Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/a77b507b-9f8d-3abd-8810-c2eb9de29b14.roa
File:                     a77b507b-9f8d-3abd-8810-c2eb9de29b14.roa (raw, json)
Hash identifier:          Tq4q/IlTd37gvFEzvzGS7cS3BlbnDckmVt5LJluB17o=
Subject key identifier:   09:48:EB:32:A4:E1:EB:F8:52:97:AB:50:EE:21:36:76:F1:F9:AC:9C
Certificate issuer:       /CN=d70d8b7e-aada-4cdc-920d-dda617bdd989
Certificate serial:       010D0C9F4328584E8DA23522A68397566A57BE60
Authority key identifier: 58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/a77b507b-9f8d-3abd-8810-c2eb9de29b14.roa
Signing time:             Sun 19 Jul 2026 18:24:19 +0000
ROA not before:           Sun 19 Jul 2026 18:24:19 +0000
ROA not after:            Sat 17 Oct 2026 18:24:19 +0000
asID:                     54858
IP address blocks:        66.234.192.0/19 maxlen: 29
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Jul 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:8d:a2:35:22:a6:83:97:56:6a:57:be:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d70d8b7e-aada-4cdc-920d-dda617bdd989
        Validity
            Not Before: Jul 19 18:24:19 2026 GMT
            Not After : Oct 17 18:24:19 2026 GMT
        Subject: CN=cf19ca7c-1631-4893-b6b3-3f6f48559297
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:88:12:68:35:40:00:55:a0:d7:81:e2:1f:8b:
                    37:62:d3:f0:af:e2:25:5f:6d:b8:6e:80:a2:d4:77:
                    8f:4a:da:90:48:cf:7a:3e:1c:43:ef:50:01:01:07:
                    16:43:6d:d9:47:66:b4:90:ab:fc:70:bc:07:fb:89:
                    24:13:a2:7b:b9:6c:38:20:80:0a:20:66:1a:f6:ff:
                    31:fe:b0:c2:a8:52:df:02:36:13:0e:09:22:a1:2e:
                    92:71:82:4f:69:3b:5f:28:af:2b:fe:42:d2:12:ee:
                    7c:9c:29:8d:dd:75:9c:75:19:e9:d6:22:41:e2:1a:
                    f5:8d:e8:14:eb:a8:c6:16:9a:70:b7:00:75:7e:82:
                    69:55:cd:2a:6a:3e:d7:f3:38:4f:25:7a:68:f3:97:
                    21:ff:4e:37:80:6d:1d:43:81:a8:13:cf:5f:4b:b0:
                    f5:0b:03:f6:7b:b4:36:c0:a8:50:ab:ca:82:8c:dd:
                    ae:08:33:d1:4b:8e:6a:5e:96:21:0e:ea:f5:0a:aa:
                    3b:3e:62:e4:89:12:e5:6a:f5:a4:c1:1c:ad:ac:f3:
                    d7:3f:73:dc:ab:3d:b3:16:75:e8:86:36:1e:9a:ec:
                    ec:37:38:0b:e3:57:b6:fc:12:3f:bc:96:d7:11:69:
                    8c:7c:0e:63:51:04:91:24:f6:29:fb:93:bc:66:2b:
                    58:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:48:EB:32:A4:E1:EB:F8:52:97:AB:50:EE:21:36:76:F1:F9:AC:9C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/a77b507b-9f8d-3abd-8810-c2eb9de29b14.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl

            X509v3 Authority Key Identifier:
                keyid:58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.234.192.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         37:ae:54:f5:01:63:f0:30:dc:83:8a:66:77:73:b7:28:04:01:
         8e:16:b6:90:4f:12:8a:33:17:f3:72:fb:0a:a9:88:7a:da:43:
         86:dc:af:b3:56:f4:eb:47:fa:bb:c8:f4:46:29:ac:4a:98:01:
         47:7b:98:f0:fb:f7:57:8c:65:22:a3:f8:8d:ee:0d:ed:ac:24:
         30:74:14:0c:cb:58:25:ad:a4:6d:b6:cc:4e:b7:7e:61:90:02:
         a2:b2:1d:0c:d5:40:89:14:9f:7b:6f:c7:49:7d:22:3b:8b:7d:
         29:60:8c:b6:ac:54:d7:71:28:ab:d5:b0:6e:b4:6c:b6:f5:e6:
         23:6b:e3:4c:ef:3a:2a:1c:11:d9:5f:33:2c:f6:f6:3f:d4:24:
         cb:c6:2d:2a:bc:aa:1f:a3:a9:66:5e:e7:bd:64:2c:2d:51:81:
         0b:fd:fa:a4:1a:f9:22:be:5d:4b:c6:c4:7d:ba:8a:99:3a:03:
         3e:2b:fb:ac:b5:a2:7e:2e:f0:de:1c:1e:fa:3a:df:60:a8:21:
         15:15:dc:e9:67:d4:09:46:5c:2f:2e:cd:62:6d:39:21:ab:34:
         c0:e7:1b:69:a9:38:5a:6e:1e:02:ff:e1:b7:85:44:72:d8:31:
         41:0c:19:7c:5d:b0:54:b3:6d:25:d7:88:a3:90:f0:97:43:78:
         39:06:cb:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 22:36:51 2026 by rpki-client