Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1d6338a5-7c60-4dc5-b1d8-1c504a4ef345/91060e77-6af5-3ef6-8275-d0247fe3a283.roa
File:                     91060e77-6af5-3ef6-8275-d0247fe3a283.roa (raw, json)
Hash identifier:          f4rARcjc49N4kzmCmEX6KYrQe+RrLm3TTAZlGiTEXlY=
Subject key identifier:   83:FE:89:77:0A:33:8D:80:C6:7B:6A:ED:13:D2:94:39:A7:AA:53:C2
Certificate issuer:       /CN=1d6338a5-7c60-4dc5-b1d8-1c504a4ef345
Certificate serial:       010D0C9F4328584E8F55023A76BEE5DAE2DA96C0
Authority key identifier: D9:DF:7B:A3:3A:F3:04:11:93:71:82:70:32:54:EF:82:41:2D:5F:53
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1d6338a5-7c60-4dc5-b1d8-1c504a4ef345.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1d6338a5-7c60-4dc5-b1d8-1c504a4ef345/91060e77-6af5-3ef6-8275-d0247fe3a283.roa
Signing time:             Mon 20 Jul 2026 09:00:11 +0000
ROA not before:           Mon 20 Jul 2026 09:00:11 +0000
ROA not after:            Sun 18 Oct 2026 09:00:11 +0000
asID:                     11983
IP address blocks:        71.18.125.0/24 maxlen: 24
                          2605:340:f0b2::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1d6338a5-7c60-4dc5-b1d8-1c504a4ef345/1d6338a5-7c60-4dc5-b1d8-1c504a4ef345.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1d6338a5-7c60-4dc5-b1d8-1c504a4ef345/1d6338a5-7c60-4dc5-b1d8-1c504a4ef345.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1d6338a5-7c60-4dc5-b1d8-1c504a4ef345.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:8f:55:02:3a:76:be:e5:da:e2:da:96:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1d6338a5-7c60-4dc5-b1d8-1c504a4ef345
        Validity
            Not Before: Jul 20 09:00:11 2026 GMT
            Not After : Oct 18 09:00:11 2026 GMT
        Subject: CN=e226fd7e-e02d-47bf-9594-a40d00e2838c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:5a:56:bb:11:16:d2:7c:6b:ad:cc:9c:d1:6e:
                    02:9d:af:e2:24:56:3f:59:be:c3:72:96:83:68:a1:
                    69:1f:6c:fd:4d:fc:ec:63:8c:65:66:dc:92:46:f5:
                    64:01:54:02:d4:40:b3:5e:76:b8:d3:38:1d:6a:cb:
                    3b:72:87:52:37:6a:5b:bc:7c:d9:08:a9:e8:69:99:
                    56:87:d4:a6:bc:53:dc:3e:1a:c9:43:ff:54:b8:91:
                    6c:f4:fa:8c:8e:8a:23:fc:0a:5b:f2:73:f3:1c:38:
                    81:d3:28:f6:d8:a8:6d:f9:51:68:42:6d:34:b5:45:
                    39:49:47:58:37:ab:fa:4e:01:2e:4c:67:8d:b2:75:
                    9c:4e:fb:27:04:0a:07:b3:73:76:65:69:1a:93:0d:
                    3c:47:b9:3f:3c:ab:69:48:d1:9f:86:ea:a8:c0:bf:
                    33:f7:dc:79:29:03:d8:63:2f:34:ed:ec:b6:db:9f:
                    0d:cc:b1:81:2d:bb:c4:ee:19:0a:50:ec:81:76:70:
                    af:97:14:54:34:51:32:70:5e:c0:4d:5f:6e:a6:c6:
                    24:bf:9f:2e:ba:f3:89:7a:67:df:cb:92:8a:11:1b:
                    bd:62:d1:20:87:95:6a:59:9f:2e:a4:be:dc:33:4d:
                    b9:9e:a5:93:e4:61:f3:a5:79:7b:4c:15:d5:30:75:
                    e9:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:FE:89:77:0A:33:8D:80:C6:7B:6A:ED:13:D2:94:39:A7:AA:53:C2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1d6338a5-7c60-4dc5-b1d8-1c504a4ef345/91060e77-6af5-3ef6-8275-d0247fe3a283.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1d6338a5-7c60-4dc5-b1d8-1c504a4ef345/1d6338a5-7c60-4dc5-b1d8-1c504a4ef345.crl

            X509v3 Authority Key Identifier:
                keyid:D9:DF:7B:A3:3A:F3:04:11:93:71:82:70:32:54:EF:82:41:2D:5F:53

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1d6338a5-7c60-4dc5-b1d8-1c504a4ef345.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  71.18.125.0/24
                IPv6:
                  2605:340:f0b2::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a4:ff:2f:55:03:65:c3:55:ef:b5:e6:dd:bc:e0:7d:53:59:06:
         43:2e:67:d0:c6:e7:bd:f4:de:b8:09:55:a2:13:90:3d:66:3a:
         db:40:83:38:71:ab:6b:3f:6c:4a:10:38:e4:10:d1:91:f7:f2:
         43:9d:71:a1:52:1c:66:5f:a7:d6:3e:46:a1:84:27:99:05:b3:
         7f:d8:6a:e0:51:64:e5:f4:93:b3:ec:f9:77:86:73:b6:06:e6:
         ac:37:c2:04:cc:0f:69:13:e2:f9:d7:f1:84:d2:7c:6f:d7:5d:
         b8:85:f0:6c:3c:0c:45:73:92:3d:be:a0:ad:5c:ab:43:6a:48:
         a2:c9:c4:13:d0:d1:91:b1:f8:9d:31:6a:85:be:76:15:07:95:
         6e:d9:b8:47:bf:02:39:74:b7:95:c2:72:77:e0:3a:25:8f:2b:
         e6:e7:de:62:4d:c7:8a:09:21:8d:49:86:6b:1e:ee:82:c9:b4:
         f2:78:a3:57:11:3e:99:97:22:84:4f:15:87:32:e7:00:bc:c6:
         75:bc:f4:f1:71:0e:a3:23:09:d8:05:58:14:f4:a2:c5:c6:7a:
         72:e6:59:3a:b9:a8:7d:f6:76:4d:1e:c5:70:09:0d:08:be:05:
         45:27:9c:20:d0:0e:6e:45:51:1b:35:68:12:fa:66:07:a9:fc:
         1f:41:97:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 19:13:31 2026 by rpki-client