Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/0f38b862-0f36-3a7b-a50c-8238d0633b2d.roa
File:                     0f38b862-0f36-3a7b-a50c-8238d0633b2d.roa (raw, json)
Hash identifier:          cLkLAW6vKpupGA31zSuHArvfPeHVnvKvoPLBtDtAn3c=
Subject key identifier:   FC:26:8D:35:0C:9D:88:10:F2:F1:BE:AD:36:0C:43:43:FD:17:AA:0F
Certificate issuer:       /CN=da370214-1d61-48bf-84a0-a60096ccaae7
Certificate serial:       010D0C9F4328584E66DA05B6AC6AEA6BFB9FBA4C
Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/0f38b862-0f36-3a7b-a50c-8238d0633b2d.roa
Signing time:             Sun 05 Jul 2026 21:00:11 +0000
ROA not before:           Sun 05 Jul 2026 21:00:11 +0000
ROA not after:            Sat 03 Oct 2026 21:00:11 +0000
asID:                     6079
IP address blocks:        66.92.240.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:66:da:05:b6:ac:6a:ea:6b:fb:9f:ba:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7
        Validity
            Not Before: Jul  5 21:00:11 2026 GMT
            Not After : Oct  3 21:00:11 2026 GMT
        Subject: CN=75346153-3242-4d71-a02a-de5cdb91d6bf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:63:0c:9f:7e:f0:14:dd:6c:1a:eb:5a:fd:87:
                    db:48:72:82:21:01:83:fe:d7:45:78:5c:ee:9b:26:
                    99:d7:12:f9:99:27:c3:c9:e8:7c:09:99:e6:dc:5f:
                    e4:55:0d:46:0d:d0:40:9a:5f:05:7d:89:50:c9:ec:
                    3e:5c:bc:cf:29:33:2b:95:23:7a:e6:65:02:51:b7:
                    cf:89:8d:ed:f3:7c:10:f9:c8:75:04:0f:52:c0:ec:
                    e3:19:60:8b:a2:ea:02:53:f2:b7:94:92:11:6e:04:
                    b0:d8:8f:27:82:54:4e:4f:78:8f:fc:6c:60:c7:17:
                    b6:34:6f:15:56:da:cf:89:0d:9b:aa:d0:76:64:e2:
                    87:d9:3d:11:75:bb:40:0a:e1:dd:81:a2:3e:08:33:
                    f2:be:e9:76:31:57:9b:c9:7a:f1:d5:4e:b9:27:bc:
                    7d:8f:97:1d:bd:15:fc:a7:58:b7:39:27:15:e0:f9:
                    f5:a0:8a:29:68:30:c5:fe:7c:13:f1:f5:4c:07:21:
                    87:79:89:8d:83:21:6f:85:d3:ab:3b:15:21:37:79:
                    d4:2a:8a:4c:4d:71:34:c5:10:50:ea:a3:46:26:6d:
                    21:7e:ac:8d:99:f7:cc:84:4a:4b:1f:3f:ab:f5:0e:
                    62:44:fa:21:24:bf:d7:84:a6:e1:82:14:c7:ef:9b:
                    d7:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:26:8D:35:0C:9D:88:10:F2:F1:BE:AD:36:0C:43:43:FD:17:AA:0F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/0f38b862-0f36-3a7b-a50c-8238d0633b2d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl

            X509v3 Authority Key Identifier:
                keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.92.240.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         54:18:cd:1d:8d:9f:60:48:9b:e8:e5:43:0c:78:88:e5:98:c8:
         98:1b:61:7f:55:e5:bd:bf:db:04:20:ec:6e:03:16:de:60:4e:
         bc:7e:44:1a:38:7e:e6:81:e0:ef:84:0e:bc:18:82:03:f1:1f:
         75:53:8c:3f:98:ae:bd:d4:3b:22:28:d7:aa:77:db:dd:c0:78:
         c2:c8:69:87:06:0f:3a:11:c6:9d:36:9a:0b:68:57:81:dc:7b:
         12:25:4c:86:d0:4e:cf:88:81:24:12:04:d7:53:2d:9a:63:46:
         50:17:6b:9c:19:be:d1:d9:19:16:9a:0d:b9:45:5d:18:87:a9:
         98:fa:44:55:dc:61:ef:e4:fc:b8:3b:fe:ef:7c:04:cb:24:dd:
         4e:7a:7e:d0:e4:31:c1:6e:74:63:ec:b5:9a:f6:d9:de:93:ef:
         cf:47:7c:7b:5d:71:cb:7c:a6:8e:a0:de:32:92:f0:02:ce:d5:
         b9:0a:74:a5:95:8b:5a:4d:4c:81:6b:fa:b2:eb:fc:13:54:c1:
         6d:66:a7:1f:01:4f:53:c9:17:9f:54:f0:9e:0f:28:4f:d6:d7:
         f0:ce:f5:13:60:58:c7:1a:b2:0f:14:a3:41:3a:df:0c:df:c4:
         31:4d:71:b4:d4:69:06:eb:1d:ba:76:8b:f1:38:f5:c9:ba:a6:
         ae:75:79:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 01:37:12 2026 by rpki-client