Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/7b206cf3-6a53-384d-8c8d-dd4409257f33.roa
File:                     7b206cf3-6a53-384d-8c8d-dd4409257f33.roa (raw, json)
Hash identifier:          9f1Di2rCG9gwWds2CHpN9VHeVodxl/s5wzVaBjiYPfk=
Subject key identifier:   7C:7A:0D:17:9D:3C:DB:2D:85:F3:49:20:EC:43:B0:BB:E7:C1:5C:FE
Certificate issuer:       /CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef
Certificate serial:       010D0C9F4328584E8C8A4BFE185053E20E5E0500
Authority key identifier: DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/7b206cf3-6a53-384d-8c8d-dd4409257f33.roa
Signing time:             Sun 19 Jul 2026 09:00:11 +0000
ROA not before:           Sun 19 Jul 2026 09:00:11 +0000
ROA not after:            Sat 17 Oct 2026 09:00:11 +0000
asID:                     13576
IP address blocks:        66.115.221.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Jul 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:8c:8a:4b:fe:18:50:53:e2:0e:5e:05:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef
        Validity
            Not Before: Jul 19 09:00:11 2026 GMT
            Not After : Oct 17 09:00:11 2026 GMT
        Subject: CN=c61bb2cf-c74f-4496-b584-64346be4c0ee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:06:3b:f4:4c:e8:8d:f3:4d:42:58:87:16:49:
                    b0:44:f0:20:88:25:63:2b:15:5e:77:3d:53:36:9a:
                    fc:2f:44:5b:8a:f8:70:29:08:72:b4:6b:2b:cc:20:
                    19:21:fa:9a:87:b4:4b:6f:43:7a:7c:50:b4:f1:08:
                    03:30:1f:bd:bd:22:0c:b7:bd:47:bb:88:3e:9b:ac:
                    06:58:59:82:6e:bf:80:99:a4:6a:b6:76:3c:0d:d7:
                    f1:a6:8d:4f:66:eb:58:f6:5e:03:f3:3b:0a:83:17:
                    5b:18:e4:57:2b:b4:f4:bd:2d:9a:85:da:ba:a0:eb:
                    69:7d:25:43:7b:f3:52:9a:ab:84:99:3a:a6:7f:4c:
                    c6:bc:8f:a7:b2:72:09:e9:85:cb:ea:ac:93:74:4a:
                    51:65:16:d7:85:ee:bb:6d:3d:36:8b:19:d2:7a:5e:
                    c6:13:f4:52:bd:f6:16:26:81:17:4c:66:45:7e:30:
                    52:c9:18:7b:e0:18:23:3d:3a:ca:c8:17:6d:ba:85:
                    87:a1:a3:4e:10:95:31:9c:0f:66:6e:f6:9e:3e:8d:
                    0f:c6:6c:33:9d:58:fb:5d:e3:fb:d5:93:6b:ff:90:
                    45:5c:f0:01:fd:e0:d4:0f:d0:57:b6:42:bd:05:35:
                    bd:95:55:8f:c5:87:cd:64:e0:d7:55:74:6e:45:2d:
                    64:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:7A:0D:17:9D:3C:DB:2D:85:F3:49:20:EC:43:B0:BB:E7:C1:5C:FE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/7b206cf3-6a53-384d-8c8d-dd4409257f33.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.crl

            X509v3 Authority Key Identifier:
                keyid:DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.115.221.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7a:38:cf:bc:ed:a0:ab:85:3c:c3:5f:3c:49:72:6b:7b:42:81:
         e3:e1:81:c4:76:84:42:58:e4:04:cd:d1:e6:67:31:b9:f7:94:
         e3:c5:7e:8e:79:0b:cd:45:f9:88:be:53:02:45:49:59:4e:32:
         36:69:b4:f3:96:4b:71:0c:a5:86:64:30:bf:b7:27:25:04:34:
         04:fa:84:03:ed:45:8d:69:eb:7d:7d:59:c4:9f:2e:0f:c8:14:
         6e:14:49:b0:6d:57:d7:b2:c3:86:2b:64:13:8a:0c:6d:cc:7c:
         39:9b:7f:c3:23:65:68:e0:d6:6c:ea:20:59:3a:1c:df:47:99:
         82:d7:8d:13:f4:0d:49:3a:4b:39:42:89:39:26:29:dc:d9:55:
         a7:80:ab:b6:36:3d:e2:c7:b2:66:48:90:9f:06:6f:2d:53:cb:
         62:e5:c3:a3:28:36:c0:89:37:0f:fc:92:c9:5e:0b:eb:da:7b:
         bc:be:97:41:5b:81:6b:3c:84:4c:cf:d7:94:8a:88:05:4c:fb:
         2c:76:5a:60:f4:e8:d4:bf:12:e6:bc:9b:e3:b9:ca:b2:38:00:
         6c:e9:1d:19:dc:f1:0b:1b:3f:ec:11:c9:2c:c6:7c:0e:c4:dc:
         25:85:39:32:db:be:5c:27:78:49:b7:b7:32:87:f6:90:04:e6:
         96:bc:ee:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 22 01:13:26 2026 by rpki-client