Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/1d5c2bb8-aeba-3465-b827-4a8917af7585.roa
File:                     1d5c2bb8-aeba-3465-b827-4a8917af7585.roa (raw, json)
Hash identifier:          iJNZtI4Eq/Ssnms00vrvw2nqqLraA+2iuoCERIegeGc=
Subject key identifier:   40:DB:E7:38:5F:5A:32:3A:8F:43:E6:59:D1:2C:44:79:69:B8:24:CA
Certificate issuer:       /CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef
Certificate serial:       010D0C9F4328584E8C8A4CA9E68A47E6B8AF7DC0
Authority key identifier: DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/1d5c2bb8-aeba-3465-b827-4a8917af7585.roa
Signing time:             Sun 19 Jul 2026 09:00:11 +0000
ROA not before:           Sun 19 Jul 2026 09:00:11 +0000
ROA not after:            Sat 17 Oct 2026 09:00:11 +0000
asID:                     13576
IP address blocks:        66.115.192.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Jul 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:8c:8a:4c:a9:e6:8a:47:e6:b8:af:7d:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef
        Validity
            Not Before: Jul 19 09:00:11 2026 GMT
            Not After : Oct 17 09:00:11 2026 GMT
        Subject: CN=046159f6-0cec-4d21-9398-1f77f1f78759
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:d4:b0:62:d5:d5:57:a6:76:e0:34:48:3c:e4:
                    05:5b:c0:ac:21:fa:3b:80:4a:d8:ca:7b:1f:31:c3:
                    e8:88:c0:83:ac:db:7b:65:0b:d1:3d:28:23:57:e1:
                    5b:89:cb:53:2c:e6:f2:d6:4b:7e:61:c4:09:cd:d9:
                    e8:0d:ae:c8:d3:12:33:d6:12:a5:8e:76:8f:0b:22:
                    a0:b2:bc:c8:4a:43:e0:3f:da:1b:28:17:99:15:04:
                    86:67:04:66:09:2c:60:51:6f:6b:79:62:2d:36:8c:
                    8d:4f:e3:fd:fc:45:d8:99:68:f3:d6:2f:07:26:90:
                    e9:8f:92:7b:2e:f3:a3:48:10:b0:56:e2:b7:5d:57:
                    5f:3f:cd:b2:0b:08:df:50:22:6c:bf:18:1c:8a:54:
                    70:17:37:b6:5e:8b:fb:1b:e4:78:48:b0:2c:89:65:
                    af:e9:ee:4c:3d:a0:15:43:4b:d6:43:16:9a:3f:45:
                    dc:a8:cc:12:49:bf:f6:24:e0:ca:d7:f0:2c:e6:38:
                    c3:0f:f0:61:3b:6c:f3:9c:78:cb:06:00:2a:3a:28:
                    52:53:7f:83:0b:a1:53:72:ca:51:7f:67:40:59:83:
                    4d:40:63:be:d8:e6:08:61:41:9d:a6:78:28:28:ea:
                    17:28:bb:64:d2:88:d9:6b:3c:d6:48:6d:dd:98:0b:
                    bb:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:DB:E7:38:5F:5A:32:3A:8F:43:E6:59:D1:2C:44:79:69:B8:24:CA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/1d5c2bb8-aeba-3465-b827-4a8917af7585.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.crl

            X509v3 Authority Key Identifier:
                keyid:DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.115.192.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         28:1f:51:0a:f4:5c:80:de:0a:b8:fc:73:64:f8:89:5b:d1:48:
         94:43:53:4a:1e:68:58:9b:ba:e8:9d:6e:2b:cd:85:ed:0a:7c:
         d2:ed:b0:48:f9:cc:12:79:7a:eb:ef:1a:81:52:ae:52:52:a5:
         fb:2e:a9:57:d0:50:72:35:cd:ba:63:2e:7a:26:c2:5f:5f:ca:
         be:1e:99:58:80:ec:cf:53:dc:e3:7a:a3:62:0d:77:06:fb:41:
         b0:1e:cd:bb:40:bd:c8:e5:ce:c6:e0:74:6a:17:0c:ca:72:be:
         43:7f:f6:0f:85:17:4f:6a:7d:59:99:26:91:49:2a:28:3b:29:
         8d:7c:06:b5:a9:01:cf:aa:ec:4a:97:3e:1f:cb:9c:74:f9:2d:
         ae:ef:d8:fd:cb:77:71:79:01:03:01:6a:2b:80:1f:54:1c:ac:
         73:00:11:f1:43:88:09:f5:88:27:f6:ba:b8:0c:56:0f:97:ae:
         ae:48:46:46:43:0f:2a:89:74:72:4c:69:0f:9c:ef:15:70:98:
         00:28:2c:9d:3f:7b:50:99:f7:87:26:6c:02:cb:14:03:92:6e:
         9e:89:b4:bf:c6:1d:8f:c1:ef:c3:0c:00:c3:12:43:aa:ab:52:
         47:29:ff:f6:99:ae:55:df:d2:d7:67:df:d6:ec:25:ee:d4:36:
         02:89:fc:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 22 03:10:10 2026 by rpki-client