Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/69d9da6a-4b11-34af-bc0f-d2f6ab324687.roa
File:                     69d9da6a-4b11-34af-bc0f-d2f6ab324687.roa (raw, json)
Hash identifier:          0nNi9Aj2jOZR5Fqq3O8vrNyqoEXYGmW5usJZfoqaTh8=
Subject key identifier:   A3:17:07:21:9F:06:70:7D:4E:35:D9:40:0F:2F:37:5C:3F:80:CC:18
Certificate issuer:       /CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef
Certificate serial:       010D0C9F4328584E8C8A44B0E543095BEB1B86A0
Authority key identifier: DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/69d9da6a-4b11-34af-bc0f-d2f6ab324687.roa
Signing time:             Sun 19 Jul 2026 09:00:11 +0000
ROA not before:           Sun 19 Jul 2026 09:00:11 +0000
ROA not after:            Sat 17 Oct 2026 09:00:11 +0000
asID:                     395037
IP address blocks:        66.115.199.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Jul 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:8c:8a:44:b0:e5:43:09:5b:eb:1b:86:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef
        Validity
            Not Before: Jul 19 09:00:11 2026 GMT
            Not After : Oct 17 09:00:11 2026 GMT
        Subject: CN=0444a1c9-d38d-41f4-b608-5fcfd8a18a5c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:cd:17:20:5a:9d:9d:49:b5:4f:92:06:ec:5d:
                    47:f9:d8:87:51:5b:36:99:40:72:1e:1c:ea:4c:76:
                    27:7e:49:a2:c1:2d:40:53:06:54:2c:f5:ae:c5:98:
                    12:80:84:12:20:a6:10:5a:4d:57:b4:11:f9:df:99:
                    03:f2:6d:d9:24:9d:d4:d6:82:13:dc:82:98:c8:f7:
                    7c:10:bf:b4:f6:53:ce:d6:5c:66:61:2e:2b:5e:d6:
                    2c:a9:db:32:b1:71:39:c7:12:d4:91:d9:10:5c:82:
                    4c:ee:1b:de:00:9d:14:49:4d:27:97:d8:31:e7:07:
                    61:dc:4d:22:5b:74:36:02:ed:dd:69:08:86:a4:2f:
                    08:53:77:6f:96:2f:a1:f1:4d:e1:97:dc:b2:96:8d:
                    b7:f3:d3:37:bf:b7:6d:9b:00:97:df:4a:12:55:6b:
                    eb:01:a3:a6:08:01:ca:5b:af:8a:2b:a7:1f:07:8c:
                    7b:45:76:f9:97:37:86:b6:6f:ba:f9:f2:d7:b8:0d:
                    50:b2:d1:f1:e4:5a:fc:71:4d:8e:3f:e8:7b:73:4f:
                    bc:f8:eb:dc:9d:90:6d:ad:27:43:ff:78:79:b7:40:
                    89:5a:48:3f:65:5f:b0:cf:e5:7e:c6:1c:d7:dc:9c:
                    ec:56:fb:2f:87:82:df:f3:37:b3:7c:b9:b7:f3:9d:
                    4b:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:17:07:21:9F:06:70:7D:4E:35:D9:40:0F:2F:37:5C:3F:80:CC:18
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/69d9da6a-4b11-34af-bc0f-d2f6ab324687.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.crl

            X509v3 Authority Key Identifier:
                keyid:DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.115.199.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         94:d7:80:2a:f4:03:ea:7e:58:61:fb:8e:64:f9:41:39:96:95:
         51:13:52:f9:ff:9f:8d:6e:65:13:96:3a:f2:fd:09:12:54:19:
         7f:a9:9b:8f:48:79:60:67:1b:37:c6:6e:03:66:8b:54:c5:7c:
         64:4b:b1:5a:a3:cf:d9:71:5a:92:8d:af:ee:45:bd:de:82:92:
         56:0a:48:48:1a:6b:03:32:2a:a1:57:b2:8a:38:4f:4b:75:e4:
         2a:14:d8:92:ed:5c:0b:d3:b5:5a:da:0b:ac:87:cc:ec:61:9f:
         79:90:0b:82:0e:8e:24:45:9d:64:20:0b:22:51:b2:84:8f:24:
         12:d3:28:6c:3d:82:8c:a5:b3:50:86:7b:76:50:a9:66:b5:0b:
         2d:9b:c1:ad:be:54:22:fb:cc:f8:66:67:87:5b:bb:12:d8:d0:
         d7:dd:8c:90:3e:c8:ba:53:35:04:6c:57:f9:f7:10:95:28:dd:
         5c:0d:35:5a:7b:e2:da:c4:cd:9d:55:c6:f3:07:71:0a:78:0a:
         9d:dd:21:57:a5:c0:c3:29:5c:46:04:06:b4:04:b8:37:53:b4:
         1c:eb:59:ed:42:93:8b:9f:6d:b9:6f:47:35:82:b3:08:8d:30:
         3a:fb:bc:d6:21:88:2a:3c:5d:3c:83:5d:ca:27:61:0f:ee:10:
         61:ce:77:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 22 01:14:45 2026 by rpki-client