Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/3b8b53a3-66e9-3c77-a579-e7a7b8dabcf2.roa
File:                     3b8b53a3-66e9-3c77-a579-e7a7b8dabcf2.roa (raw, json)
Hash identifier:          VT4/h8bYxbr4u8YH/3f8g0ywyC3KGbxPMAn/oIoUgZY=
Subject key identifier:   7F:03:06:C8:05:DB:E1:D4:E4:FA:99:AF:CE:45:A4:B8:F7:1F:DD:72
Certificate issuer:       /CN=da370214-1d61-48bf-84a0-a60096ccaae7
Certificate serial:       010D0C9F4328584E8DEF97DEC5B34C2C18787EC0
Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/3b8b53a3-66e9-3c77-a579-e7a7b8dabcf2.roa
Signing time:             Sun 19 Jul 2026 21:00:12 +0000
ROA not before:           Sun 19 Jul 2026 21:00:12 +0000
ROA not after:            Sat 17 Oct 2026 21:00:12 +0000
asID:                     6079
IP address blocks:        66.253.64.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:8d:ef:97:de:c5:b3:4c:2c:18:78:7e:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7
        Validity
            Not Before: Jul 19 21:00:12 2026 GMT
            Not After : Oct 17 21:00:12 2026 GMT
        Subject: CN=6fdbfc5e-1ef3-42eb-8942-906dfdb1f52b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:59:fe:cb:e9:aa:b1:2f:78:27:d4:ad:8a:cc:
                    c7:e5:ba:a3:86:3c:d0:20:7b:4e:b8:da:4b:bf:d8:
                    22:49:17:bb:68:a3:0e:c6:95:dd:24:6c:96:ae:41:
                    3f:03:ca:e3:31:cb:54:04:86:2b:97:63:2e:34:0a:
                    84:7a:6d:c0:d0:f1:b1:f6:19:32:2e:a4:c6:1a:27:
                    75:16:82:bd:89:3e:02:14:cb:7f:36:84:80:40:ed:
                    f2:0d:94:b9:bd:8a:c2:e5:11:5e:d7:63:aa:8b:41:
                    d8:a4:90:17:df:50:9e:8f:0e:79:fa:14:95:66:5a:
                    6d:16:06:99:31:e4:9e:e5:22:ad:8a:0a:49:61:83:
                    3d:99:b1:50:d1:94:5f:c8:b8:52:82:db:73:df:18:
                    bd:77:28:9c:66:14:7a:df:48:4d:b2:65:4f:ac:0a:
                    cc:3d:9d:32:c6:09:0f:71:7c:82:9d:26:d3:f4:d8:
                    81:ab:0b:d4:34:fb:99:72:80:60:92:47:26:ce:e0:
                    34:bd:6c:3d:a0:80:2a:e3:1e:b6:42:c9:8e:12:d8:
                    ac:39:92:3f:87:1a:3e:01:d5:a5:ef:fe:28:98:3e:
                    16:52:93:8c:73:21:62:83:a3:3b:51:fe:28:9a:46:
                    8d:43:5e:a9:06:8a:23:cf:92:20:c7:42:3a:10:dc:
                    c9:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:03:06:C8:05:DB:E1:D4:E4:FA:99:AF:CE:45:A4:B8:F7:1F:DD:72
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/3b8b53a3-66e9-3c77-a579-e7a7b8dabcf2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl

            X509v3 Authority Key Identifier:
                keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.253.64.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a0:4b:37:da:bb:85:75:e4:16:e8:09:a3:7f:26:94:55:27:a0:
         f7:76:e5:e6:98:0c:c6:9f:57:f2:8d:e9:47:8c:da:26:99:2a:
         b4:82:d4:b2:0b:6e:78:a1:f1:f3:cf:ea:55:50:45:92:cd:2a:
         b3:bc:1d:6c:0f:c6:a4:5b:70:d1:e3:30:80:48:2c:93:3b:fb:
         39:04:8e:44:21:95:e4:51:b8:af:8a:4e:01:29:cb:3c:ea:53:
         39:fd:d5:93:92:d6:36:13:70:94:4f:4e:96:13:bd:03:b7:d3:
         1d:b6:11:8d:7e:6a:ed:33:2a:4c:0e:bc:6b:4d:85:6a:9d:ab:
         25:bb:7b:35:ff:93:df:63:f2:76:f0:1e:fb:47:37:44:ee:f6:
         75:38:96:d6:1c:b2:8a:7b:d4:fe:6c:9c:9c:09:9e:3d:39:0a:
         bf:cf:c9:3a:0c:c5:18:81:51:ea:c3:6c:47:30:16:3f:58:1b:
         2e:79:03:e6:e5:86:cb:be:f2:75:0b:bc:a9:a6:cb:88:e4:cc:
         96:9c:b3:4a:f7:7c:8a:8d:40:d4:54:19:98:b6:c1:b0:fd:92:
         74:70:77:f2:a1:b6:83:bf:b1:b0:56:25:20:bc:ee:88:0f:a6:
         89:c7:31:03:bc:f0:ea:ed:95:28:92:f9:e3:a6:5a:d9:a8:e2:
         7d:dd:43:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 08:59:08 2026 by rpki-client