Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5e6346f2-66fb-4ac9-8b0c-1f8bbbfc8593/bb963e23-a7f0-320f-be0c-22588758a664.roa
File:                     bb963e23-a7f0-320f-be0c-22588758a664.roa (raw, json)
Hash identifier:          YQJuy1z8FeXAbmKVpsF4nXp9rsylG+GswrvkVra/8Qs=
Subject key identifier:   F0:DD:CA:FC:2F:48:91:DD:20:4A:76:9E:5E:09:88:07:A0:7A:E4:86
Certificate issuer:       /CN=5e6346f2-66fb-4ac9-8b0c-1f8bbbfc8593
Certificate serial:       010D0C9F4328584DB118554CD4530A8D88BA1BC0
Authority key identifier: 26:40:8A:FD:16:DB:87:11:C6:D9:C6:70:65:4A:9E:DC:F2:BB:93:66
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5e6346f2-66fb-4ac9-8b0c-1f8bbbfc8593.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5e6346f2-66fb-4ac9-8b0c-1f8bbbfc8593/bb963e23-a7f0-320f-be0c-22588758a664.roa
Signing time:             Fri 01 May 2026 18:28:41 +0000
ROA not before:           Fri 01 May 2026 18:28:41 +0000
ROA not after:            Thu 30 Jul 2026 18:28:41 +0000
asID:                     36521
IP address blocks:        199.66.208.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5e6346f2-66fb-4ac9-8b0c-1f8bbbfc8593/5e6346f2-66fb-4ac9-8b0c-1f8bbbfc8593.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5e6346f2-66fb-4ac9-8b0c-1f8bbbfc8593/5e6346f2-66fb-4ac9-8b0c-1f8bbbfc8593.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5e6346f2-66fb-4ac9-8b0c-1f8bbbfc8593.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:b1:18:55:4c:d4:53:0a:8d:88:ba:1b:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e6346f2-66fb-4ac9-8b0c-1f8bbbfc8593
        Validity
            Not Before: May  1 18:28:41 2026 GMT
            Not After : Jul 30 18:28:41 2026 GMT
        Subject: CN=4ba72b1d-55ae-48da-8575-8eb93a9bc2cd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:1a:b8:b4:c9:e2:81:ce:85:30:60:fc:c3:9b:
                    f5:4b:8d:47:0e:3a:2b:20:a5:f6:7f:bc:6b:7a:53:
                    3c:5e:df:0c:0f:85:1f:2a:29:5c:af:1f:85:a7:a7:
                    84:f9:da:cd:79:4c:9e:86:27:51:3b:6c:91:6b:57:
                    e4:39:b4:fa:42:23:3e:03:0b:b9:35:79:6c:35:e8:
                    76:75:f5:4e:fe:72:5f:5b:f2:bd:1b:40:9c:41:bd:
                    d2:0f:03:ff:73:fe:86:35:1a:45:95:aa:f9:4d:b5:
                    22:50:3e:c2:78:51:f8:d9:13:a2:ea:f0:82:ea:95:
                    8a:e5:8a:4f:48:06:0c:fa:dc:d2:d0:db:51:a5:97:
                    5c:f8:8c:36:35:f5:8a:06:eb:36:26:a0:f9:71:f4:
                    a7:85:59:e2:f1:3a:38:78:d2:88:b8:db:96:98:81:
                    62:ae:54:a5:4d:e0:f6:74:f8:ea:be:d2:4e:88:7e:
                    4f:7b:09:d8:ee:be:f5:56:f9:7f:78:aa:a8:05:40:
                    26:7b:74:5a:18:b8:90:67:0e:72:4c:e6:8c:84:1f:
                    aa:26:0e:39:21:db:53:ae:ca:d3:df:1d:68:08:95:
                    ee:19:2c:61:b0:23:03:aa:24:9b:4a:49:8d:2e:c9:
                    05:b9:ac:13:8f:70:4b:ec:c4:3c:24:96:18:22:a1:
                    d4:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:DD:CA:FC:2F:48:91:DD:20:4A:76:9E:5E:09:88:07:A0:7A:E4:86
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5e6346f2-66fb-4ac9-8b0c-1f8bbbfc8593/bb963e23-a7f0-320f-be0c-22588758a664.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5e6346f2-66fb-4ac9-8b0c-1f8bbbfc8593/5e6346f2-66fb-4ac9-8b0c-1f8bbbfc8593.crl

            X509v3 Authority Key Identifier:
                keyid:26:40:8A:FD:16:DB:87:11:C6:D9:C6:70:65:4A:9E:DC:F2:BB:93:66

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5e6346f2-66fb-4ac9-8b0c-1f8bbbfc8593.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.66.208.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         46:ab:11:d1:91:ec:4a:3c:c8:7f:c7:c2:00:0e:d8:20:8c:76:
         a6:48:2d:0a:d9:47:0a:8c:21:0f:92:2a:7f:c8:3d:37:d5:48:
         14:b5:d9:af:b3:ab:b5:37:e1:75:0b:64:90:bf:4d:13:16:6b:
         0d:7b:ce:6e:b8:27:56:2c:f7:64:f4:a4:5c:cf:7f:b7:80:7f:
         7e:7d:54:1a:5b:d7:d7:09:7c:09:36:a4:4f:b9:f4:a0:9e:89:
         20:99:4b:50:08:6e:14:80:e9:90:94:1a:a5:13:fa:8a:73:d5:
         09:2d:7d:ff:a2:17:32:c0:cd:9d:25:6d:81:09:a0:6d:fb:b0:
         7d:fb:ea:ab:15:f6:b0:73:03:d6:54:a2:b9:ab:83:a6:66:16:
         67:57:1c:45:68:83:3c:63:21:93:0c:c6:68:c0:d5:c5:43:ca:
         0d:e7:d3:35:cb:0e:b8:a1:3b:ea:08:74:dd:27:84:3a:dc:69:
         ea:7f:cc:17:7c:db:d9:a6:48:f4:99:25:2f:36:49:5a:ac:18:
         f1:56:36:44:ab:c1:b1:b4:73:85:c0:00:41:82:c0:64:b7:2c:
         8f:70:4b:08:9e:b5:6f:95:74:0b:b0:dc:5f:72:4a:fd:56:41:
         36:a6:d8:7a:78:79:c7:d9:99:a5:8f:4b:05:9e:cd:35:7f:e5:
         3d:1f:30:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 08:28:16 2026 by rpki-client