Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/1fcf229c-b078-3003-9e60-edcf78e752b2.roa
File:                     1fcf229c-b078-3003-9e60-edcf78e752b2.roa (raw, json)
Hash identifier:          AyWS35UFP+nyuvhZ68ah/9CsCQb3PBwuGOow+bnA4yo=
Subject key identifier:   B9:68:2F:61:A6:42:97:01:C9:C6:07:2A:FD:EE:B2:3C:F0:75:58:2F
Certificate issuer:       /CN=2b88d4e5-7adf-42ce-bae8-7267f62e2698
Certificate serial:       010D0C9F4328584E4C5487229405BB357BE39600
Authority key identifier: E6:E1:E2:8C:2C:AC:79:DA:B0:DE:34:EB:3C:F2:AE:DB:37:41:33:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/1fcf229c-b078-3003-9e60-edcf78e752b2.roa
Signing time:             Fri 26 Jun 2026 09:00:12 +0000
ROA not before:           Fri 26 Jun 2026 09:00:12 +0000
ROA not after:            Thu 24 Sep 2026 09:00:12 +0000
asID:                     14061
IP address blocks:        64.226.64.0/18 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/2b88d4e5-7adf-42ce-bae8-7267f62e2698.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/2b88d4e5-7adf-42ce-bae8-7267f62e2698.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 04 Jul 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:4c:54:87:22:94:05:bb:35:7b:e3:96:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2b88d4e5-7adf-42ce-bae8-7267f62e2698
        Validity
            Not Before: Jun 26 09:00:12 2026 GMT
            Not After : Sep 24 09:00:12 2026 GMT
        Subject: CN=b988e782-a816-4e15-b328-a0c31d332492
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:80:c0:18:18:2b:8e:39:9c:07:06:00:69:2a:
                    13:7f:63:e6:5c:0a:c0:91:c2:86:d4:19:88:5d:e4:
                    d7:91:f4:f6:d0:7e:56:c3:71:48:e4:60:b3:5d:58:
                    02:99:8d:02:7a:55:07:8d:e5:de:26:85:0c:b9:65:
                    8d:4a:09:ba:63:3b:51:7f:42:de:c5:b4:e5:74:56:
                    c2:cb:dd:a0:47:62:ff:ac:de:a0:5b:ac:53:57:86:
                    95:7f:c5:d1:4a:a4:7f:48:27:cd:4a:05:8c:c6:27:
                    86:8c:7d:6b:65:17:e8:73:07:34:a9:cb:48:6d:8e:
                    91:29:d2:d7:1f:2e:00:a6:84:ee:4d:dc:cf:5d:e7:
                    7b:87:e1:66:b3:8d:2e:92:cf:d3:7e:d9:5f:83:ec:
                    a4:9f:06:ce:1d:1b:a0:7c:ea:1a:24:a5:31:58:69:
                    3f:94:31:e1:08:9a:e4:27:db:cd:43:e6:cb:fb:c9:
                    c4:bc:5d:30:39:45:9f:f0:47:d0:95:9f:cd:cc:24:
                    07:83:87:02:bb:0d:0d:21:37:d4:ba:31:a3:fc:ab:
                    17:4b:2e:92:3f:a5:d4:08:1d:26:f3:27:a2:96:1e:
                    30:4a:60:fc:3b:80:9d:76:b6:cd:9d:c2:54:2e:ef:
                    13:6f:df:f2:76:8e:56:ea:ff:cc:04:05:03:d2:cf:
                    6a:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:68:2F:61:A6:42:97:01:C9:C6:07:2A:FD:EE:B2:3C:F0:75:58:2F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/1fcf229c-b078-3003-9e60-edcf78e752b2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/2b88d4e5-7adf-42ce-bae8-7267f62e2698.crl

            X509v3 Authority Key Identifier:
                keyid:E6:E1:E2:8C:2C:AC:79:DA:B0:DE:34:EB:3C:F2:AE:DB:37:41:33:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.226.64.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         97:2e:41:9e:75:6c:a6:2a:1c:ce:f9:64:34:0a:aa:bb:ee:0f:
         56:b9:30:2e:34:69:8c:76:8c:f6:a6:88:69:75:43:d2:bb:ad:
         43:c1:36:04:5e:6d:1b:68:9f:25:fe:a8:23:e8:1d:fb:5f:94:
         29:ae:ee:cf:61:2b:59:24:77:37:76:fd:78:50:1c:ed:b2:b8:
         9f:b4:d1:16:6a:a6:a0:d7:a6:77:91:75:a3:69:cd:7f:c3:68:
         d5:8b:45:63:6f:b2:1e:97:72:62:13:1e:63:e9:e7:bd:02:5c:
         9d:2c:4c:8b:6f:32:08:6f:6b:41:85:31:0e:fa:41:bc:5c:08:
         58:2a:59:69:9b:dd:11:3c:19:c7:07:d6:b8:ab:93:ca:8a:42:
         a8:f1:52:8a:05:02:13:bd:05:92:52:b3:71:fd:0f:95:b6:04:
         31:1a:81:33:02:df:3e:b1:6b:20:23:f5:2b:be:e3:cc:66:87:
         3a:38:a8:b7:ab:4e:53:b6:e0:4d:45:00:08:b0:78:f7:0a:80:
         1a:90:a8:0a:9a:f6:f6:de:15:c5:57:f6:0d:18:e4:fa:a7:00:
         5f:36:d2:45:cd:06:cf:38:13:94:55:a2:a7:1d:62:72:5f:bb:
         f6:9c:79:32:73:f4:7f:57:15:02:e4:ff:06:73:dd:1c:79:ce:
         84:07:c7:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 2 23:11:39 2026 by rpki-client