Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b6f28d10-5739-4e40-a446-935c60d79169/43af431e-7b03-3ec6-be32-6f902fc55c65.roa
File:                     43af431e-7b03-3ec6-be32-6f902fc55c65.roa (raw, json)
Hash identifier:          Z1ztZ3sE3I8X9qqPlSOYpGKom7mt4TcW1o2W258/wsg=
Subject key identifier:   CA:79:61:F2:3D:D8:B0:22:1E:CC:5A:B6:5D:38:32:BA:76:08:F6:F7
Certificate issuer:       /CN=b6f28d10-5739-4e40-a446-935c60d79169
Certificate serial:       010D0C9F4328584EBDDC5B8818A3DB5B7CADF7C0
Authority key identifier: E8:EA:CF:14:D1:FD:74:AB:31:C2:B1:A6:F0:7E:AF:A6:44:84:08:14
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b6f28d10-5739-4e40-a446-935c60d79169.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b6f28d10-5739-4e40-a446-935c60d79169/43af431e-7b03-3ec6-be32-6f902fc55c65.roa
Signing time:             Thu 06 Aug 2026 01:00:12 +0000
ROA not before:           Thu 06 Aug 2026 01:00:12 +0000
ROA not after:            Wed 04 Nov 2026 02:00:12 +0000
asID:                     10865
IP address blocks:        66.129.128.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b6f28d10-5739-4e40-a446-935c60d79169/b6f28d10-5739-4e40-a446-935c60d79169.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b6f28d10-5739-4e40-a446-935c60d79169/b6f28d10-5739-4e40-a446-935c60d79169.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b6f28d10-5739-4e40-a446-935c60d79169.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 14 Aug 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:bd:dc:5b:88:18:a3:db:5b:7c:ad:f7:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b6f28d10-5739-4e40-a446-935c60d79169
        Validity
            Not Before: Aug  6 01:00:12 2026 GMT
            Not After : Nov  4 02:00:12 2026 GMT
        Subject: CN=491ca908-3c53-4ec5-8102-cabf50c5ef76
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:ab:d5:34:93:63:8d:bc:ab:01:b8:38:89:23:
                    33:76:df:b9:dd:7d:ea:e3:b4:92:91:1c:44:e9:d9:
                    f6:93:94:d1:bf:d2:7f:a2:bb:db:75:4a:89:ea:2c:
                    dd:a0:3f:86:37:38:fb:95:26:75:9e:0e:8e:ba:1e:
                    76:24:01:ed:7a:e1:61:2d:da:c7:d6:77:85:6f:c9:
                    0d:ef:d2:5f:13:9f:3d:88:7a:12:80:74:71:43:80:
                    04:97:5b:55:52:cb:57:8f:22:0f:c2:e9:30:8a:79:
                    3c:95:f9:d4:db:a3:cf:f8:84:22:be:10:26:20:30:
                    09:d9:4c:a8:b9:ca:c4:65:52:36:96:32:37:63:dc:
                    bd:e6:ac:19:6b:4f:e6:92:ab:34:55:5d:0e:38:5b:
                    d3:ed:2e:18:6d:82:a0:90:89:1e:cb:83:02:da:21:
                    11:34:90:5c:3d:36:63:83:10:28:6b:37:bf:a8:62:
                    01:5b:ac:72:32:6c:04:12:30:f2:28:73:e7:96:7c:
                    af:fc:0d:54:a8:da:d1:30:65:f3:f6:b3:4b:1a:b5:
                    2c:12:f1:4b:6a:c9:86:07:7c:f3:57:90:6f:4b:5b:
                    0c:dc:6a:f7:f0:7a:ff:22:5c:57:b2:d3:93:9b:92:
                    36:05:ea:53:de:92:49:06:7f:d0:5b:2b:df:e3:cc:
                    01:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:79:61:F2:3D:D8:B0:22:1E:CC:5A:B6:5D:38:32:BA:76:08:F6:F7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b6f28d10-5739-4e40-a446-935c60d79169/43af431e-7b03-3ec6-be32-6f902fc55c65.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b6f28d10-5739-4e40-a446-935c60d79169/b6f28d10-5739-4e40-a446-935c60d79169.crl

            X509v3 Authority Key Identifier:
                keyid:E8:EA:CF:14:D1:FD:74:AB:31:C2:B1:A6:F0:7E:AF:A6:44:84:08:14

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b6f28d10-5739-4e40-a446-935c60d79169.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.129.128.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6a:c1:73:52:da:63:d1:bb:60:5e:ca:96:4c:f8:ad:c4:ce:bf:
         d8:d0:6d:61:a6:aa:08:fe:36:7e:61:4f:37:eb:d8:64:50:26:
         64:5a:57:f6:5a:93:ec:e0:2a:ad:0e:d7:a2:59:5a:96:7a:60:
         65:4b:df:c8:e3:fc:a6:86:87:fc:af:15:c5:39:83:ef:85:57:
         16:0d:59:22:56:a0:23:6d:ec:4f:cb:b1:61:0f:2f:59:df:59:
         40:bd:38:29:11:33:38:6f:bc:2a:79:ee:20:85:81:ea:4f:0d:
         42:4d:e4:94:f3:0d:a1:8c:c8:fb:93:0a:87:ee:49:8c:fa:98:
         b8:f1:47:df:77:71:c6:f1:35:20:d6:92:a2:b4:95:6b:6a:fb:
         8f:c4:db:1f:6d:59:b0:e7:7e:e4:20:0c:96:17:56:61:9b:29:
         77:48:44:8b:f3:7f:f8:5a:97:ae:28:0b:b1:4d:4b:71:95:73:
         42:76:d4:47:c4:cd:a1:b1:96:e8:4e:20:99:59:c7:15:b0:7d:
         ee:36:d7:01:42:76:64:d9:c9:19:df:10:b7:8e:b1:69:16:5d:
         a8:f1:69:d5:0f:03:82:b0:8d:02:ef:03:3c:78:bb:aa:6a:93:
         fc:ea:09:39:18:67:e2:aa:ad:ec:58:2c:79:b4:44:cd:bf:45:
         cf:75:7d:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 13 07:50:08 2026 by rpki-client