Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/95cb7d64-2f99-4504-bfba-cddcd6bdf561/77296669-176b-3853-8735-2650b8fb7fb3.roa
File:                     77296669-176b-3853-8735-2650b8fb7fb3.roa (raw, json)
Hash identifier:          sw471rmlSBLCBRPJ63JvRRjC5Wz4+Law6u/TKM4zFZE=
Subject key identifier:   97:16:2C:53:E0:74:75:94:D5:E8:B0:66:34:4D:E8:39:F4:A2:2D:04
Certificate issuer:       /CN=95cb7d64-2f99-4504-bfba-cddcd6bdf561
Certificate serial:       010D0C9F4328584ECD3718D2FED2DA7B5AE71D80
Authority key identifier: CF:9F:01:50:F2:61:7A:10:A2:5A:BB:CC:0B:9A:80:66:8F:9D:10:EB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/95cb7d64-2f99-4504-bfba-cddcd6bdf561.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/95cb7d64-2f99-4504-bfba-cddcd6bdf561/77296669-176b-3853-8735-2650b8fb7fb3.roa
Signing time:             Tue 11 Aug 2026 13:00:11 +0000
ROA not before:           Tue 11 Aug 2026 13:00:11 +0000
ROA not after:            Mon 09 Nov 2026 14:00:11 +0000
asID:                     395141
IP address blocks:        66.187.2.0/24 maxlen: 24
                          199.233.14.0/24 maxlen: 24
                          2604:1960::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/95cb7d64-2f99-4504-bfba-cddcd6bdf561/95cb7d64-2f99-4504-bfba-cddcd6bdf561.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/95cb7d64-2f99-4504-bfba-cddcd6bdf561/95cb7d64-2f99-4504-bfba-cddcd6bdf561.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/95cb7d64-2f99-4504-bfba-cddcd6bdf561.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 15 Aug 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:cd:37:18:d2:fe:d2:da:7b:5a:e7:1d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=95cb7d64-2f99-4504-bfba-cddcd6bdf561
        Validity
            Not Before: Aug 11 13:00:11 2026 GMT
            Not After : Nov  9 14:00:11 2026 GMT
        Subject: CN=cbabb9d0-0cf8-46cc-801f-07ae93726853
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:3d:5f:95:31:93:94:b2:7e:38:c2:47:ff:18:
                    d7:78:52:48:91:70:47:42:26:25:e0:c0:6b:c3:f9:
                    14:8d:3f:30:03:b1:a7:2e:9c:06:14:1a:8d:e6:39:
                    16:51:2c:86:51:56:ff:18:78:60:4c:f0:da:5a:e6:
                    f6:66:11:26:48:64:e3:2c:41:af:5e:b8:44:d1:cb:
                    61:c4:fc:b0:1e:06:a1:3e:58:43:a4:52:ce:2a:e0:
                    52:19:a2:a3:a0:98:46:a1:eb:6f:37:35:6c:00:98:
                    b2:db:17:46:96:84:38:cf:d4:fb:d8:d0:d5:79:aa:
                    d3:66:42:06:d1:f9:32:07:66:11:76:73:1e:ef:56:
                    a2:b5:63:e1:59:ed:e4:d4:22:ad:2c:99:f5:a2:a3:
                    1f:d4:af:3e:40:71:e6:74:e8:c6:02:9e:6c:4f:70:
                    52:b1:df:42:e6:79:44:68:ae:9e:24:27:61:bc:9f:
                    8d:88:c0:bf:22:1d:62:60:4d:3a:7a:38:19:39:f9:
                    cb:d6:ee:90:8a:e3:9d:0a:e9:95:76:c7:81:72:5c:
                    93:dc:ef:c4:65:41:ea:ba:9c:4b:76:e5:82:47:81:
                    93:42:3a:4b:b2:b1:41:ef:02:91:7e:7f:47:39:55:
                    b7:76:c7:e6:f2:01:8e:e2:00:79:0e:4f:2a:41:92:
                    61:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:16:2C:53:E0:74:75:94:D5:E8:B0:66:34:4D:E8:39:F4:A2:2D:04
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/95cb7d64-2f99-4504-bfba-cddcd6bdf561/77296669-176b-3853-8735-2650b8fb7fb3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/95cb7d64-2f99-4504-bfba-cddcd6bdf561/95cb7d64-2f99-4504-bfba-cddcd6bdf561.crl

            X509v3 Authority Key Identifier:
                keyid:CF:9F:01:50:F2:61:7A:10:A2:5A:BB:CC:0B:9A:80:66:8F:9D:10:EB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/95cb7d64-2f99-4504-bfba-cddcd6bdf561.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.187.2.0/24
                  199.233.14.0/24
                IPv6:
                  2604:1960::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         75:c6:7a:8f:cc:1b:4f:b9:18:f4:58:5f:9e:3d:20:0b:ee:d2:
         e0:78:45:56:89:9f:e9:1a:bd:4c:77:82:b1:c4:b1:92:e8:07:
         c9:0f:46:7d:76:9e:6a:c6:8f:be:db:2e:9a:f2:e8:ee:01:5b:
         79:cf:16:8e:24:4e:51:ce:35:2b:01:2d:35:ef:cf:fd:a4:97:
         51:79:c2:f1:ae:3c:22:3a:8d:4d:ae:73:c3:d9:a2:18:b9:41:
         bc:f6:c2:da:6d:f4:ac:d6:60:c6:ed:0e:f0:1d:f5:33:69:0e:
         e1:e8:f0:45:e9:01:c3:ac:7c:62:06:44:5a:3a:38:50:95:56:
         97:21:40:24:4d:de:56:4e:30:da:48:57:bc:97:3c:5a:8d:4b:
         0e:ee:9b:d3:aa:e7:c1:91:e9:a8:bf:5c:86:16:65:99:e9:a9:
         8e:a3:61:77:95:17:37:de:1f:7a:0d:62:48:b9:4b:81:26:89:
         b7:86:70:f8:fc:bd:5b:9f:a0:76:0e:14:6b:b3:e5:b0:41:98:
         68:06:8b:ea:49:9d:27:03:29:9f:1d:96:43:45:2f:36:df:06:
         e3:da:22:fa:76:52:5c:9f:86:c4:33:cb:f3:1b:4e:51:cf:d1:
         2d:c0:af:4d:12:37:c4:ac:a7:f6:8f:52:df:fe:18:31:55:c0:
         39:f1:f8:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 13 07:53:46 2026 by rpki-client