Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9e1491d6-2ab7-4c14-bee6-122ee4531127/bbf39f86-d152-30ea-b2ae-861c6e7a4fc2.roa
File:                     bbf39f86-d152-30ea-b2ae-861c6e7a4fc2.roa (raw, json)
Hash identifier:          WaHxM+NhSE8AUwJCDB7ZmiQniPJysoVkT2WIVVnXHLc=
Subject key identifier:   7F:7E:66:D5:74:77:C9:53:14:7A:EA:F1:3E:24:02:45:72:66:F4:BE
Certificate issuer:       /CN=9e1491d6-2ab7-4c14-bee6-122ee4531127
Certificate serial:       010D0C9F4328584E736A2868B6EF4FD748648A80
Authority key identifier: C2:B5:FB:E5:85:57:E2:F0:2A:41:C4:C8:DA:D4:D7:06:C3:0E:9B:68
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9e1491d6-2ab7-4c14-bee6-122ee4531127.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9e1491d6-2ab7-4c14-bee6-122ee4531127/bbf39f86-d152-30ea-b2ae-861c6e7a4fc2.roa
Signing time:             Fri 10 Jul 2026 09:00:12 +0000
ROA not before:           Fri 10 Jul 2026 09:00:12 +0000
ROA not after:            Thu 08 Oct 2026 09:00:12 +0000
asID:                     396417
IP address blocks:        66.203.115.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9e1491d6-2ab7-4c14-bee6-122ee4531127/9e1491d6-2ab7-4c14-bee6-122ee4531127.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9e1491d6-2ab7-4c14-bee6-122ee4531127/9e1491d6-2ab7-4c14-bee6-122ee4531127.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9e1491d6-2ab7-4c14-bee6-122ee4531127.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:73:6a:28:68:b6:ef:4f:d7:48:64:8a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9e1491d6-2ab7-4c14-bee6-122ee4531127
        Validity
            Not Before: Jul 10 09:00:12 2026 GMT
            Not After : Oct  8 09:00:12 2026 GMT
        Subject: CN=d423cd52-bd29-4f98-8228-ed41ab87299d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:dd:cf:13:ed:07:fe:79:bf:93:ed:8d:bf:b3:
                    cb:e9:f7:f9:94:7f:5d:61:0c:e7:bc:41:18:fd:14:
                    62:05:35:c9:5a:cb:c4:25:3e:6c:f7:dd:d1:2d:96:
                    0d:27:09:5c:58:3e:50:91:b8:9d:1d:6a:18:a3:b1:
                    5a:3f:6c:76:44:17:cb:ad:30:56:e6:ec:c8:9e:a9:
                    9f:ad:46:2f:18:2b:a6:f2:d8:cf:ed:4f:2b:8c:34:
                    ea:e2:88:58:06:73:16:34:8b:5b:75:36:95:c1:5d:
                    9f:d9:bf:bc:76:c9:19:bf:59:d3:a2:7a:e0:cf:0e:
                    00:4f:f0:48:04:33:c2:02:7e:a4:9c:b7:5b:85:78:
                    61:fe:f6:4a:e6:4d:e7:af:50:4d:df:49:ea:d5:bd:
                    8b:65:f5:f7:57:c7:67:88:ea:ae:0f:ca:f2:7d:34:
                    7d:51:96:d6:0f:41:02:92:e3:87:19:22:55:fe:a7:
                    8b:8d:fa:5e:bf:56:2e:5e:f9:7c:12:2c:9c:a0:db:
                    b0:bd:90:22:28:4e:aa:ea:c4:58:74:af:33:20:4b:
                    98:17:b1:14:86:fc:8c:a6:22:81:26:7a:6b:dc:cd:
                    21:dc:71:c8:b7:6e:ad:ad:18:d6:8b:15:45:06:94:
                    4c:af:fa:df:ba:c0:d2:21:2e:c3:dc:d9:9b:43:9d:
                    46:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:7E:66:D5:74:77:C9:53:14:7A:EA:F1:3E:24:02:45:72:66:F4:BE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9e1491d6-2ab7-4c14-bee6-122ee4531127/bbf39f86-d152-30ea-b2ae-861c6e7a4fc2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9e1491d6-2ab7-4c14-bee6-122ee4531127/9e1491d6-2ab7-4c14-bee6-122ee4531127.crl

            X509v3 Authority Key Identifier:
                keyid:C2:B5:FB:E5:85:57:E2:F0:2A:41:C4:C8:DA:D4:D7:06:C3:0E:9B:68

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9e1491d6-2ab7-4c14-bee6-122ee4531127.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.203.115.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         85:a0:b2:2d:0e:a1:b5:70:29:55:30:f1:a6:b9:25:a3:47:08:
         51:01:39:96:48:c3:33:5e:b4:cc:ec:ec:a4:f2:9f:9f:ce:31:
         5c:c0:95:05:aa:89:33:6e:a4:de:95:fd:a4:70:ca:c2:01:e8:
         cd:a7:c2:9e:e3:3c:ae:63:57:20:f4:7b:c9:03:33:ce:b6:be:
         15:bb:90:ba:31:66:be:db:ef:7d:d1:39:b3:f5:84:98:d7:d0:
         e7:f1:95:c2:e8:ba:d2:e4:b4:68:ad:0b:14:d6:5f:ba:54:ed:
         68:81:93:ee:91:2b:78:4f:47:a7:b6:59:9d:3b:d1:39:be:09:
         b3:12:fb:f8:0d:54:09:60:98:23:0c:34:f9:b3:d1:7a:60:5f:
         71:04:53:90:09:49:02:d2:8e:c8:b8:e4:16:e6:98:5d:80:ec:
         b0:0f:23:78:14:ec:42:d1:04:b1:25:92:c5:8b:77:e9:b6:a9:
         02:34:f6:c1:2d:af:3c:5d:66:73:fa:01:ea:c4:e7:c4:b5:53:
         ea:40:85:4a:7d:8a:e0:30:a8:45:28:ff:cb:92:02:f4:b3:28:
         16:89:31:f8:58:03:56:62:3c:2b:7a:82:a6:9e:45:5b:83:8b:
         01:b9:1c:55:f6:c3:65:3f:22:f3:11:42:7d:98:a6:9b:87:47:
         d0:bc:71:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:37:33 2026 by rpki-client