Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/8893c956-1f86-3a62-8e64-c68eb866c935.roa
File:                     8893c956-1f86-3a62-8e64-c68eb866c935.roa (raw, json)
Hash identifier:          YsOmTgP/qhzbmSlRUUw241V+vqF7A2ngvL5M8j8x9Kg=
Subject key identifier:   4C:72:D1:31:E1:29:8C:35:E1:39:9C:C3:CC:05:D5:C5:03:A9:80:AF
Certificate issuer:       /CN=da370214-1d61-48bf-84a0-a60096ccaae7
Certificate serial:       010D0C9F4328584EF44CCD9E35EE7F195DDAF340
Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/8893c956-1f86-3a62-8e64-c68eb866c935.roa
Signing time:             Tue 25 Aug 2026 13:00:12 +0000
ROA not before:           Tue 25 Aug 2026 13:00:12 +0000
ROA not after:            Mon 23 Nov 2026 14:00:12 +0000
asID:                     7029
IP address blocks:        66.253.64.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 27 Aug 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:f4:4c:cd:9e:35:ee:7f:19:5d:da:f3:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7
        Validity
            Not Before: Aug 25 13:00:12 2026 GMT
            Not After : Nov 23 14:00:12 2026 GMT
        Subject: CN=97e371eb-2a97-401d-8cf8-7bdc22fd0531
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:f5:62:54:01:e0:d2:17:92:0f:66:14:e4:97:
                    9b:3c:ed:c1:40:6c:9d:c3:0c:2c:75:26:e3:08:27:
                    fb:b3:bc:14:39:bf:40:90:59:3e:fa:2f:64:ed:57:
                    89:e0:da:37:70:a3:e6:42:d2:21:4f:eb:f1:fb:d5:
                    87:37:bf:c2:51:73:ce:3a:93:ef:ff:21:b7:6b:c0:
                    84:8b:1c:0d:7f:32:0e:6c:05:81:3b:f2:f8:84:1b:
                    f6:49:a6:51:bf:18:1f:51:ec:21:ee:54:a2:34:2f:
                    b6:e4:ca:6c:44:1c:3e:cf:54:1f:96:8c:fc:47:3e:
                    a3:ce:47:61:65:2b:fd:ee:00:88:40:db:24:bd:63:
                    a5:cf:f0:21:a2:64:e0:35:85:d9:79:93:fe:72:9e:
                    72:03:c5:b9:14:f6:e2:47:c0:2c:8d:07:63:09:cf:
                    d1:ab:b3:24:8d:a9:e6:d3:f8:34:31:4b:88:08:6f:
                    cd:81:df:e3:dd:6d:c6:0d:53:71:b7:0d:87:ef:02:
                    75:40:a5:89:39:ed:dc:a0:f0:7a:4c:90:bd:29:c9:
                    39:b7:ee:e1:8c:5c:06:58:1a:ff:83:7e:b6:c6:ba:
                    cc:0f:af:8e:61:c0:00:bb:33:be:ea:3b:46:80:fc:
                    a0:26:a5:76:62:df:cf:a5:4c:c5:36:02:22:21:27:
                    63:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:72:D1:31:E1:29:8C:35:E1:39:9C:C3:CC:05:D5:C5:03:A9:80:AF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/8893c956-1f86-3a62-8e64-c68eb866c935.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl

            X509v3 Authority Key Identifier:
                keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.253.64.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         76:af:a8:1a:d7:b6:70:97:fc:50:2d:0f:2e:ca:f7:58:e4:33:
         a3:36:2a:cd:00:95:05:b9:58:7e:f9:2b:0f:bf:62:70:b3:7c:
         1c:b6:9d:dd:08:2c:7c:5c:10:72:d4:23:4f:1c:38:0c:a2:44:
         cc:48:2a:c2:40:d4:aa:c6:4d:0a:7d:36:34:94:37:b8:5c:c4:
         63:17:6d:04:8e:cd:a5:5e:ec:17:c2:a4:97:46:e6:6e:4b:8d:
         1b:6f:d3:ef:f8:2e:51:8f:cb:df:0a:c0:95:bd:79:ad:bf:d8:
         f5:36:d8:af:75:66:2d:17:26:ed:a9:dc:a4:aa:71:c3:e3:cd:
         51:a3:d7:d3:a7:01:c7:2f:5f:20:18:ba:30:2d:55:8a:c9:4b:
         9e:ab:7e:61:3f:b0:80:9b:4a:cf:24:0a:66:cd:1f:9f:cd:5d:
         1a:81:47:12:03:b4:b4:66:d3:37:07:de:2d:07:61:2c:96:44:
         d8:98:a6:6a:21:e4:a0:6e:be:ab:16:fc:0e:6c:64:fc:25:f8:
         16:72:c3:f3:61:30:c1:cf:63:17:3d:be:41:78:61:00:81:c0:
         1e:c8:a1:46:b3:80:ae:68:57:c9:f1:30:3f:dc:05:39:be:f0:
         81:e5:99:fd:52:94:77:86:b7:09:5e:8b:8c:5a:94:bc:b8:f2:
         ec:92:02:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 26 05:08:31 2026 by rpki-client