Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/00e4a49c-611c-4e83-b76d-40efcd29fa53/f26f659a-b4fb-3a2a-a393-f847394715d4.roa
File:                     f26f659a-b4fb-3a2a-a393-f847394715d4.roa (raw, json)
Hash identifier:          T0/bsajbOQBO9NS3aVrnmW1YnIWWkWwTbv2Nb5g14eY=
Subject key identifier:   72:0C:2C:0E:BE:8E:9E:BE:63:BA:83:46:E2:AB:DE:0A:48:19:FD:20
Certificate issuer:       /CN=00e4a49c-611c-4e83-b76d-40efcd29fa53
Certificate serial:       010D0C9F4328584E779A23E0B4C6C61310423A00
Authority key identifier: F2:C9:A5:C3:24:56:69:C6:EE:14:90:90:DF:28:F4:58:30:CB:92:26
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/00e4a49c-611c-4e83-b76d-40efcd29fa53.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/00e4a49c-611c-4e83-b76d-40efcd29fa53/f26f659a-b4fb-3a2a-a393-f847394715d4.roa
Signing time:             Sat 11 Jul 2026 21:00:11 +0000
ROA not before:           Sat 11 Jul 2026 21:00:11 +0000
ROA not after:            Fri 09 Oct 2026 21:00:11 +0000
asID:                     22351
IP address blocks:        66.36.208.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/00e4a49c-611c-4e83-b76d-40efcd29fa53/00e4a49c-611c-4e83-b76d-40efcd29fa53.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/00e4a49c-611c-4e83-b76d-40efcd29fa53/00e4a49c-611c-4e83-b76d-40efcd29fa53.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/00e4a49c-611c-4e83-b76d-40efcd29fa53.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:77:9a:23:e0:b4:c6:c6:13:10:42:3a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=00e4a49c-611c-4e83-b76d-40efcd29fa53
        Validity
            Not Before: Jul 11 21:00:11 2026 GMT
            Not After : Oct  9 21:00:11 2026 GMT
        Subject: CN=68a3482d-ce4d-4f2f-a0fa-f458325e06ec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:67:4e:f0:c9:a7:aa:39:7e:4d:cd:96:5d:dd:
                    7e:7a:9c:40:30:62:ed:ac:fa:62:09:48:69:45:55:
                    50:07:8e:d0:c9:47:4b:a2:fe:95:a6:f9:a1:fc:f9:
                    ce:7d:ff:e9:7f:2d:28:13:37:1c:30:7c:29:09:ab:
                    f4:5d:64:4c:30:aa:4a:56:67:cc:d3:2c:70:97:d7:
                    46:37:54:8d:40:ca:14:c0:53:e9:94:04:9e:a8:18:
                    98:8a:0a:5b:79:4d:09:6c:d4:ca:f1:9a:ee:36:8a:
                    b3:aa:cb:b2:03:9c:77:c1:1d:2e:3c:ac:82:13:ba:
                    b8:e4:32:6d:58:54:b7:9b:8b:aa:7a:8e:65:a8:62:
                    e0:65:53:94:de:fe:1c:04:54:7c:c5:30:6e:ab:66:
                    a9:03:f0:99:fb:83:bf:ca:1d:47:59:ba:83:bd:98:
                    10:31:89:b9:2f:c2:b4:17:6e:ba:9a:31:25:03:0e:
                    25:38:7a:04:34:eb:f5:76:bb:7b:bf:c2:25:1c:1d:
                    a3:ea:87:1e:ab:03:44:e9:c6:65:75:46:d4:ce:44:
                    9e:07:97:11:b2:c4:bd:2d:12:d8:50:f1:bd:77:86:
                    14:26:18:09:64:4d:0a:62:d7:29:63:dd:55:9e:cd:
                    eb:f1:41:66:0b:ce:05:22:a3:c1:7e:b3:d6:f4:20:
                    bd:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:0C:2C:0E:BE:8E:9E:BE:63:BA:83:46:E2:AB:DE:0A:48:19:FD:20
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/00e4a49c-611c-4e83-b76d-40efcd29fa53/f26f659a-b4fb-3a2a-a393-f847394715d4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/00e4a49c-611c-4e83-b76d-40efcd29fa53/00e4a49c-611c-4e83-b76d-40efcd29fa53.crl

            X509v3 Authority Key Identifier:
                keyid:F2:C9:A5:C3:24:56:69:C6:EE:14:90:90:DF:28:F4:58:30:CB:92:26

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/00e4a49c-611c-4e83-b76d-40efcd29fa53.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.36.208.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2d:36:e3:72:1f:3a:9f:d3:21:2f:37:19:6f:73:c7:5d:68:cc:
         99:0e:85:5a:1f:64:56:00:31:15:d3:e8:19:82:d5:f3:75:3a:
         59:20:42:2b:04:4e:53:19:28:66:69:ba:a9:c1:d5:89:a1:7c:
         9f:8a:cd:7c:81:11:6f:a0:df:17:93:4b:57:e4:10:5f:c0:c7:
         6f:9a:77:ae:db:53:76:81:5a:9f:95:fe:10:4b:bf:33:dd:39:
         97:e2:b2:b7:8f:20:36:77:59:f9:84:c3:4a:07:48:fd:09:a5:
         2a:c4:31:c1:db:fd:80:73:06:15:ea:b8:26:f8:c4:0c:51:dd:
         86:d0:d5:76:ed:ed:51:db:e4:a4:6d:32:31:15:97:35:a7:fc:
         59:f0:bb:ae:36:6d:c9:21:e6:b5:f2:04:d0:7a:fc:7a:db:e4:
         15:ee:5a:0a:3d:56:45:5f:38:e0:ff:72:36:ea:83:26:0a:fe:
         fb:99:bf:0a:f3:69:96:f2:61:38:44:86:93:ba:ff:14:19:61:
         a6:49:f2:64:54:ba:9f:a5:f3:6a:5d:9a:1b:1c:89:b7:c4:7f:
         89:86:e5:cc:c6:1f:72:d8:8b:55:60:2d:63:f5:0d:40:fc:35:
         a4:7c:3e:21:9c:05:a5:11:ed:64:73:95:a6:32:7d:ae:e8:61:
         78:fd:11:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 13:06:13 2026 by rpki-client