Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3fd37bf6-6955-4ed5-8347-2896767afab0/d46d8569-5b81-3f6c-b7a8-027002156fc2.roa
File:                     d46d8569-5b81-3f6c-b7a8-027002156fc2.roa (raw, json)
Hash identifier:          Y5H740sP2RCSB90tHt0jkSjk7CZYfCGIC2U2P9G6JN8=
Subject key identifier:   2B:6D:7E:AB:D6:B4:CA:B5:23:B8:9D:09:43:72:DF:81:DC:32:45:97
Certificate issuer:       /CN=3fd37bf6-6955-4ed5-8347-2896767afab0
Certificate serial:       010D0C9F4328584EA7879EC096CDED5630129A80
Authority key identifier: 2C:DA:ED:C1:B2:77:C1:C9:C1:4F:A9:F9:F3:3D:2C:EE:A5:59:DB:2E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3fd37bf6-6955-4ed5-8347-2896767afab0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3fd37bf6-6955-4ed5-8347-2896767afab0/d46d8569-5b81-3f6c-b7a8-027002156fc2.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     40545
IP address blocks:        66.115.64.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3fd37bf6-6955-4ed5-8347-2896767afab0/3fd37bf6-6955-4ed5-8347-2896767afab0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3fd37bf6-6955-4ed5-8347-2896767afab0/3fd37bf6-6955-4ed5-8347-2896767afab0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3fd37bf6-6955-4ed5-8347-2896767afab0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 14 Aug 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:87:9e:c0:96:cd:ed:56:30:12:9a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3fd37bf6-6955-4ed5-8347-2896767afab0
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=fd907538-a867-47b8-8c62-40a7fa3bf7a2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:3b:4a:9f:cb:0d:35:70:dd:62:54:fc:52:c9:
                    22:ad:0f:e2:87:cb:07:4e:bc:2d:3a:79:e4:6c:b3:
                    30:bc:5b:68:a8:26:64:a2:67:85:61:bf:cd:5f:89:
                    53:ce:b4:87:6f:09:96:77:02:0b:9b:b3:a7:3e:b1:
                    36:26:71:e3:91:16:32:83:b4:f5:85:f6:af:e6:d7:
                    41:8c:29:53:84:7e:23:3d:5c:62:b1:29:40:c1:38:
                    7b:02:ba:c9:0e:83:ce:ea:74:41:14:1e:b6:07:47:
                    d7:af:25:dc:fe:43:41:f1:87:98:64:85:61:fe:7a:
                    e6:e6:4f:fc:25:6b:c1:90:2e:5f:9c:a4:f3:75:f6:
                    9e:c2:84:7b:db:f5:bb:69:4f:8e:4a:46:04:02:f0:
                    29:e4:95:49:67:88:dd:dd:d0:1b:12:52:a3:c2:ec:
                    6e:eb:c8:64:49:de:18:d4:38:15:bc:88:3f:03:0e:
                    30:7a:e9:b6:4e:9a:97:0c:95:ac:3e:a0:60:ab:7d:
                    30:33:58:d5:df:14:83:51:3f:5d:97:49:d5:f2:3e:
                    c9:e4:07:51:8a:89:55:fe:57:72:db:4c:6c:26:5e:
                    38:bd:ae:7d:9d:01:eb:a3:53:6c:59:f3:b4:c9:ce:
                    9c:d2:70:bb:d8:b2:f6:32:85:81:6c:ba:34:55:33:
                    63:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:6D:7E:AB:D6:B4:CA:B5:23:B8:9D:09:43:72:DF:81:DC:32:45:97
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3fd37bf6-6955-4ed5-8347-2896767afab0/d46d8569-5b81-3f6c-b7a8-027002156fc2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3fd37bf6-6955-4ed5-8347-2896767afab0/3fd37bf6-6955-4ed5-8347-2896767afab0.crl

            X509v3 Authority Key Identifier:
                keyid:2C:DA:ED:C1:B2:77:C1:C9:C1:4F:A9:F9:F3:3D:2C:EE:A5:59:DB:2E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3fd37bf6-6955-4ed5-8347-2896767afab0.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.115.64.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3e:c2:fc:2e:ae:d9:95:80:95:d0:95:43:03:2e:b3:82:65:d6:
         1a:73:1a:b7:1d:18:c3:2e:38:b1:5a:7a:b9:12:07:28:5f:f3:
         40:c5:c3:36:7e:20:27:e4:4a:73:ce:4e:f0:eb:f3:43:e7:af:
         2c:78:99:6f:9a:dc:4c:c4:da:72:c8:29:29:39:e0:1d:00:36:
         5c:85:d5:0e:0e:f4:a7:1a:67:f2:ab:41:bb:ae:22:89:bc:8a:
         86:75:10:a2:49:35:4f:32:27:89:a3:99:83:06:78:c3:39:b6:
         ad:0d:82:ad:bf:06:ed:1e:18:25:ea:23:a6:74:d7:99:0c:7f:
         74:62:93:f3:85:26:d8:7d:37:98:9e:9f:51:d0:f4:be:5b:31:
         79:d4:74:a5:49:8a:84:a2:e0:f9:fd:75:25:98:ca:13:61:aa:
         2a:56:92:14:15:ba:ae:8d:33:04:33:29:8a:aa:b4:e1:8f:ea:
         8d:4a:ac:03:26:d8:21:ef:34:ca:da:10:e8:b9:be:95:07:f2:
         16:b2:4f:bb:97:7c:82:1f:d5:a5:30:3d:96:3a:a6:d3:1f:ec:
         04:c7:ab:b4:e7:67:c5:78:e9:23:91:ba:41:11:6a:c8:75:2d:
         89:e7:ea:3a:e4:9b:28:d6:35:a8:36:98:5c:c2:72:f9:d1:c3:
         d8:6a:bb:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 13 13:08:49 2026 by rpki-client