Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8273cb72-6b84-4101-82ac-864ed453ca98/4626aeb3-982a-3f09-9a40-a247156533f2.roa
File:                     4626aeb3-982a-3f09-9a40-a247156533f2.roa (raw, json)
Hash identifier:          GXH+ctUzcZn3E2yxuqAQibkli8l8YEpcqBkEgC5nF5U=
Subject key identifier:   E2:73:2B:16:0A:C9:66:02:55:90:65:5E:A4:E9:A5:A0:6A:F4:FD:29
Certificate issuer:       /CN=8273cb72-6b84-4101-82ac-864ed453ca98
Certificate serial:       010D0C9F4328584E7D2F79DF14049C3E1374A900
Authority key identifier: 44:63:D0:04:56:83:39:5E:E5:F5:D3:CD:4D:65:85:FD:7B:C4:95:98
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8273cb72-6b84-4101-82ac-864ed453ca98.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8273cb72-6b84-4101-82ac-864ed453ca98/4626aeb3-982a-3f09-9a40-a247156533f2.roa
Signing time:             Mon 13 Jul 2026 21:00:12 +0000
ROA not before:           Mon 13 Jul 2026 21:00:12 +0000
ROA not after:            Sun 11 Oct 2026 21:00:12 +0000
asID:                     401077
IP address blocks:        66.205.244.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8273cb72-6b84-4101-82ac-864ed453ca98/8273cb72-6b84-4101-82ac-864ed453ca98.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8273cb72-6b84-4101-82ac-864ed453ca98/8273cb72-6b84-4101-82ac-864ed453ca98.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8273cb72-6b84-4101-82ac-864ed453ca98.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:7d:2f:79:df:14:04:9c:3e:13:74:a9:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8273cb72-6b84-4101-82ac-864ed453ca98
        Validity
            Not Before: Jul 13 21:00:12 2026 GMT
            Not After : Oct 11 21:00:12 2026 GMT
        Subject: CN=391c1655-a443-4b55-98a9-8afe0e1684e6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:4b:9c:54:e2:12:32:2a:ec:12:45:0a:1f:b3:
                    49:7a:12:66:0d:e5:d7:e3:26:bc:97:68:59:0d:ff:
                    b5:6d:5c:6f:d6:57:ec:84:da:2c:af:4a:4e:7e:37:
                    a2:2a:81:ab:73:9c:2e:7a:b4:91:3c:a7:44:c6:66:
                    a8:c4:08:b9:70:1b:70:66:c1:24:fa:3e:49:0e:8e:
                    bb:20:bc:f4:2b:8a:b0:67:b9:6b:be:2d:75:19:6d:
                    b9:8a:da:f2:29:f1:44:40:a4:ec:a6:7f:1d:f1:36:
                    5a:ee:46:6e:a2:05:b4:3c:42:47:83:76:ef:ca:33:
                    5e:6b:d3:9b:ce:d9:cc:d5:08:c0:c0:ed:d3:ad:d1:
                    0e:fc:13:69:52:e7:04:39:9c:ab:48:3f:96:fd:b1:
                    35:ac:61:f4:2c:c9:2f:e5:a4:c3:b6:eb:51:4d:2c:
                    ce:a3:e0:9d:9c:77:09:32:9a:6e:de:c9:af:5e:a0:
                    27:f2:ce:92:56:b5:44:00:c1:5b:d2:4f:71:69:40:
                    b1:70:60:13:ed:41:16:1b:ff:e0:36:88:aa:d8:4a:
                    f9:94:e7:69:3c:09:fb:35:93:40:36:4c:5c:c0:5c:
                    60:ea:0a:a7:e1:69:38:55:2d:1f:36:df:86:bd:bd:
                    19:74:27:c9:53:ac:67:e4:1b:10:09:3d:e5:48:85:
                    32:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:73:2B:16:0A:C9:66:02:55:90:65:5E:A4:E9:A5:A0:6A:F4:FD:29
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8273cb72-6b84-4101-82ac-864ed453ca98/4626aeb3-982a-3f09-9a40-a247156533f2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8273cb72-6b84-4101-82ac-864ed453ca98/8273cb72-6b84-4101-82ac-864ed453ca98.crl

            X509v3 Authority Key Identifier:
                keyid:44:63:D0:04:56:83:39:5E:E5:F5:D3:CD:4D:65:85:FD:7B:C4:95:98

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8273cb72-6b84-4101-82ac-864ed453ca98.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.205.244.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         91:83:e7:f5:8a:af:b7:3f:ae:bf:e4:71:6c:f0:50:92:cc:30:
         0e:89:2c:82:66:b8:fd:1d:e6:33:5a:05:ec:66:7f:62:1c:82:
         87:2e:b6:cd:18:46:a6:32:d3:50:da:2f:6e:aa:2f:56:74:6e:
         d0:2c:73:cb:7b:0e:3e:c3:9d:f6:81:93:69:c2:88:2d:91:3b:
         af:42:6c:81:da:68:27:7d:0a:fc:45:ee:4b:73:d7:33:7e:3a:
         64:3d:5a:f5:d9:cf:5a:3f:ea:b7:e6:2d:61:f9:05:15:95:90:
         ab:a7:a6:48:60:db:2c:c1:1b:da:b2:38:b6:e9:78:b5:bf:34:
         a0:2e:db:2f:3b:dc:a8:9c:8c:62:47:c5:41:3f:2a:98:b0:f8:
         08:7c:36:3e:cb:cc:2c:6a:5a:00:87:7e:04:b2:dc:ff:e7:75:
         0a:38:5e:67:73:aa:a4:08:cb:87:52:be:28:3f:53:5b:11:25:
         ee:99:0b:86:e6:56:8e:d5:5b:2d:bb:85:57:0a:de:6a:dd:64:
         50:70:48:5e:74:76:d9:03:b2:36:1f:03:7e:f4:b9:b0:01:09:
         32:b7:fd:f0:96:df:23:6e:e9:d0:e4:26:66:ef:b3:66:70:a2:
         90:68:93:16:96:df:7e:f0:a7:59:4e:a7:4d:09:b6:98:58:32:
         7e:6a:5c:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 20:42:58 2026 by rpki-client