Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/85faca83-186c-473a-88cc-290a53538b08/669c2b40-1aaa-3262-8b3d-35880181fecc.roa
File:                     669c2b40-1aaa-3262-8b3d-35880181fecc.roa (raw, json)
Hash identifier:          l/i2TLLmY5eYzBrEGUGD6KG7nBJZfwixws169C9a5LE=
Subject key identifier:   8A:12:8B:57:56:1C:54:F1:39:0A:33:83:A5:64:F5:DA:AC:4F:48:21
Certificate issuer:       /CN=85faca83-186c-473a-88cc-290a53538b08
Certificate serial:       010D0C9F4328584D8A67641D04AD9C5B70EDD280
Authority key identifier: 2B:06:F7:85:C5:E3:D4:4A:F0:DA:07:82:22:97:1E:1F:40:6D:99:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/85faca83-186c-473a-88cc-290a53538b08.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/85faca83-186c-473a-88cc-290a53538b08/669c2b40-1aaa-3262-8b3d-35880181fecc.roa
Signing time:             Fri 17 Apr 2026 21:51:27 +0000
ROA not before:           Fri 17 Apr 2026 21:51:27 +0000
ROA not after:            Thu 16 Jul 2026 21:51:27 +0000
asID:                     20295
IP address blocks:        199.6.32.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/85faca83-186c-473a-88cc-290a53538b08/85faca83-186c-473a-88cc-290a53538b08.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/85faca83-186c-473a-88cc-290a53538b08/85faca83-186c-473a-88cc-290a53538b08.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/85faca83-186c-473a-88cc-290a53538b08.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:8a:67:64:1d:04:ad:9c:5b:70:ed:d2:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=85faca83-186c-473a-88cc-290a53538b08
        Validity
            Not Before: Apr 17 21:51:27 2026 GMT
            Not After : Jul 16 21:51:27 2026 GMT
        Subject: CN=0fb2d40b-a939-446d-abc9-67fd5ea7ccf3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:bd:e5:3c:e3:57:cd:ad:55:d2:29:f7:04:53:
                    d7:ec:fa:1b:bb:13:44:d0:1a:30:89:2b:4d:7b:38:
                    d4:f4:d6:c2:96:a2:ba:b2:dc:5b:b9:6a:56:e4:ba:
                    2a:68:12:04:46:15:6d:34:92:75:3b:cf:92:4d:af:
                    ea:55:cf:31:32:cb:9f:e2:d7:d9:6b:35:eb:48:c4:
                    d5:a1:c4:d3:0c:47:65:d9:96:d2:18:c9:02:33:18:
                    fc:85:23:d2:a4:47:76:2d:4a:a5:af:a9:6b:d5:3f:
                    a4:e1:0c:97:d5:c5:2c:6c:7d:04:ad:05:1c:83:3f:
                    31:9c:a9:54:66:b3:b3:e3:f1:8e:f3:18:8c:67:0b:
                    85:c0:65:27:c0:9b:23:6a:e2:af:ea:86:27:5c:63:
                    d4:5d:de:aa:4e:1d:38:40:dd:ec:a0:b8:57:6a:ad:
                    0e:1c:41:de:95:8f:c0:1e:1e:9f:45:97:d3:3c:8e:
                    5d:9e:74:13:c6:35:f7:21:8e:05:14:30:30:16:ff:
                    c2:88:87:3f:b2:dd:3b:57:d3:36:9f:df:29:a2:62:
                    8f:a5:71:6a:2b:b3:c6:45:3e:48:5c:bf:05:82:76:
                    78:e5:c8:b9:91:d4:9a:c4:e7:33:2a:bd:18:b8:0d:
                    14:01:c8:64:2a:e2:cf:00:66:00:82:dd:3a:f1:49:
                    0d:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:12:8B:57:56:1C:54:F1:39:0A:33:83:A5:64:F5:DA:AC:4F:48:21
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/85faca83-186c-473a-88cc-290a53538b08/669c2b40-1aaa-3262-8b3d-35880181fecc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/85faca83-186c-473a-88cc-290a53538b08/85faca83-186c-473a-88cc-290a53538b08.crl

            X509v3 Authority Key Identifier:
                keyid:2B:06:F7:85:C5:E3:D4:4A:F0:DA:07:82:22:97:1E:1F:40:6D:99:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/85faca83-186c-473a-88cc-290a53538b08.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.6.32.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9c:08:27:e6:02:89:2a:73:e8:d2:32:d0:94:00:3e:1e:15:a9:
         cb:a5:1d:23:06:de:9a:28:7d:4a:37:c3:15:47:9f:37:34:56:
         18:16:3c:ca:e4:bb:f2:ae:1b:22:af:b0:82:af:d8:97:b5:21:
         c1:47:dc:7d:b9:03:8a:22:0d:31:2b:16:f8:49:98:06:56:32:
         83:b2:47:82:84:e7:3f:e0:d4:00:61:5d:98:b7:06:73:d8:6e:
         8d:32:eb:a9:cb:25:5b:76:81:08:bc:c3:a8:22:33:0d:9d:41:
         eb:a9:08:9e:50:33:e8:31:a7:27:8e:f4:22:5e:76:95:c5:a2:
         7a:4f:f3:3c:51:a0:9c:ca:92:b7:74:f6:5a:cd:ad:0c:5e:4a:
         72:84:5c:f3:48:25:6f:a2:31:79:b9:ff:5d:35:72:77:6e:3d:
         e4:04:2e:4a:5d:24:80:b0:92:10:39:9e:f5:26:72:69:38:b0:
         08:8c:a0:ce:09:1b:6b:3e:26:0f:87:2c:c1:2a:86:46:e1:b7:
         2a:8c:45:6f:f1:bc:e6:4a:bf:1c:d4:df:f1:55:ae:05:1c:ce:
         a3:17:f5:10:c5:af:e2:0e:47:3b:7b:cf:6c:7d:cd:c9:2a:e5:
         d8:c1:6d:b0:8d:52:5e:9e:0a:a6:a2:68:7c:f6:9c:24:00:9f:
         1e:7d:59:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:01:08 2026 by rpki-client