Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/677759b4-a247-47ea-badb-bb809bc80a31/7d668e5e-3e73-34f9-b551-97a9f85ddc54.roa
File:                     7d668e5e-3e73-34f9-b551-97a9f85ddc54.roa (raw, json)
Hash identifier:          YZQk/2t8hMXyWwwL0t1y7iehMLQfW4xpURCWDIZQw4I=
Subject key identifier:   03:A2:BA:18:0A:E6:28:5A:E3:6F:85:7A:EF:FB:D8:63:A0:C6:04:7E
Certificate issuer:       /CN=677759b4-a247-47ea-badb-bb809bc80a31
Certificate serial:       010D0C9F4328584E5E7A0660C6CF9C510976D280
Authority key identifier: 49:80:EC:5F:15:BA:62:65:1C:20:86:3E:26:3C:53:9A:71:C9:3A:2C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/677759b4-a247-47ea-badb-bb809bc80a31.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/677759b4-a247-47ea-badb-bb809bc80a31/7d668e5e-3e73-34f9-b551-97a9f85ddc54.roa
Signing time:             Thu 02 Jul 2026 21:00:12 +0000
ROA not before:           Thu 02 Jul 2026 21:00:12 +0000
ROA not after:            Wed 30 Sep 2026 21:00:12 +0000
asID:                     14955
IP address blocks:        66.35.107.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/677759b4-a247-47ea-badb-bb809bc80a31/677759b4-a247-47ea-badb-bb809bc80a31.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/677759b4-a247-47ea-badb-bb809bc80a31/677759b4-a247-47ea-badb-bb809bc80a31.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/677759b4-a247-47ea-badb-bb809bc80a31.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 10 Jul 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:5e:7a:06:60:c6:cf:9c:51:09:76:d2:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=677759b4-a247-47ea-badb-bb809bc80a31
        Validity
            Not Before: Jul  2 21:00:12 2026 GMT
            Not After : Sep 30 21:00:12 2026 GMT
        Subject: CN=6c2ed518-4fe0-47d0-b30e-951ec27c9dab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:d2:d0:4b:d0:af:10:2a:57:2d:e0:7d:c0:01:
                    3d:96:2c:45:f9:c7:b8:94:48:b8:9f:8b:e9:5f:0f:
                    1f:b2:6d:a6:bd:8d:f0:e4:d3:44:83:f4:dd:8d:33:
                    d7:7b:31:58:7e:3d:03:8f:b9:07:23:3d:4d:42:44:
                    d1:84:ca:f9:09:65:34:7c:40:68:40:bb:d5:d8:0d:
                    82:cc:00:02:06:05:6e:64:1a:fc:b5:df:2c:79:be:
                    21:7f:07:06:43:41:a6:90:d2:7c:5c:2a:7b:ec:f7:
                    12:5b:63:f1:92:78:46:98:4d:08:44:51:50:d4:c5:
                    35:2b:db:e0:21:4d:91:f8:c4:c7:b1:dc:83:9a:48:
                    fd:81:84:32:56:32:af:19:7c:3a:cf:0c:1e:16:77:
                    ac:16:c0:f1:d3:eb:03:d7:dd:56:52:3b:3e:11:7a:
                    f1:1b:35:13:e9:81:aa:e7:32:66:99:fa:04:4b:10:
                    29:b2:dc:3b:95:f1:00:ee:7f:3e:a1:5b:69:62:e4:
                    1c:fe:62:87:7d:ff:45:1d:48:80:2f:39:af:65:c1:
                    7b:01:a9:e2:e3:db:c9:61:2f:54:40:22:9e:3c:0e:
                    f3:1b:01:98:32:a4:0f:cf:b0:54:cb:43:7a:c4:3a:
                    ab:14:fe:2d:35:6a:68:7d:5c:34:a9:9c:98:70:ca:
                    d7:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:A2:BA:18:0A:E6:28:5A:E3:6F:85:7A:EF:FB:D8:63:A0:C6:04:7E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/677759b4-a247-47ea-badb-bb809bc80a31/7d668e5e-3e73-34f9-b551-97a9f85ddc54.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/677759b4-a247-47ea-badb-bb809bc80a31/677759b4-a247-47ea-badb-bb809bc80a31.crl

            X509v3 Authority Key Identifier:
                keyid:49:80:EC:5F:15:BA:62:65:1C:20:86:3E:26:3C:53:9A:71:C9:3A:2C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/677759b4-a247-47ea-badb-bb809bc80a31.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.35.107.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2a:10:ac:e1:72:8d:2d:1c:19:97:6b:02:60:85:23:90:1b:28:
         3e:31:d1:b7:91:e2:e5:80:a6:8e:16:fc:9b:4c:3e:e9:98:36:
         81:b6:ba:c3:98:6a:69:ab:29:0b:66:56:9e:45:51:2a:27:fe:
         a8:42:5e:92:88:f2:27:1a:4f:2f:f1:2b:d7:5b:18:a9:f6:48:
         f5:d7:87:2a:b6:77:45:c9:84:b2:2a:7a:8d:12:f6:de:1b:57:
         05:c6:1f:66:ca:86:66:38:5e:77:59:68:c9:c1:a1:b0:5c:25:
         94:cf:c1:b6:f4:8d:54:1b:06:13:5e:61:5f:cc:24:d2:cf:af:
         e6:10:37:8e:da:8e:6a:b2:3f:1b:a9:60:f8:59:e8:de:d0:bc:
         80:99:3e:4b:60:a5:8f:cd:a1:be:03:7d:92:37:a1:67:9e:22:
         ee:b3:cb:d0:0e:fc:62:6a:f8:c5:15:09:4a:4c:4c:66:4e:3d:
         e7:e0:8e:18:6e:e9:90:6d:49:4c:b9:70:9f:27:44:5b:a8:6f:
         d1:a7:a5:aa:b3:ca:6b:07:ae:07:7c:9a:64:0b:8e:3c:eb:3a:
         a0:43:d8:23:71:39:8e:9f:9e:f6:b4:7e:37:36:9a:83:92:f5:
         59:75:38:8b:9b:d7:7c:08:56:e6:90:4d:34:9e:35:d4:e8:c2:
         5c:cb:d4:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 9 21:02:48 2026 by rpki-client