Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/139d153d-7ded-48c0-bf5d-dd92520035dc/de8fe0c1-1b10-3c56-9aa6-46f7bf008889.roa
File:                     de8fe0c1-1b10-3c56-9aa6-46f7bf008889.roa (raw, json)
Hash identifier:          VNYyf2OjPcquAEpysyfruIoqfxVK9Hm4pSuYIWy65Tc=
Subject key identifier:   A5:26:81:BD:6D:F2:6F:4F:09:B9:42:44:51:64:6E:D0:0A:10:49:3F
Certificate issuer:       /CN=139d153d-7ded-48c0-bf5d-dd92520035dc
Certificate serial:       010D0C9F4328584E885A42F5EE40993412ED4040
Authority key identifier: 15:C8:EB:46:92:52:98:6D:18:88:5B:86:D8:C3:D2:F0:8C:58:C7:E2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/139d153d-7ded-48c0-bf5d-dd92520035dc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/139d153d-7ded-48c0-bf5d-dd92520035dc/de8fe0c1-1b10-3c56-9aa6-46f7bf008889.roa
Signing time:             Fri 17 Jul 2026 21:00:12 +0000
ROA not before:           Fri 17 Jul 2026 21:00:12 +0000
ROA not after:            Thu 15 Oct 2026 21:00:12 +0000
asID:                     395712
IP address blocks:        66.199.236.0/22 maxlen: 22
                          66.199.236.0/24 maxlen: 24
                          66.199.237.0/24 maxlen: 24
                          66.199.238.0/24 maxlen: 24
                          66.199.239.0/24 maxlen: 24
                          96.45.64.0/22 maxlen: 22
                          96.45.64.0/24 maxlen: 24
                          96.45.67.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/139d153d-7ded-48c0-bf5d-dd92520035dc/139d153d-7ded-48c0-bf5d-dd92520035dc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/139d153d-7ded-48c0-bf5d-dd92520035dc/139d153d-7ded-48c0-bf5d-dd92520035dc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/139d153d-7ded-48c0-bf5d-dd92520035dc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:88:5a:42:f5:ee:40:99:34:12:ed:40:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=139d153d-7ded-48c0-bf5d-dd92520035dc
        Validity
            Not Before: Jul 17 21:00:12 2026 GMT
            Not After : Oct 15 21:00:12 2026 GMT
        Subject: CN=39edbd3a-d38b-479f-9c84-d65dcb0712b2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:73:c7:9e:7e:57:32:c5:32:53:b8:5f:2e:e7:
                    32:f8:93:e2:4b:8d:9f:5a:b6:b3:1e:f3:a5:54:82:
                    e5:9f:b3:e7:92:72:ec:88:3a:aa:a0:9d:d7:63:8d:
                    0e:aa:32:48:3d:22:6d:ae:9c:b4:a6:7c:de:b6:74:
                    49:56:af:2e:41:3f:33:40:26:94:71:15:a1:17:39:
                    98:e1:14:91:7d:ec:41:61:6d:5f:4d:c1:0a:60:45:
                    0d:2a:59:01:aa:c6:e6:da:21:b7:33:cc:ca:e9:8a:
                    83:22:8c:10:cc:33:26:b9:20:f9:70:28:0f:12:04:
                    09:b4:6d:74:49:3d:6a:21:62:f2:c2:28:33:b6:f9:
                    23:45:48:ea:b9:71:29:7c:b6:fd:8a:22:37:2c:08:
                    a7:02:4a:3d:0d:91:3f:ce:a5:71:fa:77:a4:c2:8f:
                    dc:03:9c:b3:14:c8:9b:21:f8:db:f2:90:6e:5b:47:
                    bc:a3:12:72:a6:d3:15:59:10:16:72:ec:4f:9e:07:
                    69:62:87:c0:06:06:1c:80:fd:45:f1:52:fa:e6:1a:
                    71:4d:2f:5c:ac:b9:2c:2c:92:b1:62:07:85:15:68:
                    12:33:fc:49:14:8d:02:ef:cc:03:bf:69:64:04:79:
                    59:ce:47:ed:00:c4:05:16:a5:0e:10:02:ce:75:ab:
                    a6:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:26:81:BD:6D:F2:6F:4F:09:B9:42:44:51:64:6E:D0:0A:10:49:3F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/139d153d-7ded-48c0-bf5d-dd92520035dc/de8fe0c1-1b10-3c56-9aa6-46f7bf008889.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/139d153d-7ded-48c0-bf5d-dd92520035dc/139d153d-7ded-48c0-bf5d-dd92520035dc.crl

            X509v3 Authority Key Identifier:
                keyid:15:C8:EB:46:92:52:98:6D:18:88:5B:86:D8:C3:D2:F0:8C:58:C7:E2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/139d153d-7ded-48c0-bf5d-dd92520035dc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.199.236.0/22
                  96.45.64.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         17:95:b2:d6:1e:bf:04:35:40:fb:15:67:8e:c0:59:ee:c0:bf:
         f6:99:e9:6c:d0:9a:de:91:65:cc:1d:fb:59:95:ec:46:e0:63:
         ec:53:e3:09:af:ed:1f:6f:6c:23:5e:e6:f1:98:66:1a:15:08:
         03:f4:25:f7:49:a0:e8:84:90:ab:e6:f0:9c:17:4a:1f:3b:e7:
         6a:02:bf:94:57:c4:38:9c:bb:1e:0f:e9:d9:12:52:aa:1d:5c:
         36:02:df:55:28:b8:7c:61:b9:29:aa:d1:48:36:3a:7a:c3:fa:
         32:87:e7:28:cb:e2:13:7f:fa:fe:ca:81:48:ae:82:c5:36:c6:
         89:8b:96:27:6a:65:2d:a6:0c:84:41:87:69:25:5f:70:e3:05:
         45:7a:16:e3:2c:d6:b9:11:c1:ad:7f:f1:68:ee:23:82:79:e3:
         bb:5d:0b:2a:a9:4c:b9:ba:72:25:60:df:37:0a:3d:b2:82:24:
         9a:7c:47:27:1e:88:f8:d0:f0:0e:c4:63:be:8c:b3:83:08:ce:
         d5:03:be:a2:ee:fa:51:61:7b:74:72:9c:5d:b2:5f:c7:f3:ba:
         8f:e0:9e:a5:50:46:63:c9:42:8c:99:18:0e:9b:d9:0b:26:81:
         f5:9a:be:63:85:7b:10:1e:cd:5e:2e:32:14:cb:15:09:e9:76:
         0e:94:1b:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 15:07:04 2026 by rpki-client