Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7ba79988-80bc-4fcb-8faf-624400d5f1ce/642208e9-7780-39b0-9fec-fbc66818ca60.roa
File:                     642208e9-7780-39b0-9fec-fbc66818ca60.roa (raw, json)
Hash identifier:          ed//x+ESCvenzbFVr1L+ZRd0LmKyUpd1jsjGRUlgTus=
Subject key identifier:   B7:CC:EE:0E:13:4B:31:94:94:CB:9F:D0:CE:67:DF:A1:63:28:DC:1A
Certificate issuer:       /CN=7ba79988-80bc-4fcb-8faf-624400d5f1ce
Certificate serial:       010D0C9F4328584E35FF1D3B093E22984BB6F4A0
Authority key identifier: 34:17:BC:BF:6B:4A:63:0A:CA:A3:C5:88:BC:45:0F:E5:94:79:C4:5A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7ba79988-80bc-4fcb-8faf-624400d5f1ce.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7ba79988-80bc-4fcb-8faf-624400d5f1ce/642208e9-7780-39b0-9fec-fbc66818ca60.roa
Signing time:             Thu 18 Jun 2026 09:00:12 +0000
ROA not before:           Thu 18 Jun 2026 09:00:12 +0000
ROA not after:            Wed 16 Sep 2026 09:00:12 +0000
asID:                     8560
IP address blocks:        66.175.232.0/21 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7ba79988-80bc-4fcb-8faf-624400d5f1ce/7ba79988-80bc-4fcb-8faf-624400d5f1ce.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7ba79988-80bc-4fcb-8faf-624400d5f1ce/7ba79988-80bc-4fcb-8faf-624400d5f1ce.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7ba79988-80bc-4fcb-8faf-624400d5f1ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:35:ff:1d:3b:09:3e:22:98:4b:b6:f4:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7ba79988-80bc-4fcb-8faf-624400d5f1ce
        Validity
            Not Before: Jun 18 09:00:12 2026 GMT
            Not After : Sep 16 09:00:12 2026 GMT
        Subject: CN=5a28386c-0b07-4f01-9be9-09ebeafa1d2e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:ce:14:59:62:33:0d:5e:75:31:73:81:5d:67:
                    bc:0a:89:1c:a4:22:dc:f5:95:4a:17:5d:31:21:c9:
                    ca:3c:c5:d6:b3:e6:d9:28:c7:88:ec:c9:7b:bc:da:
                    17:df:95:08:67:98:ee:45:0e:1a:10:1f:57:12:22:
                    4f:87:79:30:b2:65:f8:05:d1:95:5c:d9:77:1e:ed:
                    12:87:1c:b1:da:67:52:d7:87:88:eb:0e:cc:c9:5f:
                    6f:df:3a:89:ba:ac:80:2a:50:74:f9:ba:96:cf:23:
                    9f:fd:ff:f6:fb:66:25:53:c2:42:f4:1a:ee:3c:ec:
                    83:76:e3:7d:16:e4:02:33:cc:65:4c:0b:10:85:5c:
                    fd:db:e8:d7:c9:ee:0f:58:f0:7e:94:18:9e:b1:5e:
                    7a:b0:4a:db:e4:81:ab:72:16:95:b1:0c:ef:43:f1:
                    c0:7a:c6:8a:bf:d5:67:cc:02:26:49:72:9d:e5:ae:
                    22:a8:a3:6e:7b:2a:81:26:9c:9f:87:0a:c7:02:8f:
                    33:71:ff:29:1d:89:ca:58:45:79:16:40:2a:da:5d:
                    ba:30:45:a2:96:b9:3f:16:dd:5f:55:be:3b:8a:92:
                    b9:e9:83:86:a2:33:7e:52:9b:1b:9f:ae:da:76:0c:
                    54:1f:60:73:19:ad:0d:1e:76:4a:1d:26:c7:a1:9d:
                    e4:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:CC:EE:0E:13:4B:31:94:94:CB:9F:D0:CE:67:DF:A1:63:28:DC:1A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7ba79988-80bc-4fcb-8faf-624400d5f1ce/642208e9-7780-39b0-9fec-fbc66818ca60.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7ba79988-80bc-4fcb-8faf-624400d5f1ce/7ba79988-80bc-4fcb-8faf-624400d5f1ce.crl

            X509v3 Authority Key Identifier:
                keyid:34:17:BC:BF:6B:4A:63:0A:CA:A3:C5:88:BC:45:0F:E5:94:79:C4:5A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7ba79988-80bc-4fcb-8faf-624400d5f1ce.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.175.232.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         47:0b:69:3a:ed:57:c3:50:ef:b8:96:96:e2:48:c7:f6:c9:c6:
         4c:55:48:74:f0:f5:a2:f7:ed:58:96:82:3b:97:ff:6a:98:cc:
         ca:2f:66:b7:52:b0:a0:a3:85:6f:92:d2:77:d6:0e:17:7f:bd:
         7b:da:08:2c:35:b2:93:9b:1a:d2:f1:ef:91:b9:c0:25:50:da:
         e5:ac:3e:bd:9d:99:cb:f2:b1:25:11:ca:fa:6d:dc:70:36:52:
         c5:64:2a:01:d1:6a:0e:86:dc:05:d2:ad:13:c3:f4:19:a2:3f:
         5a:56:ab:44:46:3d:9c:72:5a:b6:f4:6b:41:d0:ce:a4:5b:19:
         60:33:43:ce:42:1a:4b:47:2a:0c:44:8d:f8:70:84:c2:03:e1:
         be:71:81:96:bd:0b:a1:c9:76:d7:36:84:03:7d:99:63:4e:4d:
         69:1b:a2:7e:22:66:68:cf:40:85:c0:8b:84:57:c2:b3:32:65:
         69:bd:57:92:d7:4f:1d:d6:3d:5d:7c:82:ff:02:e5:4d:ec:e4:
         f9:11:98:10:9c:3a:c0:c6:ff:a6:e7:cd:59:45:24:95:6b:e9:
         a7:d8:22:38:91:01:c8:35:ef:66:80:0a:09:82:f7:2d:db:86:
         4d:43:9e:a3:cc:1a:31:cf:fa:42:fb:50:59:74:8f:b8:fc:a8:
         c6:13:fc:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 19:56:04 2026 by rpki-client