Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/61393699-9734-421d-a324-4f3368d73fca/6cbc2ae4-97bb-37ca-b3c8-d245822c7443.roa
File:                     6cbc2ae4-97bb-37ca-b3c8-d245822c7443.roa (raw, json)
Hash identifier:          C4LVLoVT637Rh8MirVA+LvDIUm1KJsIO0h2ezVm4jLU=
Subject key identifier:   D5:7C:6C:7C:0C:BF:ED:C1:6A:92:57:C9:20:CC:B5:8A:6C:5A:8C:8B
Certificate issuer:       /CN=61393699-9734-421d-a324-4f3368d73fca
Certificate serial:       010D0C9F4328584D2BDA0B281F02D444562FB480
Authority key identifier: 0A:34:E2:80:44:87:4B:28:F7:9C:57:B2:52:72:7C:22:94:75:70:4F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/61393699-9734-421d-a324-4f3368d73fca.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/61393699-9734-421d-a324-4f3368d73fca/6cbc2ae4-97bb-37ca-b3c8-d245822c7443.roa
Signing time:             Sun 15 Mar 2026 01:00:32 +0000
ROA not before:           Sun 15 Mar 2026 01:00:32 +0000
ROA not after:            Sat 13 Jun 2026 01:00:32 +0000
asID:                     400172
IP address blocks:        66.59.222.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/61393699-9734-421d-a324-4f3368d73fca/61393699-9734-421d-a324-4f3368d73fca.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/61393699-9734-421d-a324-4f3368d73fca/61393699-9734-421d-a324-4f3368d73fca.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/61393699-9734-421d-a324-4f3368d73fca.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:2b:da:0b:28:1f:02:d4:44:56:2f:b4:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61393699-9734-421d-a324-4f3368d73fca
        Validity
            Not Before: Mar 15 01:00:32 2026 GMT
            Not After : Jun 13 01:00:32 2026 GMT
        Subject: CN=f1228156-bef1-41c8-9147-81838e746a03
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:95:8b:b2:d4:26:4c:ac:c7:54:6f:c4:65:12:
                    3a:a1:39:e9:c9:99:53:24:d1:84:90:c6:e3:f2:a2:
                    0f:b4:1a:bc:f0:05:eb:93:e0:d6:4e:48:94:09:b6:
                    32:25:3d:8c:4d:7a:4b:df:56:02:f0:1c:f0:7b:3c:
                    99:57:54:74:86:eb:bb:6b:66:82:8c:62:01:3e:e9:
                    25:94:df:b0:fe:b6:4b:d4:12:10:19:f8:de:b4:54:
                    c5:ef:a8:17:3a:fc:ab:17:60:6a:d5:3b:bf:de:7a:
                    6a:f8:b0:c8:18:fa:38:63:89:a4:58:a4:03:ab:73:
                    d9:69:4e:9e:5b:10:3b:6b:e5:ab:5c:01:86:95:b6:
                    05:ce:ff:db:19:fb:9f:8b:d7:73:87:84:df:26:57:
                    6a:45:6c:e5:5d:9d:91:10:d0:57:a2:11:15:5d:1b:
                    48:cd:13:99:e7:b5:15:98:ec:b3:4b:15:05:7f:f2:
                    5d:af:fa:ab:d8:4a:2d:0b:13:9c:93:71:8e:ab:93:
                    35:56:c0:a2:57:73:f7:1f:38:67:31:b3:b7:c9:10:
                    5d:6b:9f:e1:e4:65:9f:46:5f:ed:ba:38:30:15:8d:
                    62:2b:07:60:e9:a9:d9:9c:c9:42:80:ec:2f:83:f5:
                    9a:22:2f:5b:4f:e4:01:71:65:57:76:9e:42:d1:7b:
                    e9:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:7C:6C:7C:0C:BF:ED:C1:6A:92:57:C9:20:CC:B5:8A:6C:5A:8C:8B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/61393699-9734-421d-a324-4f3368d73fca/6cbc2ae4-97bb-37ca-b3c8-d245822c7443.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/61393699-9734-421d-a324-4f3368d73fca/61393699-9734-421d-a324-4f3368d73fca.crl

            X509v3 Authority Key Identifier:
                keyid:0A:34:E2:80:44:87:4B:28:F7:9C:57:B2:52:72:7C:22:94:75:70:4F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/61393699-9734-421d-a324-4f3368d73fca.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.59.222.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2d:a1:5e:87:40:ee:e4:fb:05:01:18:a0:62:d9:a6:f2:8b:81:
         f4:17:4e:83:a3:e0:e8:6d:5d:a1:51:fc:e8:79:d0:b5:89:dd:
         03:98:6a:f6:6b:df:4b:3f:7d:fe:c6:e6:2d:a1:c5:cf:a4:62:
         0a:fb:d6:00:59:c2:08:69:ee:98:c3:e8:51:1f:25:c2:fb:25:
         93:2a:54:c7:bb:42:03:61:2f:4e:04:e4:e2:37:63:dd:1a:52:
         0e:00:96:60:d4:e7:7f:82:2c:99:9c:3c:9f:3d:12:cc:05:bc:
         b6:81:22:a7:0e:c6:91:37:90:22:e0:e1:7c:a9:3d:9f:10:ed:
         ef:e0:29:b6:5b:e2:d2:32:51:ad:3b:c3:4e:74:19:8b:1f:1d:
         da:1c:c1:65:c2:4a:70:14:3a:14:55:9e:90:6b:47:69:40:d0:
         12:78:5a:44:9a:b6:36:a4:a6:d8:d3:29:28:9d:ac:59:c8:d6:
         7f:57:0e:c9:0f:52:d3:cc:54:93:20:4e:4e:b2:cb:4f:af:c4:
         b9:8e:37:ec:bb:aa:2b:1e:3b:a6:c7:51:b0:20:73:75:64:3e:
         da:8d:22:4d:21:de:25:39:49:55:04:95:ff:fb:5c:e6:7c:f8:
         23:26:eb:68:fe:6c:57:3f:d5:d1:89:a4:46:40:ab:11:d0:11:
         cd:96:06:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 17:04:52 2026 by rpki-client