Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/fdb3bebb-194e-31d2-952b-231efd51bd25.roa
File:                     fdb3bebb-194e-31d2-952b-231efd51bd25.roa (raw, json)
Hash identifier:          ccSj7nzVz0SO1ZhE9JWoBa/Klc0k5FxhLCXhiZtbSEc=
Subject key identifier:   55:E7:D7:56:ED:90:AE:18:21:3E:D0:15:CD:34:33:2D:4D:EC:4B:D9
Certificate issuer:       /CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef
Certificate serial:       010D0C9F4328584E8C8A4C238219FA0A28137780
Authority key identifier: DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/fdb3bebb-194e-31d2-952b-231efd51bd25.roa
Signing time:             Sun 19 Jul 2026 09:00:11 +0000
ROA not before:           Sun 19 Jul 2026 09:00:11 +0000
ROA not after:            Sat 17 Oct 2026 09:00:11 +0000
asID:                     393417
IP address blocks:        66.115.202.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Jul 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:8c:8a:4c:23:82:19:fa:0a:28:13:77:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef
        Validity
            Not Before: Jul 19 09:00:11 2026 GMT
            Not After : Oct 17 09:00:11 2026 GMT
        Subject: CN=72406189-6401-4e35-86af-c052fd7bb49d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:28:11:14:ad:51:1a:eb:2d:db:9a:c7:be:38:
                    4a:0a:44:af:eb:fe:38:f6:c0:6c:e9:6d:45:dc:08:
                    4a:2f:a3:75:c7:93:7b:25:43:61:f5:d0:40:3e:36:
                    d5:4a:ad:a1:75:84:f6:aa:ad:85:dc:ed:a5:b4:b5:
                    da:36:5f:b7:67:c5:ff:2d:d6:a9:db:02:d5:19:4a:
                    90:83:f9:b7:a4:3f:e0:10:05:50:59:b5:20:95:04:
                    89:4c:ff:6d:d5:13:2b:1c:fe:ef:e6:2c:eb:47:36:
                    75:4c:5b:c7:61:67:23:1e:a6:11:57:15:cb:e1:52:
                    95:9c:56:19:2c:b6:19:ce:a9:1e:64:f1:00:c9:63:
                    8c:d0:1f:91:50:20:44:b2:b4:f2:47:82:86:8a:18:
                    33:41:e7:47:1d:a3:a3:d1:6b:ef:c1:aa:fb:c5:68:
                    a7:d5:81:b7:37:ca:08:42:01:c6:01:01:ca:cb:82:
                    9d:a6:f7:86:0a:a3:a1:f3:aa:cb:2f:32:ec:94:cf:
                    1f:eb:ed:61:90:bb:4e:4d:9c:5a:18:19:69:97:d5:
                    41:db:0d:5b:ca:16:41:72:bd:81:12:b7:a1:f6:32:
                    8b:fe:a4:91:6a:1e:4c:4f:40:4d:46:9b:a3:ed:f9:
                    90:9a:2a:b2:9b:97:59:7c:2e:c8:f0:e5:6e:c4:22:
                    e4:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:E7:D7:56:ED:90:AE:18:21:3E:D0:15:CD:34:33:2D:4D:EC:4B:D9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/fdb3bebb-194e-31d2-952b-231efd51bd25.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.crl

            X509v3 Authority Key Identifier:
                keyid:DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.115.202.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         d4:6a:e3:c5:a6:d4:fe:77:77:bb:08:1d:90:cd:11:ff:6f:9b:
         a6:6a:d4:1d:9d:40:f0:75:15:cf:f5:6b:23:17:4a:cd:68:e7:
         d5:04:4a:18:eb:a0:61:1d:2a:1e:92:d2:19:96:a4:07:11:69:
         59:da:c4:33:cc:eb:4b:b8:db:ae:a1:95:b3:fe:1e:c6:2a:7f:
         60:f4:47:4a:d7:0f:af:1a:1a:00:d1:0c:b8:da:23:b1:87:2b:
         18:bf:bd:de:37:2a:31:a4:12:a5:70:6b:8d:1e:d6:c0:2f:9e:
         d7:e8:12:f0:9f:33:a5:58:12:12:4f:4e:03:16:06:ff:04:9a:
         5c:db:2b:73:c7:4b:1b:93:2b:59:43:b5:29:5c:30:95:08:df:
         d7:81:1e:78:e1:8c:3b:60:d5:d8:74:ee:46:b0:8b:07:97:1b:
         c8:8c:48:05:09:59:6b:ad:11:02:aa:a3:e8:0b:2d:e4:3f:e3:
         d4:90:96:9b:c6:47:ab:2f:22:cc:87:b3:41:62:d9:7c:72:bb:
         1f:7c:27:a3:ba:9f:d3:d8:4d:65:d0:67:a8:15:4d:08:c0:ca:
         ad:11:e0:50:9d:ea:fd:ef:e4:13:4c:c0:ef:36:d2:09:47:6a:
         a1:54:b3:c4:0d:68:d4:01:1e:84:89:ca:a9:f8:27:27:96:11:
         1f:7f:b3:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 22 03:09:41 2026 by rpki-client