Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c6830b98-b6ce-461c-8849-244186a13d62/8886a1b9-6984-3bad-b93f-385f332a9728.roa
File:                     8886a1b9-6984-3bad-b93f-385f332a9728.roa (raw, json)
Hash identifier:          wfHVyPnFQKd8iXEhbmR3lNNmbR/DPwKsYfQUcKe6tGQ=
Subject key identifier:   C4:EA:AE:4D:85:E1:40:FC:B0:45:89:02:2E:4F:79:E1:8E:C1:BA:64
Certificate issuer:       /CN=c6830b98-b6ce-461c-8849-244186a13d62
Certificate serial:       010D0C9F4328584E6144BB70DCE983134E991900
Authority key identifier: F2:9F:00:B6:E4:BF:76:05:6A:00:05:2E:85:74:E4:F9:EE:9B:69:CC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c6830b98-b6ce-461c-8849-244186a13d62.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c6830b98-b6ce-461c-8849-244186a13d62/8886a1b9-6984-3bad-b93f-385f332a9728.roa
Signing time:             Fri 03 Jul 2026 21:00:11 +0000
ROA not before:           Fri 03 Jul 2026 21:00:11 +0000
ROA not after:            Thu 01 Oct 2026 21:00:11 +0000
asID:                     6079
IP address blocks:        208.73.40.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c6830b98-b6ce-461c-8849-244186a13d62/c6830b98-b6ce-461c-8849-244186a13d62.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c6830b98-b6ce-461c-8849-244186a13d62/c6830b98-b6ce-461c-8849-244186a13d62.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c6830b98-b6ce-461c-8849-244186a13d62.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 05:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:61:44:bb:70:dc:e9:83:13:4e:99:19:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c6830b98-b6ce-461c-8849-244186a13d62
        Validity
            Not Before: Jul  3 21:00:11 2026 GMT
            Not After : Oct  1 21:00:11 2026 GMT
        Subject: CN=cfcd5373-712b-4f30-8df0-2a8b5482a3f8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:1c:c0:0d:90:60:6c:33:9a:a1:29:c8:1b:09:
                    cf:62:b6:dd:54:42:61:02:1f:e0:b2:5f:1e:d0:ff:
                    44:75:7e:7f:e8:16:ee:24:c4:cc:97:f8:02:73:ed:
                    a3:95:be:81:13:ff:8f:f6:c6:36:7c:8c:94:10:88:
                    ab:a3:f4:a9:13:22:11:e6:af:c4:4b:62:ee:e7:af:
                    5f:08:33:f1:f6:84:f9:21:bd:7b:28:18:f9:8e:58:
                    b0:51:a6:9a:db:1c:f1:4d:af:a8:85:58:ea:d6:94:
                    6f:de:80:1f:77:1d:8c:09:ce:e5:81:c2:f5:52:ba:
                    9f:a7:06:c4:ef:87:6e:2b:ed:ae:a0:1c:d5:c2:5a:
                    da:0f:39:cf:64:4b:b2:f7:b4:23:47:58:2c:a2:27:
                    49:31:6f:34:f8:e4:b9:07:45:3b:a2:cc:b5:fa:6f:
                    f3:cc:7c:35:f5:27:52:08:09:71:84:0d:b8:60:49:
                    88:4f:a9:95:2c:31:32:f8:2b:f9:d3:47:ce:0f:c3:
                    9f:ad:f8:0b:f2:0d:7e:43:c2:8b:b2:c1:be:9c:8e:
                    36:4f:54:c6:f4:32:2c:90:dd:9c:29:fe:8c:05:62:
                    36:09:33:32:27:77:db:30:e9:9b:71:91:78:da:8d:
                    1d:fe:f6:74:94:a5:d0:f7:9a:e3:1c:82:0c:77:4b:
                    26:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:EA:AE:4D:85:E1:40:FC:B0:45:89:02:2E:4F:79:E1:8E:C1:BA:64
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c6830b98-b6ce-461c-8849-244186a13d62/8886a1b9-6984-3bad-b93f-385f332a9728.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c6830b98-b6ce-461c-8849-244186a13d62/c6830b98-b6ce-461c-8849-244186a13d62.crl

            X509v3 Authority Key Identifier:
                keyid:F2:9F:00:B6:E4:BF:76:05:6A:00:05:2E:85:74:E4:F9:EE:9B:69:CC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c6830b98-b6ce-461c-8849-244186a13d62.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.73.40.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a9:f4:69:e4:42:02:da:c8:57:02:a9:44:ad:c5:a6:62:ae:e6:
         1a:7a:91:94:11:af:a0:d4:5f:c5:67:1b:c1:67:23:6b:38:a9:
         75:b6:c0:06:ae:88:d9:f2:95:36:a8:16:35:c6:4c:ba:03:28:
         12:37:d3:9d:11:99:4e:a8:ca:c8:b0:ff:c0:e6:50:71:09:f2:
         88:d6:cf:ce:4b:da:ff:eb:45:78:66:f1:73:31:9b:48:f1:53:
         8a:ec:8e:12:d6:21:08:8d:cf:e8:cb:25:72:c6:73:dc:b7:04:
         52:46:02:ce:96:67:60:8c:05:a7:0b:85:49:a6:53:a4:b5:a6:
         bd:a5:ef:a0:d3:24:b4:b1:69:e0:15:1f:e6:34:93:a3:6e:13:
         c9:07:26:a6:99:57:14:f7:01:e6:ec:18:03:f7:69:75:e2:60:
         bb:54:47:f4:47:57:5a:fc:ac:9e:6b:b0:9f:c4:ce:c4:55:da:
         97:3b:8d:44:66:e9:8d:81:c7:0b:3b:89:c5:19:9a:73:65:ee:
         72:e3:9a:a4:4f:c7:3d:c3:6f:dc:a3:65:36:7b:52:c5:72:e9:
         a3:58:51:5d:14:c4:73:3a:e7:79:6a:69:a3:63:ab:7a:4f:c4:
         ac:2e:59:84:21:10:0c:24:c7:47:bb:fd:6f:c9:b4:c2:87:85:
         1a:b2:5e:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:54:08 2026 by rpki-client