Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/09e8ec9f-45c9-4103-ba8f-29090f373418/8434dd9a-2274-307b-b4f4-7f0820e4b365.roa
File:                     8434dd9a-2274-307b-b4f4-7f0820e4b365.roa (raw, json)
Hash identifier:          WJA1hpx5WSLbx6h0iEDFtRJTRoyqRYodRRNNcnlNumI=
Subject key identifier:   A6:EE:63:56:C6:11:33:9F:4B:ED:F3:DD:BE:F1:A5:EF:23:CD:DF:7F
Certificate issuer:       /CN=09e8ec9f-45c9-4103-ba8f-29090f373418
Certificate serial:       010D0C9F4328584E2F045733082F6022F95E2240
Authority key identifier: E2:27:7F:0C:84:E8:96:6D:F3:2D:41:64:5F:34:C4:A8:7D:B9:BA:10
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/09e8ec9f-45c9-4103-ba8f-29090f373418.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/09e8ec9f-45c9-4103-ba8f-29090f373418/8434dd9a-2274-307b-b4f4-7f0820e4b365.roa
Signing time:             Mon 15 Jun 2026 21:00:12 +0000
ROA not before:           Mon 15 Jun 2026 21:00:12 +0000
ROA not after:            Sun 13 Sep 2026 21:00:12 +0000
asID:                     7341
IP address blocks:        66.211.192.0/18 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/09e8ec9f-45c9-4103-ba8f-29090f373418/09e8ec9f-45c9-4103-ba8f-29090f373418.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/09e8ec9f-45c9-4103-ba8f-29090f373418/09e8ec9f-45c9-4103-ba8f-29090f373418.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/09e8ec9f-45c9-4103-ba8f-29090f373418.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 14 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:2f:04:57:33:08:2f:60:22:f9:5e:22:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=09e8ec9f-45c9-4103-ba8f-29090f373418
        Validity
            Not Before: Jun 15 21:00:12 2026 GMT
            Not After : Sep 13 21:00:12 2026 GMT
        Subject: CN=56a83951-3231-4c63-a5a0-91d424df2d1a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:7a:10:da:12:e3:28:dd:75:9a:ff:92:70:24:
                    8a:35:a3:1f:5c:57:b9:26:50:78:68:ca:6e:86:ed:
                    7c:f6:26:ec:c5:9a:da:cf:25:7e:9a:58:c9:c7:69:
                    4e:45:30:70:4b:f8:89:0f:39:32:67:14:df:b3:6a:
                    08:38:55:87:c5:8b:6f:b1:13:d3:56:6c:58:c0:d4:
                    3f:a1:03:cd:4d:67:44:41:2c:b3:48:56:11:4c:d5:
                    e1:89:91:a0:30:d7:32:9a:92:9b:7a:7a:2c:66:ae:
                    36:ad:58:10:53:f7:4d:1d:4f:98:a3:51:a3:53:de:
                    6f:3d:4e:4d:80:50:bd:3f:e4:07:83:a9:a0:0a:af:
                    c8:d4:52:da:fd:0b:10:35:00:fd:ce:b0:2a:3e:a8:
                    7b:84:64:d0:c6:8b:87:ce:1d:7b:78:2f:70:5c:87:
                    92:81:29:e8:c9:33:61:df:2f:8f:81:7b:85:4a:e0:
                    d6:ca:9e:6f:8e:1a:24:59:34:32:ce:87:9a:c4:72:
                    3b:3d:e1:e9:e0:99:2e:65:bb:ce:9e:84:06:b1:2a:
                    6c:04:d8:d7:d5:6b:7b:ec:82:ed:7b:01:0a:7d:b1:
                    c2:b2:51:89:59:aa:9e:2a:50:b7:fb:03:2f:f9:70:
                    25:be:0f:19:52:b2:e1:dd:cf:e3:b9:9f:6b:b7:7c:
                    66:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:EE:63:56:C6:11:33:9F:4B:ED:F3:DD:BE:F1:A5:EF:23:CD:DF:7F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/09e8ec9f-45c9-4103-ba8f-29090f373418/8434dd9a-2274-307b-b4f4-7f0820e4b365.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/09e8ec9f-45c9-4103-ba8f-29090f373418/09e8ec9f-45c9-4103-ba8f-29090f373418.crl

            X509v3 Authority Key Identifier:
                keyid:E2:27:7F:0C:84:E8:96:6D:F3:2D:41:64:5F:34:C4:A8:7D:B9:BA:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/09e8ec9f-45c9-4103-ba8f-29090f373418.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.211.192.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9b:fd:6c:b9:fd:c2:5f:57:50:79:97:15:c1:eb:8c:02:8b:66:
         bb:61:75:0d:c6:79:41:38:e9:1b:95:95:9a:8a:d0:71:2f:53:
         2a:15:21:e4:3d:79:7d:d4:1b:15:8f:34:ef:80:9a:f4:61:82:
         c5:5a:91:35:f8:a2:68:cd:b2:55:7e:ba:62:e3:63:c4:f7:df:
         3b:93:0e:2c:65:7a:70:23:fe:9a:be:1e:8b:3c:fe:c5:3e:ad:
         6b:6e:69:d2:83:9a:b6:0d:e9:56:43:4b:a8:b0:f1:31:81:35:
         e1:77:fa:c3:13:48:f9:d9:49:4b:3c:60:8e:d6:f8:3e:e4:ce:
         6c:17:0c:8f:fc:74:af:86:72:4a:4c:f4:76:bf:40:ac:0c:d3:
         46:40:d7:da:57:5d:37:84:2c:c1:22:a7:75:b8:fb:ed:c6:25:
         85:5e:4c:dc:03:b8:d8:14:cd:0a:d9:32:36:e9:03:e1:9c:ed:
         da:df:a1:be:26:f8:10:63:29:90:5a:e4:44:08:a8:0c:b5:cc:
         2b:cf:3b:19:85:f2:4d:87:99:d2:20:3c:e2:95:40:53:5e:44:
         db:6e:c8:6d:e2:bf:8e:4d:33:dc:b7:c2:86:0b:24:ce:59:db:
         f0:6e:02:e1:2e:9f:d9:b6:57:1c:ff:0d:1a:ca:9d:e6:97:1c:
         c8:d6:ab:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 12 23:52:59 2026 by rpki-client