Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/6faab0df-c9ba-328c-8a1d-b6619355d84e.roa
File:                     6faab0df-c9ba-328c-8a1d-b6619355d84e.roa (raw, json)
Hash identifier:          P2OBljlu5UHICkPvlewR8eQfY0GderOBOb0dcIBtxGg=
Subject key identifier:   76:F5:54:02:5C:0F:C1:30:37:7F:F4:99:FB:EE:38:77:C8:12:B6:4E
Certificate issuer:       /CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef
Certificate serial:       010D0C9F4328584EF7176D826277FC808C2BC000
Authority key identifier: DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/6faab0df-c9ba-328c-8a1d-b6619355d84e.roa
Signing time:             Wed 26 Aug 2026 13:00:12 +0000
ROA not before:           Wed 26 Aug 2026 13:00:12 +0000
ROA not after:            Tue 24 Nov 2026 14:00:12 +0000
asID:                     399439
IP address blocks:        66.231.17.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:f7:17:6d:82:62:77:fc:80:8c:2b:c0:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef
        Validity
            Not Before: Aug 26 13:00:12 2026 GMT
            Not After : Nov 24 14:00:12 2026 GMT
        Subject: CN=20bea7e5-089c-458b-b521-56c0cf95cad6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:cf:da:af:5f:9b:08:e0:46:f4:57:7f:54:05:
                    14:8b:1c:48:ec:a7:1b:e5:69:ef:00:6c:b5:0c:89:
                    43:65:6b:6a:87:cf:36:27:70:c8:c4:21:ac:44:d1:
                    5d:3b:97:13:df:5d:02:b8:f1:0f:fa:d7:9a:7b:a7:
                    6e:cb:7a:ad:89:b0:30:29:ea:db:13:fa:2f:18:af:
                    e0:b4:3c:64:87:d6:01:94:9b:81:c8:f9:14:32:8f:
                    af:d7:12:a7:43:21:3d:02:40:6e:52:44:74:bc:a5:
                    1d:fc:8f:79:f4:4e:12:fb:f0:e4:cc:c3:bc:65:21:
                    68:35:68:0c:da:3a:9b:2a:5e:ec:25:2f:0e:51:6c:
                    1d:ed:a6:93:bc:96:4b:88:e2:8f:a5:24:53:5f:87:
                    d6:e5:0b:7b:ee:4d:a2:d3:4e:4a:00:64:fc:39:54:
                    42:be:c9:0f:e9:7c:eb:16:ee:7b:81:ce:00:99:62:
                    27:83:46:75:35:2f:bd:da:eb:fb:22:b6:35:28:00:
                    e2:c1:65:24:67:1b:67:fd:07:8a:5b:85:6e:9c:9f:
                    0b:c6:cc:a2:cd:8e:90:75:62:61:a8:62:e1:d3:5a:
                    7a:cb:c9:41:ee:44:5f:3e:bf:9a:29:c1:60:41:67:
                    e2:b0:40:64:1f:d4:ce:47:c7:51:81:ac:4e:78:7b:
                    a0:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:F5:54:02:5C:0F:C1:30:37:7F:F4:99:FB:EE:38:77:C8:12:B6:4E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/6faab0df-c9ba-328c-8a1d-b6619355d84e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.crl

            X509v3 Authority Key Identifier:
                keyid:DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.231.17.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2f:3f:fa:f5:b0:f4:e1:f5:7c:70:f9:db:a0:78:69:3f:ac:e6:
         a8:c2:b5:3e:14:42:70:81:e0:63:04:de:5e:56:ec:a0:fe:0a:
         cf:58:94:27:97:b8:7f:4a:9b:f9:a0:77:0a:70:f5:c4:d7:90:
         f8:e2:04:09:87:2f:c3:cf:79:c6:75:27:9f:e5:d2:97:ce:ab:
         42:44:f2:ce:06:2c:0f:da:73:f6:f3:9c:ea:19:e8:33:60:6c:
         20:72:6d:30:2d:cf:35:68:2a:41:63:e3:ea:41:ab:9c:55:1e:
         d1:1c:8e:43:16:32:50:3e:18:e6:93:e4:b4:6e:5f:30:f1:48:
         e3:ff:0f:12:cb:a3:b8:81:e4:d8:a1:a6:6e:75:a4:3a:b7:88:
         70:d5:d8:8e:b0:9d:39:07:71:da:ce:68:93:56:b4:b2:b9:7c:
         ac:80:82:5d:b6:e6:f3:59:7d:a4:04:6a:3d:c6:b5:6d:c2:18:
         18:dc:b1:67:ea:37:06:ac:2b:e1:f2:52:79:9c:b1:32:91:12:
         d1:aa:88:9a:1c:89:6b:24:c9:f6:9a:87:72:07:eb:d4:fc:99:
         87:33:d9:8c:eb:58:b8:4f:16:27:25:d6:04:97:e8:57:f9:64:
         30:e4:ef:63:66:a6:91:f9:2c:bb:d1:47:ad:8c:37:98:fa:95:
         0e:6f:03:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 07:13:31 2026 by rpki-client