Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0538ef3c-e342-4e27-a075-8167bc73c054/2895d8b0-687a-3f45-aed1-2df64ae5fb25.roa
File:                     2895d8b0-687a-3f45-aed1-2df64ae5fb25.roa (raw, json)
Hash identifier:          GRaszcfQkXOk68/K4JaE+ZvAv+WbB1ocfrYkmbXwogs=
Subject key identifier:   07:67:00:30:B4:D3:54:FE:9E:EA:5C:EE:FD:C7:06:6F:97:C0:51:94
Certificate issuer:       /CN=0538ef3c-e342-4e27-a075-8167bc73c054
Certificate serial:       010D0C9F4328584ED001ECDE8C0EA3240EC33C40
Authority key identifier: 3D:AC:2D:38:4E:48:06:E1:5D:2B:A3:84:D6:1D:D6:10:85:CE:33:82
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0538ef3c-e342-4e27-a075-8167bc73c054.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0538ef3c-e342-4e27-a075-8167bc73c054/2895d8b0-687a-3f45-aed1-2df64ae5fb25.roa
Signing time:             Wed 12 Aug 2026 13:00:12 +0000
ROA not before:           Wed 12 Aug 2026 13:00:12 +0000
ROA not after:            Tue 10 Nov 2026 14:00:12 +0000
asID:                     11260
IP address blocks:        66.103.32.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0538ef3c-e342-4e27-a075-8167bc73c054/0538ef3c-e342-4e27-a075-8167bc73c054.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0538ef3c-e342-4e27-a075-8167bc73c054/0538ef3c-e342-4e27-a075-8167bc73c054.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0538ef3c-e342-4e27-a075-8167bc73c054.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:d0:01:ec:de:8c:0e:a3:24:0e:c3:3c:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0538ef3c-e342-4e27-a075-8167bc73c054
        Validity
            Not Before: Aug 12 13:00:12 2026 GMT
            Not After : Nov 10 14:00:12 2026 GMT
        Subject: CN=ddc294a7-995a-489f-a5f4-2ba6a51b5977
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:73:7f:30:8c:ec:9e:c7:5d:2a:93:b9:73:15:
                    dc:f7:eb:f9:3e:e7:87:5f:c6:a7:16:c1:f3:65:4d:
                    0c:c8:f4:78:6c:ee:ed:ac:a5:ef:67:64:1f:46:7a:
                    fe:e5:ec:13:f3:da:ec:60:8a:28:22:09:24:fa:69:
                    d1:27:8d:6a:ab:bf:17:2f:02:b4:e8:14:17:8d:59:
                    a5:84:4a:46:d5:40:59:09:74:5a:b0:b0:ac:37:58:
                    34:28:03:ad:e5:91:99:46:37:92:c4:98:b0:ec:88:
                    14:d5:37:fc:db:a2:c1:1e:43:94:1c:41:e7:4e:78:
                    fe:43:af:d1:e8:0e:61:ec:9c:a7:80:16:ad:f1:57:
                    10:57:b4:ed:fb:1c:61:6a:b9:23:b9:b0:b2:e7:25:
                    f3:bb:5d:8b:90:4a:43:1e:22:81:58:23:28:42:43:
                    0b:fc:de:5e:7d:65:85:2f:b0:df:e1:73:84:6b:25:
                    2b:0f:53:1e:48:6b:24:ea:9e:f7:1e:a9:da:32:de:
                    be:55:95:e8:56:2f:43:5e:da:8a:f2:32:16:8e:57:
                    c7:64:4e:de:1d:d5:75:e4:87:4e:81:ea:cd:27:d5:
                    cb:5b:80:6d:56:93:fd:70:ad:c9:69:54:e5:0e:ef:
                    81:36:e2:6b:0d:ea:72:1d:47:76:1a:a4:de:24:c8:
                    25:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:67:00:30:B4:D3:54:FE:9E:EA:5C:EE:FD:C7:06:6F:97:C0:51:94
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0538ef3c-e342-4e27-a075-8167bc73c054/2895d8b0-687a-3f45-aed1-2df64ae5fb25.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0538ef3c-e342-4e27-a075-8167bc73c054/0538ef3c-e342-4e27-a075-8167bc73c054.crl

            X509v3 Authority Key Identifier:
                keyid:3D:AC:2D:38:4E:48:06:E1:5D:2B:A3:84:D6:1D:D6:10:85:CE:33:82

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0538ef3c-e342-4e27-a075-8167bc73c054.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.103.32.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         64:93:82:da:f2:e1:ad:db:d3:bd:e8:6a:c2:74:b3:45:cf:ea:
         4d:7c:9f:6a:9f:d5:e5:84:8b:aa:90:f3:7d:2c:7d:1b:f4:36:
         b1:34:40:28:2a:14:71:20:01:e7:97:6e:5a:8a:b9:64:fa:de:
         b1:05:3a:74:20:be:58:0f:2f:cb:1a:ac:e2:94:6d:f6:2b:d1:
         c2:fa:18:f2:ae:33:8f:32:f0:76:26:3e:b4:69:a3:27:25:1e:
         7f:b1:54:d4:b6:85:41:d2:c2:2c:c2:a6:29:18:9a:2f:6f:c5:
         34:07:95:d8:80:4c:ea:92:4e:f4:f5:41:98:14:b7:3c:85:58:
         14:aa:96:2a:e6:11:ec:4c:b3:b4:3f:e8:5a:6f:d7:db:25:a5:
         52:e3:03:78:07:d8:42:24:4e:6d:b2:a2:d8:b0:93:1b:7c:bf:
         5a:4b:55:e9:c7:b8:4f:fd:1f:eb:f2:44:d2:24:a1:84:86:d5:
         13:9c:52:b5:12:df:6b:f9:5c:f9:7e:b5:2b:1a:93:db:71:2e:
         f2:4a:95:4b:c0:fc:0f:75:69:8b:e7:a1:32:86:72:a9:df:bf:
         72:cc:70:f1:75:15:e2:39:52:e1:06:9c:f7:e1:ba:22:d4:83:
         63:32:30:1e:55:a5:83:c2:63:08:ee:e4:c4:c5:33:fc:4f:ff:
         dc:6e:3e:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 14:17:00 2026 by rpki-client