ef:e7:b5:94:94:a8:40:
         a2:99:3e:30:8d:74:56:21:19:e3:8e:58:cf:1d:51:78:58:34:
         b1:99:cb:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 10:32:16 2026 by rpki-client