Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8273cb72-6b84-4101-82ac-864ed453ca98/6f5593f0-3c75-3ea7-ae22-865e567da307.roa
File:                     6f5593f0-3c75-3ea7-ae22-865e567da307.roa (raw, json)
Hash identifier:          Ye9kzfNxp4WiqepSFUyB5uDk0bQzunL2oDhcZTcbaXo=
Subject key identifier:   C6:6C:09:72:C3:D6:70:BD:7B:F7:D3:BE:C4:19:2E:B4:43:A9:AC:D6
Certificate issuer:       /CN=8273cb72-6b84-4101-82ac-864ed453ca98
Certificate serial:       010D0C9F4328584E7A65064B748EF90272F81650
Authority key identifier: 44:63:D0:04:56:83:39:5E:E5:F5:D3:CD:4D:65:85:FD:7B:C4:95:98
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8273cb72-6b84-4101-82ac-864ed453ca98.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8273cb72-6b84-4101-82ac-864ed453ca98/6f5593f0-3c75-3ea7-ae22-865e567da307.roa
Signing time:             Sun 12 Jul 2026 21:00:13 +0000
ROA not before:           Sun 12 Jul 2026 21:00:13 +0000
ROA not after:            Sat 10 Oct 2026 21:00:13 +0000
asID:                     62935
IP address blocks:        66.205.244.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8273cb72-6b84-4101-82ac-864ed453ca98/8273cb72-6b84-4101-82ac-864ed453ca98.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8273cb72-6b84-4101-82ac-864ed453ca98/8273cb72-6b84-4101-82ac-864ed453ca98.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8273cb72-6b84-4101-82ac-864ed453ca98.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:7a:65:06:4b:74:8e:f9:02:72:f8:16:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8273cb72-6b84-4101-82ac-864ed453ca98
        Validity
            Not Before: Jul 12 21:00:13 2026 GMT
            Not After : Oct 10 21:00:13 2026 GMT
        Subject: CN=e98337f0-1feb-439b-8be2-5a5b27717663
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:8a:59:ff:57:b6:4a:b9:e4:49:6f:4c:cc:aa:
                    20:19:db:3a:4c:b3:2e:0c:18:a2:ea:e1:5c:44:da:
                    8d:61:b0:4e:31:af:b5:f7:2a:3a:66:4d:3d:df:d7:
                    11:3f:4d:7e:4c:91:b1:4d:c1:e5:4c:8a:b7:98:5a:
                    c0:c3:bd:5d:6b:96:b4:26:f6:b8:8c:4f:5b:bb:82:
                    31:cf:56:09:db:1b:8b:6c:3d:67:35:dc:63:e0:02:
                    c3:9b:81:54:f0:56:2f:7f:25:83:0c:0e:ac:35:f9:
                    dc:85:ed:b9:95:03:30:4f:bf:5d:df:5c:c1:bd:20:
                    73:0d:e8:f5:ff:a4:dd:d2:cc:00:99:e7:78:68:6a:
                    4f:c3:a0:59:1e:a0:39:e4:6b:d4:d7:a7:73:fa:13:
                    91:ff:1c:bd:5a:a0:7a:44:4a:5e:73:b5:a8:2e:39:
                    b6:db:8b:e9:42:2d:46:b0:44:9d:d6:b4:1d:dc:31:
                    43:fd:bd:49:97:00:ee:1f:0e:c9:d3:9b:03:6d:d4:
                    5d:4a:b3:93:3b:b7:59:8b:25:7a:87:e4:52:2f:f4:
                    25:e1:65:ac:11:68:c9:0c:73:7c:f3:d2:25:64:ca:
                    a4:78:73:bc:99:fe:44:d4:74:82:a5:87:d0:28:40:
                    17:43:41:19:25:7e:55:79:c2:d2:a9:e8:ed:71:68:
                    fd:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:6C:09:72:C3:D6:70:BD:7B:F7:D3:BE:C4:19:2E:B4:43:A9:AC:D6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8273cb72-6b84-4101-82ac-864ed453ca98/6f5593f0-3c75-3ea7-ae22-865e567da307.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8273cb72-6b84-4101-82ac-864ed453ca98/8273cb72-6b84-4101-82ac-864ed453ca98.crl

            X509v3 Authority Key Identifier:
                keyid:44:63:D0:04:56:83:39:5E:E5:F5:D3:CD:4D:65:85:FD:7B:C4:95:98

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8273cb72-6b84-4101-82ac-864ed453ca98.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.205.244.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         41:59:a9:4b:0a:97:a2:c0:5a:a7:c1:f1:f8:2f:da:d1:68:b2:
         81:31:b8:03:38:c4:8f:ac:4c:31:f3:c7:05:61:1d:2f:c8:bd:
         7f:fa:7d:ad:f6:ab:da:45:69:b8:ee:91:07:a9:3d:7a:94:ec:
         d6:c7:d8:0f:b6:da:4d:7e:a5:52:e0:6f:19:c4:02:01:26:d4:
         95:bf:63:bb:68:ef:e5:d5:06:11:22:2d:ac:70:68:ff:51:56:
         ae:b5:91:26:e3:41:d4:32:e2:92:93:aa:f3:3f:6a:84:fe:00:
         51:2e:fc:35:37:59:d0:d7:86:ed:78:be:df:70:19:60:d9:81:
         0d:99:a6:06:0f:5c:f1:e5:85:dc:6d:e9:e3:65:b9:e3:41:96:
         9a:84:e5:75:47:6c:91:17:bf:b1:71:ea:c6:dc:29:bf:21:e8:
         f4:2d:24:e8:be:5d:90:e0:c7:32:61:37:d3:8f:54:a3:42:ca:
         5a:cb:42:a3:48:d8:15:c0:9c:55:0c:76:02:f9:33:5f:04:eb:
         89:38:b7:7f:ad:7d:2d:7f:b4:96:11:83:df:cf:af:70:75:b0:
         90:26:4f:05:40:3d:14:25:94:14:88:77:ca:b4:91:73:8d:a0:
         3b:35:83:a0:2d:03:24:19:ab:b9:40:b7:3d:0c:55:e5:3f:f1:
         dd:1e:9a:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 20:42:15 2026 by rpki-client