Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/677759b4-a247-47ea-badb-bb809bc80a31/f582c604-4778-3ee5-9950-9a18aa369d39.roa
File:                     f582c604-4778-3ee5-9950-9a18aa369d39.roa (raw, json)
Hash identifier:          z0OntanxwiOU0jBgDpQZQ2e77LM5qk4qQraaoEJoeLs=
Subject key identifier:   EA:80:9E:8E:DA:D7:57:C8:97:D5:44:DD:62:A0:5C:D7:F6:4A:FC:DB
Certificate issuer:       /CN=677759b4-a247-47ea-badb-bb809bc80a31
Certificate serial:       010D0C9F4328584E5E7A0645260D728F5236C000
Authority key identifier: 49:80:EC:5F:15:BA:62:65:1C:20:86:3E:26:3C:53:9A:71:C9:3A:2C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/677759b4-a247-47ea-badb-bb809bc80a31.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/677759b4-a247-47ea-badb-bb809bc80a31/f582c604-4778-3ee5-9950-9a18aa369d39.roa
Signing time:             Thu 02 Jul 2026 21:00:12 +0000
ROA not before:           Thu 02 Jul 2026 21:00:12 +0000
ROA not after:            Wed 30 Sep 2026 21:00:12 +0000
asID:                     14955
IP address blocks:        66.35.104.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/677759b4-a247-47ea-badb-bb809bc80a31/677759b4-a247-47ea-badb-bb809bc80a31.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/677759b4-a247-47ea-badb-bb809bc80a31/677759b4-a247-47ea-badb-bb809bc80a31.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/677759b4-a247-47ea-badb-bb809bc80a31.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 10 Jul 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:5e:7a:06:45:26:0d:72:8f:52:36:c0:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=677759b4-a247-47ea-badb-bb809bc80a31
        Validity
            Not Before: Jul  2 21:00:12 2026 GMT
            Not After : Sep 30 21:00:12 2026 GMT
        Subject: CN=01abd9cf-932f-481e-a895-4b48fd8db6b5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:63:65:bc:87:9c:d7:ef:fb:8d:a9:d3:52:8f:
                    17:0c:36:07:aa:b2:d5:e7:1c:d5:30:00:1a:e9:d9:
                    95:33:a9:be:5b:05:f8:1f:9c:9a:6d:44:43:27:08:
                    4d:11:d8:52:e7:23:f7:98:6b:66:2d:f8:65:99:f0:
                    77:8e:99:7d:33:21:6b:66:9f:af:8b:63:39:6e:a4:
                    f0:8b:5d:3d:05:e8:53:bb:2e:0f:21:92:45:9d:90:
                    11:78:44:0a:ee:18:91:6d:24:2a:fa:08:4a:93:e6:
                    10:f7:8a:6b:46:e6:ee:97:74:a6:05:fa:17:c4:90:
                    7a:e1:c0:89:49:93:6f:d3:3b:c6:0d:47:49:cd:17:
                    1c:6c:ed:75:a5:9a:8f:f3:7c:10:38:07:3b:c7:59:
                    b0:28:c7:cf:df:2b:a6:ec:eb:2e:b2:ea:08:ee:c4:
                    a3:79:ac:8c:30:3e:f4:d8:d5:25:5b:ab:27:50:81:
                    26:10:ca:57:de:b2:6c:4c:fe:86:e9:bd:87:9f:c0:
                    79:8f:d8:dc:4b:69:f9:5b:c5:8a:94:f2:0e:a8:70:
                    84:43:94:4e:1d:b7:82:fe:db:ca:f4:b3:71:83:fa:
                    99:df:17:4a:86:ef:fe:29:e5:78:fb:6d:cc:14:09:
                    44:d8:b2:e3:79:52:dd:5d:b7:b6:52:81:0c:b2:a8:
                    31:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:80:9E:8E:DA:D7:57:C8:97:D5:44:DD:62:A0:5C:D7:F6:4A:FC:DB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/677759b4-a247-47ea-badb-bb809bc80a31/f582c604-4778-3ee5-9950-9a18aa369d39.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/677759b4-a247-47ea-badb-bb809bc80a31/677759b4-a247-47ea-badb-bb809bc80a31.crl

            X509v3 Authority Key Identifier:
                keyid:49:80:EC:5F:15:BA:62:65:1C:20:86:3E:26:3C:53:9A:71:C9:3A:2C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/677759b4-a247-47ea-badb-bb809bc80a31.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.35.104.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         03:1c:91:e9:58:42:54:d7:b4:b7:0e:6e:38:5d:e2:78:6c:79:
         6c:36:ed:9d:e0:1e:7b:83:b6:db:94:4d:1b:63:aa:6b:a5:65:
         ea:b9:0c:c8:91:e7:d0:98:cf:5b:6d:56:01:44:a1:04:0a:76:
         e2:d8:97:3a:c9:9d:e7:49:4e:70:01:1c:4d:b0:20:b6:70:73:
         d1:a6:8b:53:21:c0:93:0a:28:5e:42:59:13:02:1e:7c:42:7e:
         3f:b6:ef:97:27:c1:3e:12:e2:56:f7:8e:bd:bd:5a:fc:6d:0e:
         3a:65:c9:53:89:35:f5:67:38:e7:47:13:2d:f9:d0:71:27:23:
         fd:5f:ff:9e:a6:c8:9e:bb:44:39:7a:3a:e5:04:63:2b:f6:7c:
         00:c8:bb:a8:de:f2:bb:14:d5:a7:da:52:b2:68:11:5d:54:9f:
         7c:48:07:76:7a:49:72:94:5f:c8:35:71:32:a3:dc:6d:69:c3:
         f7:61:1c:a1:11:50:7e:42:a2:43:2d:10:fb:56:49:42:3e:69:
         63:73:36:58:51:6b:37:9b:1f:40:12:6f:d0:66:d7:f8:a5:a8:
         1d:6c:ba:2d:3e:f1:9a:4f:d1:31:e7:3c:0b:d0:fe:b8:df:6b:
         50:a2:c5:1c:fd:82:e2:24:9f:d1:11:8a:c4:1f:74:9b:93:37:
         83:3b:6d:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 9 21:04:38 2026 by rpki-client