Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109/60b4ae2d-7e0d-3abd-af33-b80aebb85e91.roa
File:                     60b4ae2d-7e0d-3abd-af33-b80aebb85e91.roa (raw, json)
Hash identifier:          JSZERWZOusayrmUiUgMWVp853E9AMvX6IS4DXwDc0mc=
Subject key identifier:   AC:F2:A3:08:EF:A4:00:B4:6C:FA:1C:94:B2:34:C2:F7:72:6D:C2:0E
Certificate issuer:       /CN=8b6f22f9-3eb6-4534-af5e-9d5715ea3109
Certificate serial:       010D0C9F4328584E86F4FCD1409A5F5653345940
Authority key identifier: 66:59:C3:7C:9B:41:02:86:F4:C7:CF:C2:66:8A:1B:37:16:C4:D6:15
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109/60b4ae2d-7e0d-3abd-af33-b80aebb85e91.roa
Signing time:             Fri 17 Jul 2026 09:00:14 +0000
ROA not before:           Fri 17 Jul 2026 09:00:14 +0000
ROA not after:            Thu 15 Oct 2026 09:00:14 +0000
asID:                     4922
IP address blocks:        184.170.67.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109/8b6f22f9-3eb6-4534-af5e-9d5715ea3109.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109/8b6f22f9-3eb6-4534-af5e-9d5715ea3109.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:86:f4:fc:d1:40:9a:5f:56:53:34:59:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b6f22f9-3eb6-4534-af5e-9d5715ea3109
        Validity
            Not Before: Jul 17 09:00:14 2026 GMT
            Not After : Oct 15 09:00:14 2026 GMT
        Subject: CN=c55c28fa-cd2c-4c58-a831-9651317c0412
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:41:4b:69:40:3e:da:3d:a5:e5:2d:9a:5d:bf:
                    35:05:d9:0e:83:ff:ad:3a:9d:fd:ef:a5:e9:22:a2:
                    b2:2d:ce:14:66:ee:4e:45:00:13:36:6c:0e:94:b7:
                    d8:c0:f5:fb:aa:c9:4a:9a:2e:b4:85:5c:4c:b5:ef:
                    0c:29:22:a2:9e:51:b2:ce:e9:e7:7b:1e:fd:3c:b1:
                    2b:db:4e:32:c7:17:e2:f6:ef:5e:4f:ff:a4:96:1b:
                    85:c1:72:45:57:bd:9b:e5:c8:a4:79:e9:92:05:87:
                    d9:55:ae:a3:dd:64:61:6d:08:83:2d:d4:72:17:2b:
                    3a:5d:78:2a:08:49:40:05:14:4b:ec:38:e3:90:33:
                    13:06:be:98:f0:a9:ea:2d:95:37:e6:20:03:79:7b:
                    24:0a:76:e2:91:f3:86:13:6a:b8:0a:6d:04:f9:ad:
                    ef:92:f9:fd:d8:61:5a:da:58:e4:e2:e2:e3:2c:c0:
                    c9:a6:70:1d:bd:14:7f:b0:9b:d9:bf:2d:cc:be:93:
                    fd:6f:a6:ac:a4:d0:c6:77:fe:9c:0b:a0:dc:e1:2c:
                    ae:8c:63:d2:f7:b4:d8:b1:d1:ca:23:0f:41:9f:6d:
                    cd:a2:4e:da:99:cf:27:f3:94:e8:61:91:9a:78:b5:
                    87:31:67:d1:6a:08:f7:11:28:02:a0:9f:45:2e:56:
                    81:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:F2:A3:08:EF:A4:00:B4:6C:FA:1C:94:B2:34:C2:F7:72:6D:C2:0E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109/60b4ae2d-7e0d-3abd-af33-b80aebb85e91.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109/8b6f22f9-3eb6-4534-af5e-9d5715ea3109.crl

            X509v3 Authority Key Identifier:
                keyid:66:59:C3:7C:9B:41:02:86:F4:C7:CF:C2:66:8A:1B:37:16:C4:D6:15

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.170.67.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         05:12:7d:e1:d1:dd:9c:b3:d4:cc:27:b2:7c:f3:71:1b:0d:69:
         7c:b0:cf:1b:43:44:b6:58:40:b8:20:9b:b9:c8:7c:12:af:b7:
         34:92:4d:ea:46:14:54:92:ca:93:07:bf:fb:63:4a:3e:87:17:
         38:4a:38:36:21:7a:f7:be:82:4d:4a:b3:7c:e7:1e:48:10:46:
         6f:a9:19:7d:4d:70:9a:7e:b4:22:ac:84:69:e1:d3:a5:a8:09:
         5c:33:10:c0:f4:fb:c5:43:d2:d1:18:0a:96:dc:88:98:e9:fc:
         3d:73:a0:9b:a6:cd:c6:ba:0b:8f:93:56:eb:e2:aa:7a:16:51:
         3a:2c:1c:31:12:4c:80:73:6b:83:82:1e:ee:6f:a6:71:bf:6b:
         ea:c7:7d:c7:88:15:7b:f1:77:cd:74:96:0b:aa:cd:dd:6b:39:
         d7:33:e2:1d:e4:73:25:09:c7:77:be:26:13:1f:f3:6f:d5:05:
         cc:31:9e:1e:92:cc:6a:ba:19:aa:99:b1:45:ce:27:5b:dc:d3:
         28:9c:35:6c:87:e5:9a:93:90:3a:11:61:16:ca:d5:8f:3b:1d:
         01:12:d7:a8:80:df:fc:a0:20:68:7d:70:a3:2a:fe:bc:9b:e8:
         1a:c0:8e:fd:62:45:50:b7:f5:d6:65:22:fb:c4:9c:7c:ad:94:
         8a:24:fa:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:25:40 2026 by rpki-client