Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/e8c8a160-8b52-3fb0-abf9-0871a2b785ac.roa
File:                     e8c8a160-8b52-3fb0-abf9-0871a2b785ac.roa (raw, json)
Hash identifier:          mln7s/3VIiMMdgqUfwzhBx7uW+Cf62bmdWDY7bZ3Ijc=
Subject key identifier:   4F:E7:FD:16:53:68:82:30:BA:D4:A1:BF:0A:B6:07:25:A1:AE:71:E0
Certificate issuer:       /CN=da370214-1d61-48bf-84a0-a60096ccaae7
Certificate serial:       010D0C9F4328584E6F3EAA2F234C4BA6811EC480
Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/e8c8a160-8b52-3fb0-abf9-0871a2b785ac.roa
Signing time:             Wed 08 Jul 2026 21:00:12 +0000
ROA not before:           Wed 08 Jul 2026 21:00:12 +0000
ROA not after:            Tue 06 Oct 2026 21:00:12 +0000
asID:                     5650
IP address blocks:        66.92.100.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Jul 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:6f:3e:aa:2f:23:4c:4b:a6:81:1e:c4:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7
        Validity
            Not Before: Jul  8 21:00:12 2026 GMT
            Not After : Oct  6 21:00:12 2026 GMT
        Subject: CN=dda1bca2-2625-4b41-a3eb-fb11b4f3e0d1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:96:ae:80:35:e4:97:a3:84:7a:ad:aa:86:55:
                    8a:4c:d1:65:2a:f4:f0:52:6c:ae:37:96:eb:2e:34:
                    b5:d5:f4:95:bb:83:9f:af:b3:28:ad:55:b0:a9:49:
                    b5:0e:4a:ef:c8:cb:d2:09:5c:9a:c1:ff:aa:50:ed:
                    b8:29:e8:ec:69:b7:5d:63:29:f4:93:6f:e0:16:cb:
                    43:61:c8:b0:19:d1:6c:6a:ad:ae:a0:fb:30:d9:3b:
                    3e:61:b4:04:87:99:5c:1f:88:58:14:15:a3:82:90:
                    bd:3d:a6:a3:e5:69:7a:8c:d5:c6:b1:55:4c:1c:eb:
                    05:a8:11:29:bc:61:87:c5:91:fd:64:b9:70:f2:03:
                    90:21:75:5e:f8:1c:b6:cb:6c:45:6d:50:f5:5c:6d:
                    0c:44:80:96:8f:25:c2:57:95:ad:e2:b9:69:bd:d5:
                    3a:35:c2:95:c0:d4:1f:9f:a6:30:1b:81:6a:de:d6:
                    47:b1:ea:13:2c:bf:82:59:b4:ca:cf:a5:6e:fa:c0:
                    51:71:31:ce:d7:9d:93:23:f9:ef:e0:a0:f7:9b:39:
                    77:bc:c3:20:9d:a8:50:6d:c0:30:f8:aa:e1:7b:7a:
                    94:05:c5:6c:3d:01:1d:7f:b8:85:e2:a3:81:87:5a:
                    aa:aa:c1:fc:0f:6b:77:d8:5f:00:ba:6f:92:25:5a:
                    23:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:E7:FD:16:53:68:82:30:BA:D4:A1:BF:0A:B6:07:25:A1:AE:71:E0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/e8c8a160-8b52-3fb0-abf9-0871a2b785ac.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl

            X509v3 Authority Key Identifier:
                keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.92.100.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         05:d9:f1:be:c7:cb:24:56:01:a3:7a:7a:13:f6:8b:65:39:54:
         76:70:52:24:cb:48:d6:a9:14:c1:fa:d4:fe:b0:49:04:bc:c9:
         ee:46:a4:fd:7f:96:89:b8:00:cf:0f:06:f3:07:00:8e:9d:ec:
         4f:1a:04:2a:04:ac:03:16:e8:a8:9c:f7:c4:8c:62:95:81:13:
         3b:31:38:0d:5e:21:2e:5d:c8:1a:9e:52:3b:e0:23:83:d9:fd:
         93:9a:9a:e0:82:a8:7c:ba:3c:8d:ec:9c:7d:20:2e:18:70:db:
         b9:de:d4:bb:93:0e:4f:b4:05:38:5c:92:f4:7b:3a:49:bb:1b:
         eb:d1:e7:76:7c:f1:9e:22:2c:e4:5e:3f:23:33:e2:03:fd:be:
         f0:72:47:5f:5b:99:65:c7:4a:77:55:6a:2f:08:a4:6f:8b:d3:
         1b:2e:d0:7a:ed:5c:69:66:a5:17:00:65:6f:09:d1:16:cf:05:
         e1:4c:16:8d:3d:ff:a3:da:97:43:2a:49:fc:5a:69:15:34:56:
         b3:4f:35:e0:47:2f:07:ac:98:5e:5c:13:8d:ae:b1:07:1e:ce:
         7c:6a:56:a7:b9:55:a6:6f:c7:22:0d:60:95:1a:c6:f8:2e:07:
         84:51:a9:21:22:ed:e5:93:79:75:a8:5d:80:c2:3b:52:c8:04:
         7e:f6:90:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 20 13:49:18 2026 by rpki-client