Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/11111c75-ef67-41bd-b074-4c401bf74ccd/a391c252-f605-312a-8113-99fd2578cecf.roa
File:                     a391c252-f605-312a-8113-99fd2578cecf.roa (raw, json)
Hash identifier:          /ZU3sGwmhxZovMlliL7Y6W0r86y2d7+eB6CRixlIEZ8=
Subject key identifier:   A8:30:60:C9:82:0E:52:81:C6:D3:76:82:12:BA:3C:E7:EA:96:67:28
Certificate issuer:       /CN=11111c75-ef67-41bd-b074-4c401bf74ccd
Certificate serial:       010D0C9F4328584E54B490FFD05682DCB4AFC340
Authority key identifier: 29:B8:F7:05:F8:67:60:30:DB:26:B9:66:F3:69:B3:C3:BF:59:90:FE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/11111c75-ef67-41bd-b074-4c401bf74ccd.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/11111c75-ef67-41bd-b074-4c401bf74ccd/a391c252-f605-312a-8113-99fd2578cecf.roa
Signing time:             Mon 29 Jun 2026 09:00:12 +0000
ROA not before:           Mon 29 Jun 2026 09:00:12 +0000
ROA not after:            Sun 27 Sep 2026 09:00:12 +0000
asID:                     8047
IP address blocks:        66.58.128.0/17 maxlen: 17
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/11111c75-ef67-41bd-b074-4c401bf74ccd/11111c75-ef67-41bd-b074-4c401bf74ccd.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/11111c75-ef67-41bd-b074-4c401bf74ccd/11111c75-ef67-41bd-b074-4c401bf74ccd.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/11111c75-ef67-41bd-b074-4c401bf74ccd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 08 Jul 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:54:b4:90:ff:d0:56:82:dc:b4:af:c3:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11111c75-ef67-41bd-b074-4c401bf74ccd
        Validity
            Not Before: Jun 29 09:00:12 2026 GMT
            Not After : Sep 27 09:00:12 2026 GMT
        Subject: CN=fd7eb713-242b-43b1-a1eb-b08f3d951ab8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:d1:82:76:38:be:52:2a:6e:c8:eb:40:bc:31:
                    2b:67:c4:16:85:ff:7b:98:dd:3a:0b:2d:bb:d6:d5:
                    33:5d:f5:45:7f:4c:cd:28:05:a9:d3:dd:4c:9a:10:
                    ad:d0:64:a6:4e:98:07:53:e1:06:4b:04:bf:d3:70:
                    31:0f:11:5c:78:24:0e:ca:37:2d:fc:e0:c5:57:72:
                    92:02:d7:73:0e:f0:0e:01:44:ad:d7:7d:6f:c3:08:
                    94:42:19:f2:d0:a2:92:1e:e0:58:be:89:22:48:19:
                    a0:6d:92:21:40:d2:8d:e2:4a:71:75:4e:43:21:ac:
                    90:2e:5e:83:ac:ed:a6:ba:a3:c1:92:8e:7a:fc:ec:
                    e4:a6:d5:f2:1f:13:a5:e4:e2:0f:77:5e:5e:bf:a9:
                    1e:d9:e9:41:47:c1:44:ca:2b:4c:87:fc:07:65:b2:
                    91:36:b7:02:d8:fc:42:9e:fd:d7:4b:1e:0b:92:60:
                    fc:5d:15:cb:76:5e:ed:1f:43:aa:00:2f:59:fe:fd:
                    af:82:75:a0:05:a2:4f:85:e6:c0:e2:be:b5:22:80:
                    18:51:bf:92:48:3b:f7:b4:0d:c8:fa:b0:7e:03:45:
                    b6:e7:38:89:96:13:d6:4b:9b:c3:9f:10:55:ec:fe:
                    88:ec:22:54:97:d0:87:e9:a0:cc:65:03:6d:9d:68:
                    9b:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:30:60:C9:82:0E:52:81:C6:D3:76:82:12:BA:3C:E7:EA:96:67:28
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/11111c75-ef67-41bd-b074-4c401bf74ccd/a391c252-f605-312a-8113-99fd2578cecf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/11111c75-ef67-41bd-b074-4c401bf74ccd/11111c75-ef67-41bd-b074-4c401bf74ccd.crl

            X509v3 Authority Key Identifier:
                keyid:29:B8:F7:05:F8:67:60:30:DB:26:B9:66:F3:69:B3:C3:BF:59:90:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/11111c75-ef67-41bd-b074-4c401bf74ccd.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.58.128.0/17

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         26:67:c9:fb:50:3d:8c:95:7a:03:f1:01:c8:b0:06:ab:fc:3b:
         2e:57:19:00:41:b3:e2:79:81:88:a4:78:1f:0b:ca:21:3a:8e:
         af:f6:ba:54:cd:25:69:4d:2a:b2:66:e0:62:95:58:67:a5:bc:
         35:d0:21:4a:56:bc:26:8a:9d:44:16:44:1a:6d:f2:25:4e:69:
         de:ac:61:91:9b:69:56:e3:cb:2e:0b:1c:f5:26:d6:b1:89:1c:
         78:88:58:55:a3:cd:87:63:43:00:ca:a8:cf:14:e1:32:41:ea:
         6c:c6:d3:3a:8a:d5:84:21:79:89:f2:30:41:e0:78:64:0b:b6:
         02:23:72:32:60:14:5a:73:3f:75:77:b5:2d:e7:6d:9e:2f:0e:
         ca:10:77:f7:c3:87:44:8a:d6:a7:26:cd:f6:f0:82:10:52:3d:
         b7:12:48:15:e7:2c:a7:48:58:f5:c3:2c:11:81:bc:f8:05:23:
         94:ea:dd:c7:56:da:43:b1:87:ec:6d:af:0e:8d:c9:38:b1:6d:
         b9:d3:9a:a6:a6:8d:17:2f:de:3c:be:de:94:cb:88:31:87:10:
         2d:54:c9:07:fa:3a:c1:62:d6:7b:26:03:bb:64:0f:2e:c8:98:
         4d:89:62:e2:f7:d1:9c:de:64:7f:4b:b5:08:ac:8a:f6:50:b7:
         f9:a6:dd:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 7 20:09:07 2026 by rpki-client