Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/29e011ae-d8d2-38b1-865b-8517b583d666.roa
File:                     29e011ae-d8d2-38b1-865b-8517b583d666.roa (raw, json)
Hash identifier:          Txv0hfhHvshztz1yxZqapKpNCX1hseHmCWfuqStv/m4=
Subject key identifier:   D9:B8:E6:00:AB:DD:29:65:CD:88:FA:6B:93:1A:D2:5B:4E:F3:34:74
Certificate issuer:       /CN=da370214-1d61-48bf-84a0-a60096ccaae7
Certificate serial:       010D0C9F4328584E59FFDDCE13A5C396C7516900
Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/29e011ae-d8d2-38b1-865b-8517b583d666.roa
Signing time:             Wed 01 Jul 2026 06:31:00 +0000
ROA not before:           Wed 01 Jul 2026 06:31:00 +0000
ROA not after:            Tue 29 Sep 2026 06:31:00 +0000
asID:                     401776
IP address blocks:        65.86.196.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 Jul 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:59:ff:dd:ce:13:a5:c3:96:c7:51:69:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7
        Validity
            Not Before: Jul  1 06:31:00 2026 GMT
            Not After : Sep 29 06:31:00 2026 GMT
        Subject: CN=3a1d7689-80db-4846-af15-240fa78fc3b0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:06:26:0b:c2:1a:b8:21:ba:18:f2:7c:da:30:
                    e0:94:d2:a7:f4:11:06:da:2f:c4:41:6b:83:d9:14:
                    da:e1:89:15:32:f9:cc:5d:da:4e:90:0e:d7:c3:dc:
                    f8:2e:46:fd:77:d9:50:db:ac:53:b0:a8:03:59:a6:
                    d1:8c:88:df:86:db:13:7a:c4:d6:35:9c:5b:4a:55:
                    39:4e:aa:35:86:3c:93:d6:36:bb:a4:e1:bc:22:cf:
                    bf:c2:86:c1:73:3a:91:11:1b:84:11:b7:45:d8:c7:
                    a8:90:20:95:b2:f0:28:2e:db:7c:4e:3d:de:c6:32:
                    7c:0d:41:74:26:83:9e:94:db:ac:67:52:5c:43:35:
                    8b:a9:0e:37:c9:8a:8a:b4:06:7b:5c:6a:1f:93:93:
                    29:d9:a9:08:77:8f:4f:d3:67:31:bd:96:31:9b:3f:
                    1c:80:46:a5:45:51:67:06:1c:fb:89:06:ea:75:83:
                    be:d9:e6:00:cb:54:b1:1b:94:29:25:48:20:f0:56:
                    15:e2:3c:85:c0:26:b4:0e:4b:c8:93:30:a9:fe:89:
                    21:89:21:26:b9:20:7d:de:4a:27:7d:9e:31:ec:cc:
                    27:65:25:dc:26:a5:7e:01:99:be:9f:27:1b:6d:14:
                    94:74:8a:06:5d:72:0d:53:1e:7a:c3:45:88:6d:68:
                    69:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:B8:E6:00:AB:DD:29:65:CD:88:FA:6B:93:1A:D2:5B:4E:F3:34:74
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/29e011ae-d8d2-38b1-865b-8517b583d666.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl

            X509v3 Authority Key Identifier:
                keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.86.196.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         07:b7:e3:3f:43:47:9e:29:21:82:32:0b:a0:84:9a:a7:79:2c:
         c8:f7:6d:61:60:ab:8a:1a:34:8e:3b:ab:f0:a2:e3:70:5c:1a:
         ff:3c:d4:6e:d6:05:9d:cb:d0:0e:b0:fb:26:70:42:68:8b:16:
         c0:a0:e0:97:39:b9:3c:1e:48:eb:81:8e:a8:a9:3a:f6:ed:86:
         a8:98:3d:c0:a5:70:71:e4:0c:37:5e:b0:ac:0a:a1:11:df:67:
         6c:fb:81:cc:c0:4e:6d:06:a9:75:56:a7:81:f1:7e:99:00:94:
         f4:31:68:0b:91:cd:52:7e:78:e9:fa:33:a0:a5:de:4a:e6:54:
         8d:c6:d0:42:97:e4:58:4b:43:fd:32:4b:5d:ab:56:f8:4d:2c:
         86:ab:2b:d0:f0:95:99:3b:b8:5f:f5:87:66:fe:00:c6:4c:41:
         ec:22:df:21:ef:40:aa:97:46:61:9d:48:1c:3f:99:c2:f9:6f:
         d4:8c:86:24:56:46:33:b8:ba:f8:5c:f6:28:1f:bc:4a:09:d4:
         fe:35:61:a7:97:77:c9:0c:e0:ad:4f:e1:9d:2a:76:68:4a:1c:
         67:e0:2d:b3:cb:e4:91:49:80:4d:bb:96:45:3b:31:64:28:4f:
         84:71:9b:15:12:7a:46:74:eb:18:14:ff:c9:12:a2:77:a8:29:
         25:86:b4:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 10 13:47:49 2026 by rpki-client