Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/7911e7cb-e060-30df-85a8-f8c9b70ceb74.roa
File:                     7911e7cb-e060-30df-85a8-f8c9b70ceb74.roa (raw, json)
Hash identifier:          x7jbnE04TJ3+Fpr18huyq5nhouYAIJSdpHVsncwHxAc=
Subject key identifier:   FB:AC:B1:FE:F5:EC:F2:1D:BA:B7:52:16:D5:AE:A4:25:08:E3:CE:DC
Certificate issuer:       /CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef
Certificate serial:       010D0C9F4328584E8C8A4C3A395E14F9361CA6A8
Authority key identifier: DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/7911e7cb-e060-30df-85a8-f8c9b70ceb74.roa
Signing time:             Sun 19 Jul 2026 09:00:11 +0000
ROA not before:           Sun 19 Jul 2026 09:00:11 +0000
ROA not after:            Sat 17 Oct 2026 09:00:11 +0000
asID:                     13576
IP address blocks:        66.115.198.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Jul 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:8c:8a:4c:3a:39:5e:14:f9:36:1c:a6:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef
        Validity
            Not Before: Jul 19 09:00:11 2026 GMT
            Not After : Oct 17 09:00:11 2026 GMT
        Subject: CN=1d195b6f-3b86-42cc-965a-9c0ce62a1be0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:72:03:49:00:bb:89:6b:b3:d9:3c:0e:bc:90:
                    f2:af:3c:d8:c3:2d:87:49:84:57:53:10:30:6f:02:
                    82:17:30:ab:84:c9:dc:f5:ab:90:15:5b:40:d9:59:
                    dd:22:c4:ef:a6:44:56:ae:bc:47:d9:9a:72:42:b9:
                    3b:94:50:3c:5d:3c:a4:77:82:96:18:70:f6:3c:14:
                    f7:28:1b:96:96:fd:b1:a1:cf:57:ce:51:19:e6:28:
                    f0:3f:4a:19:23:53:53:e2:52:f0:bc:90:2b:e3:7e:
                    cb:c7:d8:de:16:9e:e9:fb:86:9e:73:c7:2e:d9:ac:
                    bf:15:17:b0:e1:92:4c:e4:e2:c9:37:7d:2e:af:16:
                    ad:3b:69:70:03:c0:a7:24:38:d6:17:e0:4f:65:c7:
                    cf:8b:5c:ae:08:41:b0:51:b0:51:29:5e:7a:7d:67:
                    6a:20:11:5b:ba:76:ea:df:21:b2:67:02:3b:7e:45:
                    a9:6e:ea:ba:ce:58:be:3d:35:e7:c9:e1:c2:80:4a:
                    07:7d:e6:1d:e3:47:2a:8d:39:13:a3:7e:57:eb:b4:
                    80:f0:84:8b:43:f4:32:da:00:7b:5a:fb:72:84:15:
                    86:ad:57:cb:52:27:04:50:df:a5:8e:48:1c:4f:9b:
                    23:79:e8:6d:c7:47:3d:52:9a:26:e7:16:c1:bd:78:
                    09:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:AC:B1:FE:F5:EC:F2:1D:BA:B7:52:16:D5:AE:A4:25:08:E3:CE:DC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/7911e7cb-e060-30df-85a8-f8c9b70ceb74.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.crl

            X509v3 Authority Key Identifier:
                keyid:DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.115.198.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         41:6c:e1:bd:11:11:12:47:97:27:cc:f3:22:c3:9c:84:1a:32:
         4a:f1:07:0c:77:9e:96:b5:7b:df:2c:40:16:82:f4:7c:df:f3:
         ad:ae:b4:54:79:b4:20:ba:22:86:ac:98:cc:98:9a:ad:32:16:
         49:9a:a0:fd:f9:c1:ff:72:fc:a8:c3:a7:54:92:98:a2:a2:9d:
         e5:e4:74:29:a1:d0:5d:d1:af:39:99:be:5d:d3:24:01:15:66:
         31:c3:d8:4b:13:3d:53:58:99:3a:10:11:06:3e:b2:e0:81:a2:
         19:69:56:f3:9e:4c:7a:a1:30:c6:cd:b6:f0:6c:c4:38:d1:94:
         3c:79:fc:09:51:03:fe:60:b4:7c:b6:05:f8:ad:99:41:23:d9:
         6c:06:1b:3a:54:cc:e2:f3:f1:77:08:9a:48:ff:25:aa:94:86:
         5f:57:68:b8:2f:4a:21:a0:29:35:b8:2c:59:a9:b1:3f:fc:9a:
         b8:d1:3c:4a:d9:84:0c:d3:9a:1f:73:f3:5f:e6:4d:db:9a:14:
         0d:79:9b:a7:55:c4:e3:83:9d:4c:55:b9:f7:86:6f:fc:50:84:
         20:78:2d:cc:7c:99:7e:bd:cd:84:86:d8:a6:02:47:46:3c:ef:
         db:73:d5:ad:c1:7f:df:55:e4:04:6e:ec:7e:69:c5:7d:7b:f4:
         cd:6d:fe:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 22 01:15:18 2026 by rpki-client