Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/283c33f6-719a-4205-86d9-7cf90d013622/78600027-08d3-39c7-9f0c-a2e6862fcb4c.roa
File:                     78600027-08d3-39c7-9f0c-a2e6862fcb4c.roa (raw, json)
Hash identifier:          ANkFIkdiU6D5pQAI9a7RGrhz1elyKINS3RFWoGnM2fQ=
Subject key identifier:   00:6A:F7:0B:52:DD:51:3C:1F:50:C6:C5:C8:F7:49:50:C7:4B:7B:AD
Certificate issuer:       /CN=283c33f6-719a-4205-86d9-7cf90d013622
Certificate serial:       010D0C9F4328584E4F1F31608028A269937D54C0
Authority key identifier: 43:22:70:6A:EE:04:F8:BD:8C:71:3C:F5:43:3D:D6:70:54:A9:D1:0D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/283c33f6-719a-4205-86d9-7cf90d013622.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/283c33f6-719a-4205-86d9-7cf90d013622/78600027-08d3-39c7-9f0c-a2e6862fcb4c.roa
Signing time:             Sat 27 Jun 2026 09:00:12 +0000
ROA not before:           Sat 27 Jun 2026 09:00:12 +0000
ROA not after:            Fri 25 Sep 2026 09:00:12 +0000
asID:                     399992
IP address blocks:        66.118.58.0/24 maxlen: 24
                          2602:f5a0::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/283c33f6-719a-4205-86d9-7cf90d013622/283c33f6-719a-4205-86d9-7cf90d013622.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/283c33f6-719a-4205-86d9-7cf90d013622/283c33f6-719a-4205-86d9-7cf90d013622.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/283c33f6-719a-4205-86d9-7cf90d013622.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 29 Jun 2026 23:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:4f:1f:31:60:80:28:a2:69:93:7d:54:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=283c33f6-719a-4205-86d9-7cf90d013622
        Validity
            Not Before: Jun 27 09:00:12 2026 GMT
            Not After : Sep 25 09:00:12 2026 GMT
        Subject: CN=f2061e68-6a3f-4365-a888-9703b2350e35
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:1b:d9:8c:5f:43:92:95:2a:04:dd:2b:12:e8:
                    3a:8a:08:2d:3d:d9:d7:d7:f5:48:c4:fb:f8:72:d5:
                    f1:e0:a6:19:1b:8a:07:1c:27:4e:3a:59:20:d7:ef:
                    2d:35:43:ca:e9:89:9c:64:4b:3b:1e:13:c3:32:f2:
                    53:e0:f0:3a:95:ff:85:fe:2b:bc:7e:65:e5:37:37:
                    1b:77:e8:47:c9:15:28:de:98:64:ef:f5:e4:9e:ef:
                    d2:21:2b:2a:10:15:58:b9:92:4b:6e:ed:90:79:f8:
                    56:1f:a4:3a:8d:d8:76:55:be:21:fc:77:f8:1b:e3:
                    a1:d7:8f:24:1d:ad:ab:e3:18:54:2e:c5:c2:7a:c4:
                    9d:b8:21:4c:3c:ce:46:19:bb:d1:5a:f5:bc:55:5a:
                    ba:91:6d:fb:5d:38:b4:27:01:34:3b:e4:3b:c3:00:
                    f4:fe:5f:f8:d7:53:21:ec:d9:ac:5d:32:d3:fc:26:
                    f9:46:3b:e3:bd:30:f9:e9:7b:90:b3:70:d4:e3:cf:
                    98:d5:ee:a1:28:02:3c:a5:11:1d:9f:a3:fd:65:c3:
                    59:da:9d:ec:e1:e0:9a:b6:fc:97:b9:5f:7d:c0:5f:
                    db:e7:4e:1f:2b:94:5b:cd:58:f3:1b:4c:eb:52:02:
                    d0:bf:9e:94:c4:d6:3e:dc:59:c1:41:ec:dd:65:db:
                    d4:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:6A:F7:0B:52:DD:51:3C:1F:50:C6:C5:C8:F7:49:50:C7:4B:7B:AD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/283c33f6-719a-4205-86d9-7cf90d013622/78600027-08d3-39c7-9f0c-a2e6862fcb4c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/283c33f6-719a-4205-86d9-7cf90d013622/283c33f6-719a-4205-86d9-7cf90d013622.crl

            X509v3 Authority Key Identifier:
                keyid:43:22:70:6A:EE:04:F8:BD:8C:71:3C:F5:43:3D:D6:70:54:A9:D1:0D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/283c33f6-719a-4205-86d9-7cf90d013622.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.118.58.0/24
                IPv6:
                  2602:f5a0::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         52:2c:0d:39:26:0e:8c:ad:65:8b:a3:b7:b8:61:d3:59:9b:57:
         67:e7:b3:da:1a:22:8e:b8:a5:75:98:37:72:dc:a8:e4:85:0f:
         07:1d:97:6d:a3:ef:fd:81:cb:83:de:3b:4a:05:8c:c6:e0:81:
         86:d1:9f:43:2e:c7:4b:ac:dc:7a:8a:c9:ec:b0:61:6b:c2:7c:
         45:cb:15:e8:c9:2d:aa:2a:a1:30:57:1f:49:9a:03:92:45:3a:
         94:00:e7:96:c5:2f:0e:00:3f:de:80:ff:3f:20:a2:8c:13:0b:
         ec:4d:45:80:42:a1:08:6a:81:2a:bb:e0:17:9a:b8:20:c9:39:
         f5:43:9e:5f:53:c4:d7:eb:25:0b:0d:0a:59:4c:eb:88:01:49:
         81:d6:b4:fc:7c:23:7a:df:cd:f9:f7:2c:da:e7:48:34:13:34:
         6d:8d:f7:c7:06:a4:f5:26:4f:12:a3:ce:69:8f:fa:4b:4c:4d:
         12:2c:7a:9f:48:8c:53:b5:d7:d3:0d:a4:d5:88:03:d9:8e:83:
         09:3c:dd:97:1c:30:1c:8d:41:8b:ec:2a:24:f0:0e:7a:e6:61:
         2b:25:0c:6f:bb:a1:e2:b8:5e:e6:11:40:cd:51:16:da:fe:fa:
         a0:bc:d9:78:c2:ea:b3:be:b0:0a:75:77:8c:34:42:6d:46:f6:
         bf:54:2e:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 28 17:24:50 2026 by rpki-client