Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1b7a8557-3cb9-4ce7-893c-58d0461737b6/6aa392a7-8178-3785-b2a2-cddbbf186cbe.roa
File:                     6aa392a7-8178-3785-b2a2-cddbbf186cbe.roa (raw, json)
Hash identifier:          aPFDTDgJxZFLh08Cv9YolkSed2WidtoGCqPSacUPILE=
Subject key identifier:   EF:0F:F9:50:43:BF:BA:36:45:03:19:C8:14:52:B9:35:CF:8A:7B:2A
Certificate issuer:       /CN=1b7a8557-3cb9-4ce7-893c-58d0461737b6
Certificate serial:       010D0C9F4328584E5FDF5AE5421AC63982749880
Authority key identifier: B6:70:F5:94:2A:BE:82:DF:16:C2:21:1B:E0:91:50:7D:6A:78:CF:1D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1b7a8557-3cb9-4ce7-893c-58d0461737b6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1b7a8557-3cb9-4ce7-893c-58d0461737b6/6aa392a7-8178-3785-b2a2-cddbbf186cbe.roa
Signing time:             Fri 03 Jul 2026 09:00:12 +0000
ROA not before:           Fri 03 Jul 2026 09:00:12 +0000
ROA not after:            Thu 01 Oct 2026 09:00:12 +0000
asID:                     53684
IP address blocks:        199.30.56.0/22 maxlen: 24
                          208.66.156.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1b7a8557-3cb9-4ce7-893c-58d0461737b6/1b7a8557-3cb9-4ce7-893c-58d0461737b6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1b7a8557-3cb9-4ce7-893c-58d0461737b6/1b7a8557-3cb9-4ce7-893c-58d0461737b6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1b7a8557-3cb9-4ce7-893c-58d0461737b6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:5f:df:5a:e5:42:1a:c6:39:82:74:98:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1b7a8557-3cb9-4ce7-893c-58d0461737b6
        Validity
            Not Before: Jul  3 09:00:12 2026 GMT
            Not After : Oct  1 09:00:12 2026 GMT
        Subject: CN=aa437478-1626-41e0-9fc7-ca389756308c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:56:16:3c:8c:64:0d:ac:8b:a2:a6:d5:27:d3:
                    54:23:b6:54:cb:fa:51:5d:63:6f:41:45:2e:cb:39:
                    da:ec:b4:dd:47:1a:77:6b:b3:a6:4b:20:af:b0:d2:
                    6e:49:cb:40:74:93:2f:96:9a:f2:66:95:cf:ca:7b:
                    95:22:1b:d4:39:bc:ff:f6:2a:d6:e0:50:07:8b:ea:
                    cd:a1:31:ee:84:8f:bb:54:de:39:e5:0b:97:e3:c9:
                    a6:ee:a7:38:ea:e2:f2:4a:e3:17:56:a3:fa:d7:23:
                    a6:b9:52:0f:61:0b:5a:92:f1:94:86:ca:2e:4b:62:
                    c9:5e:f9:56:23:d7:1f:0d:69:03:76:d0:9a:4c:1f:
                    f3:9c:19:db:57:49:ae:4d:7e:aa:48:4a:9f:02:60:
                    3e:fe:6a:82:ff:23:d8:cd:6b:30:17:0f:4a:98:d2:
                    0a:3a:41:14:6f:21:9f:d5:24:48:46:3a:d9:95:14:
                    26:c1:de:9f:5c:e5:93:be:91:e4:92:f9:74:4f:1e:
                    61:4f:38:51:85:6d:48:25:94:b4:80:fd:f5:ca:1f:
                    ca:e5:5a:07:17:82:a9:aa:7d:d8:c9:41:de:e4:92:
                    16:46:d4:00:29:41:99:2d:08:95:d5:28:03:f0:f0:
                    62:cb:34:81:d3:46:6d:09:35:99:16:aa:a1:0d:7e:
                    78:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:0F:F9:50:43:BF:BA:36:45:03:19:C8:14:52:B9:35:CF:8A:7B:2A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1b7a8557-3cb9-4ce7-893c-58d0461737b6/6aa392a7-8178-3785-b2a2-cddbbf186cbe.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1b7a8557-3cb9-4ce7-893c-58d0461737b6/1b7a8557-3cb9-4ce7-893c-58d0461737b6.crl

            X509v3 Authority Key Identifier:
                keyid:B6:70:F5:94:2A:BE:82:DF:16:C2:21:1B:E0:91:50:7D:6A:78:CF:1D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1b7a8557-3cb9-4ce7-893c-58d0461737b6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.30.56.0/22
                  208.66.156.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6a:ad:26:07:58:81:93:e6:d3:18:bb:f9:29:ab:2f:5e:62:77:
         0d:d1:7f:fd:0f:a8:45:43:04:66:8d:84:f2:89:b8:65:46:fa:
         f5:5d:01:8d:16:61:0f:ad:d5:4b:e6:1a:19:b5:fa:3a:d2:62:
         87:94:71:19:0f:10:d9:be:db:d0:69:a2:8c:45:6d:bf:b1:1e:
         d0:f9:52:b7:a4:ee:3c:1d:51:a3:1c:cc:33:2c:60:1f:1d:66:
         1e:4e:3f:1b:38:2f:ed:6c:00:37:5f:e3:54:ad:c9:f4:18:2f:
         72:0b:54:e4:83:84:4f:df:72:a0:2e:5b:a5:26:5e:53:ba:26:
         8c:c5:2f:6c:f3:4e:72:5d:ed:16:f1:8e:17:2b:a7:af:d4:a4:
         d7:f2:7d:9f:8a:9d:c1:3f:6a:6e:9c:3a:70:07:95:2c:c4:41:
         05:ac:83:ae:60:7d:74:f5:b2:50:1a:51:1c:9e:72:89:dc:fd:
         34:35:c3:63:d6:57:14:fe:03:ef:4c:d5:64:3f:4e:65:4c:23:
         6c:68:41:c2:e4:22:75:e7:f4:6a:a7:31:da:5e:77:2d:fe:99:
         29:ec:20:22:fe:d4:ea:9a:d8:15:e3:6a:2a:4f:47:98:44:9c:
         07:2e:ac:8b:2b:14:fb:9c:9b:c9:23:d6:fb:f9:e7:f7:f8:2c:
         0b:7d:6d:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 03:11:19 2026 by rpki-client