Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/91487946-299c-3373-9354-d92a56279ece.roa
File:                     91487946-299c-3373-9354-d92a56279ece.roa (raw, json)
Hash identifier:          mBVAIxKmM8kVJC6fIsMBiCR8qdAQD+NIaLlaI9+Mltw=
Subject key identifier:   5A:6D:8F:83:81:73:44:6F:DC:2F:9B:0E:E1:80:09:F9:F1:78:E5:4A
Certificate issuer:       /CN=da370214-1d61-48bf-84a0-a60096ccaae7
Certificate serial:       010D0C9F4328584E4C54AFDA1D6373EAEE034200
Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/91487946-299c-3373-9354-d92a56279ece.roa
Signing time:             Fri 26 Jun 2026 09:00:12 +0000
ROA not before:           Fri 26 Jun 2026 09:00:12 +0000
ROA not after:            Thu 24 Sep 2026 09:00:12 +0000
asID:                     30058
IP address blocks:        66.80.22.0/23 maxlen: 23
                          67.102.28.0/23 maxlen: 23
                          67.102.168.0/23 maxlen: 23
                          69.3.148.0/23 maxlen: 23
                          209.101.12.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:4c:54:af:da:1d:63:73:ea:ee:03:42:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7
        Validity
            Not Before: Jun 26 09:00:12 2026 GMT
            Not After : Sep 24 09:00:12 2026 GMT
        Subject: CN=65ddd96e-c1e3-431c-b7a8-d09562a0a0b6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:79:63:1b:23:18:a6:2c:48:a5:fb:58:91:38:
                    be:d6:59:7c:f7:d2:0f:11:fc:ad:b4:76:c9:f3:ed:
                    7f:17:b3:8d:9a:e4:7a:e3:ab:f0:58:6b:f9:09:61:
                    69:78:88:48:49:ee:fd:c5:bb:0e:2b:fc:69:e5:6b:
                    17:18:7d:32:f3:44:25:20:15:d8:64:8d:27:b2:f4:
                    bc:d8:73:ee:8b:62:6c:91:7b:dd:e5:76:59:ac:48:
                    26:ce:e7:97:65:11:de:04:54:b9:ba:3b:a6:66:07:
                    fd:4f:cd:5b:c4:da:45:98:5e:28:30:5a:5d:7f:c3:
                    08:90:f1:ae:09:02:fd:dc:af:fd:1e:78:fd:b8:18:
                    7f:11:9c:bb:5b:6b:0e:d8:41:d2:da:b3:03:c9:a3:
                    d1:8d:67:38:b5:ec:e7:9a:9b:e6:f7:bc:c7:89:8f:
                    92:8d:f3:65:a4:36:79:a5:c0:9f:3e:21:66:d5:60:
                    bb:f5:0b:d7:1f:e8:56:d4:7b:e6:99:f7:14:b9:00:
                    96:4c:5b:60:ae:d2:7c:17:c8:ac:c6:27:8f:46:55:
                    ed:cd:7f:b3:41:93:a2:36:a4:d9:8e:aa:d3:ff:64:
                    43:89:e2:1b:2b:23:18:15:12:4b:e5:91:39:59:af:
                    25:a5:81:e0:20:bd:5b:dd:56:b0:d3:23:cc:81:eb:
                    cb:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:6D:8F:83:81:73:44:6F:DC:2F:9B:0E:E1:80:09:F9:F1:78:E5:4A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/91487946-299c-3373-9354-d92a56279ece.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl

            X509v3 Authority Key Identifier:
                keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.80.22.0/23
                  67.102.28.0/23
                  67.102.168.0/23
                  69.3.148.0/23
                  209.101.12.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         40:17:6e:af:67:a4:44:0d:4a:db:20:31:16:90:49:4e:c4:bd:
         22:55:c4:af:77:03:de:fe:45:56:a6:c1:47:2b:85:d8:dd:e7:
         da:eb:57:30:c7:d0:7d:fc:25:ef:d4:bb:8c:bf:2f:78:80:89:
         5e:24:a4:04:4f:60:1d:06:85:67:38:ef:65:3b:1a:6e:e0:ee:
         c4:9f:30:be:3c:7f:d7:66:d1:1b:70:d1:85:9e:c8:9c:6e:bf:
         2e:0a:20:7d:ce:a7:9e:6b:4b:ce:f1:bd:e3:7b:75:a9:c3:b1:
         01:87:28:94:cf:29:76:64:e2:82:15:00:d5:f2:fc:f2:d1:25:
         8d:8b:dd:81:83:5b:dc:cd:f7:b5:3e:85:56:39:2d:16:47:2a:
         48:8d:e0:0a:0a:e1:cb:1f:cd:ad:d9:58:f7:11:fe:db:4f:dd:
         59:88:a4:72:64:98:d3:47:4f:39:46:5a:1c:9c:5e:7b:e6:8f:
         3f:2c:01:c1:35:fb:ef:8b:1b:47:77:3d:a9:37:49:17:37:8c:
         c6:97:58:da:12:6f:88:f1:ff:ad:59:c1:12:21:fd:07:4a:b0:
         ed:08:16:c6:05:c3:89:e6:21:fc:0e:7e:6f:6e:d2:36:1a:6c:
         22:f4:e7:3c:ee:d1:95:fe:0b:6e:ff:5d:5b:95:fd:59:27:d3:
         bf:00:3c:96
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Tue Jul 21 13:58:22 2026 by rpki-client