Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/58d2b29f-1da9-4b65-a82f-389822bed566/6f35d33f-3b25-3848-9287-a755ae18fa87.roa
File:                     6f35d33f-3b25-3848-9287-a755ae18fa87.roa (raw, json)
Hash identifier:          YcxcmaGcL8449pBODwp/FEFSrYMHJI3+pUyTBhQ8bBM=
Subject key identifier:   62:EB:7E:76:DB:2C:F4:CA:B1:E0:7E:8F:F3:7B:11:26:E0:24:AB:6A
Certificate issuer:       /CN=58d2b29f-1da9-4b65-a82f-389822bed566
Certificate serial:       010D0C9F4328584E2AD45BEBDAEA777B074313C0
Authority key identifier: 3F:C5:A3:7A:1A:1F:74:88:44:CA:33:CB:C7:AD:B9:B5:60:EA:10:70
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/58d2b29f-1da9-4b65-a82f-389822bed566.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/58d2b29f-1da9-4b65-a82f-389822bed566/6f35d33f-3b25-3848-9287-a755ae18fa87.roa
Signing time:             Sun 14 Jun 2026 09:00:11 +0000
ROA not before:           Sun 14 Jun 2026 09:00:11 +0000
ROA not after:            Sat 12 Sep 2026 09:00:11 +0000
asID:                     40627
IP address blocks:        199.255.120.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/58d2b29f-1da9-4b65-a82f-389822bed566/58d2b29f-1da9-4b65-a82f-389822bed566.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/58d2b29f-1da9-4b65-a82f-389822bed566/58d2b29f-1da9-4b65-a82f-389822bed566.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/58d2b29f-1da9-4b65-a82f-389822bed566.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 Jul 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:2a:d4:5b:eb:da:ea:77:7b:07:43:13:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=58d2b29f-1da9-4b65-a82f-389822bed566
        Validity
            Not Before: Jun 14 09:00:11 2026 GMT
            Not After : Sep 12 09:00:11 2026 GMT
        Subject: CN=bcc38f69-6e7b-4be4-829a-8612b3035d48
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:35:b0:2b:06:d6:0a:55:a2:0c:92:8d:42:79:
                    3f:8d:44:06:f0:80:37:40:9c:5f:37:67:bd:1c:ca:
                    14:b5:ac:8f:b4:60:e8:58:64:06:2c:56:15:26:27:
                    ef:1a:31:88:68:90:27:b9:07:61:3e:f4:9e:0c:bb:
                    0c:8e:6b:b4:ec:d3:16:31:c6:00:1a:b1:8d:7d:79:
                    ae:7c:96:2c:35:83:01:7d:47:1d:9f:e6:f7:73:f7:
                    00:c4:17:e1:9e:92:9c:18:57:61:9c:a0:cf:68:6d:
                    c4:ff:a6:2c:87:2a:3c:0e:9f:41:36:f1:30:3e:87:
                    13:b0:a4:7a:0f:28:5f:2d:b9:90:0f:10:e0:6b:bc:
                    b2:b5:49:a1:a9:92:b8:d2:dd:2c:8b:2a:b2:6e:25:
                    e6:b4:bb:6e:ae:a1:ae:7d:38:f6:ad:c6:aa:66:d7:
                    a0:f4:4b:62:83:67:42:93:8e:40:ba:8a:67:1a:8d:
                    ab:22:ff:64:2e:fe:fb:be:d6:61:b8:95:dd:d2:32:
                    30:fc:47:e2:20:af:c8:90:4b:f0:8b:3f:8c:af:60:
                    01:aa:28:ab:6e:cb:5b:88:73:50:15:47:1f:e9:6e:
                    67:0f:50:c7:3e:5c:0a:0b:78:7a:09:52:9b:f3:c2:
                    6d:d8:7d:78:07:52:cb:8f:f6:6e:e5:91:e2:ec:08:
                    54:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:EB:7E:76:DB:2C:F4:CA:B1:E0:7E:8F:F3:7B:11:26:E0:24:AB:6A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/58d2b29f-1da9-4b65-a82f-389822bed566/6f35d33f-3b25-3848-9287-a755ae18fa87.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/58d2b29f-1da9-4b65-a82f-389822bed566/58d2b29f-1da9-4b65-a82f-389822bed566.crl

            X509v3 Authority Key Identifier:
                keyid:3F:C5:A3:7A:1A:1F:74:88:44:CA:33:CB:C7:AD:B9:B5:60:EA:10:70

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/58d2b29f-1da9-4b65-a82f-389822bed566.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.255.120.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         47:40:fe:27:90:b4:0a:2d:cf:d4:fa:c5:fd:1a:c6:ca:72:11:
         8c:99:56:5d:c6:4e:4a:0e:19:45:55:c3:99:ba:c3:71:30:91:
         1b:d0:f2:f4:32:77:81:37:8e:6e:ef:ea:ae:23:20:c5:f3:1c:
         cf:ef:66:56:07:0f:60:77:79:ec:56:85:3b:52:1d:62:ff:29:
         22:78:0b:bd:3d:5f:15:1c:c5:dd:af:4d:05:a7:d7:1c:94:6c:
         10:28:8e:f0:70:1b:a3:29:6a:27:fd:3f:60:6b:cc:39:db:58:
         12:c5:59:75:88:fc:b4:16:fe:26:79:51:81:8d:08:d7:e7:80:
         55:34:50:39:cc:8c:cd:2a:14:11:1d:1e:32:6a:55:bd:a4:45:
         3c:ca:1e:c0:7c:1e:c0:5a:09:55:8f:cb:c1:88:4a:36:99:89:
         09:2e:23:1a:88:60:07:ad:28:c7:2e:3c:7d:44:4d:8f:dc:8e:
         4b:f1:2f:f6:ca:59:e7:54:10:2c:fb:58:c1:8e:85:90:8e:d1:
         a9:ae:fe:08:84:fb:15:c3:e8:e7:21:5b:e5:e7:c7:d0:87:6d:
         7a:d1:16:f9:8f:1d:e2:c5:67:10:da:40:f3:2a:ff:cd:36:38:
         9c:45:09:2c:d2:54:f9:8f:9d:d3:b3:34:42:ba:fe:da:df:d0:
         31:ce:35:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 2 10:13:40 2026 by rpki-client