Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/85faca83-186c-473a-88cc-290a53538b08/669c2b40-1aaa-3262-8b3d-35880181fecc.roa
File:                     669c2b40-1aaa-3262-8b3d-35880181fecc.roa (raw, json)
Hash identifier:          HjresQ6YpvED9TK/4ZJaiOOglo811frn9sxvE05JDfI=
Subject key identifier:   1E:BE:0B:96:F5:92:58:79:7B:DA:56:CF:B1:2D:2D:E5:E0:4C:0F:20
Certificate issuer:       /CN=85faca83-186c-473a-88cc-290a53538b08
Certificate serial:       010D0C9F4328584E6B0A07DFBB2F0F0E878DD500
Authority key identifier: 2B:06:F7:85:C5:E3:D4:4A:F0:DA:07:82:22:97:1E:1F:40:6D:99:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/85faca83-186c-473a-88cc-290a53538b08.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/85faca83-186c-473a-88cc-290a53538b08/669c2b40-1aaa-3262-8b3d-35880181fecc.roa
Signing time:             Tue 07 Jul 2026 09:00:12 +0000
ROA not before:           Tue 07 Jul 2026 09:00:12 +0000
ROA not after:            Mon 05 Oct 2026 09:00:12 +0000
asID:                     20295
IP address blocks:        199.6.32.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/85faca83-186c-473a-88cc-290a53538b08/85faca83-186c-473a-88cc-290a53538b08.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/85faca83-186c-473a-88cc-290a53538b08/85faca83-186c-473a-88cc-290a53538b08.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/85faca83-186c-473a-88cc-290a53538b08.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 14 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:6b:0a:07:df:bb:2f:0f:0e:87:8d:d5:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=85faca83-186c-473a-88cc-290a53538b08
        Validity
            Not Before: Jul  7 09:00:12 2026 GMT
            Not After : Oct  5 09:00:12 2026 GMT
        Subject: CN=355413e8-25da-4334-934d-f2593cce300f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:ae:ce:21:62:dc:3f:d3:c1:c4:42:55:c4:f5:
                    5c:68:bb:9f:38:b4:8a:45:cd:f6:4f:0a:94:df:49:
                    f7:1b:73:91:a9:cb:92:6c:3f:f0:7b:7b:e2:f5:dc:
                    15:a7:4f:48:a9:62:ab:60:73:2d:25:0c:30:a9:5d:
                    18:7c:b4:dc:9b:57:7b:86:27:0a:61:c1:c7:26:f6:
                    04:bb:10:8a:07:9d:e2:13:0f:3e:89:23:1b:7b:a6:
                    b4:2e:4e:49:52:75:e8:ad:dc:b1:1b:37:3c:0d:44:
                    6a:c4:3d:87:61:18:68:14:17:a9:0a:b6:67:73:f1:
                    87:46:91:a6:ea:18:4c:41:21:56:4a:d6:03:5b:25:
                    0c:eb:70:02:29:f7:1a:df:ba:be:37:2b:27:c6:63:
                    40:ae:d5:ba:0d:ce:80:d6:d5:21:3f:38:89:01:33:
                    1d:73:49:82:97:7b:d3:9d:1f:2b:2b:02:2a:91:51:
                    58:0c:5f:b8:30:ff:bf:06:41:df:b2:f0:24:d3:8a:
                    5b:21:64:5f:6a:3a:ef:aa:54:ad:60:41:ba:e7:53:
                    cc:8f:4b:c1:7e:22:35:71:9f:f5:99:bc:78:76:2a:
                    f4:db:19:c0:c7:26:d5:f3:8a:67:ed:23:41:be:61:
                    55:c4:e4:fd:a2:04:a7:a4:f5:5e:54:ef:92:37:66:
                    bb:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:BE:0B:96:F5:92:58:79:7B:DA:56:CF:B1:2D:2D:E5:E0:4C:0F:20
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/85faca83-186c-473a-88cc-290a53538b08/669c2b40-1aaa-3262-8b3d-35880181fecc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/85faca83-186c-473a-88cc-290a53538b08/85faca83-186c-473a-88cc-290a53538b08.crl

            X509v3 Authority Key Identifier:
                keyid:2B:06:F7:85:C5:E3:D4:4A:F0:DA:07:82:22:97:1E:1F:40:6D:99:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/85faca83-186c-473a-88cc-290a53538b08.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.6.32.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         64:cb:20:88:a9:62:e9:54:6e:c5:1b:bc:1e:30:32:c9:ae:90:
         f3:56:a7:e8:e0:97:36:e6:92:8f:f3:4b:80:51:e0:80:d2:7e:
         ef:a4:69:0e:62:16:6e:8b:e0:64:4d:e0:59:39:dc:6c:d6:c0:
         80:14:7a:35:ac:99:e9:49:fb:d3:b7:73:b9:e4:6f:34:f4:c5:
         16:ff:f1:a6:7f:3c:76:e1:52:32:58:4d:89:a4:8c:8d:7a:88:
         85:ab:bf:4b:47:f1:a9:79:4f:dd:76:42:93:9e:7a:4f:b2:9f:
         b7:aa:42:23:93:de:64:a3:58:05:65:35:0b:6b:78:ac:3c:91:
         bf:05:79:eb:d5:ee:fd:96:dc:b4:e8:b3:2b:0d:f4:81:b8:5e:
         0c:03:b4:47:e3:12:47:fb:7e:ac:ed:0e:02:76:cb:73:fe:de:
         ee:82:a1:a8:3f:b5:1d:f0:b8:66:49:8b:77:6b:f0:9f:31:6b:
         59:13:56:d8:c8:89:88:5f:46:10:aa:dc:1a:a4:ac:8b:5c:ff:
         45:c8:a2:d4:9b:50:f5:b6:b2:d7:52:72:6a:f4:21:ae:1f:f3:
         cc:77:0a:37:f8:1d:23:7a:f3:ae:2f:08:2b:7d:a5:a2:4f:27:
         7b:e5:dd:5d:bc:4d:1b:a3:e2:23:14:78:f3:6e:14:c1:2c:31:
         34:32:9f:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 13 04:17:01 2026 by rpki-client