Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/209f0328-0af3-4de3-a043-8072346acdf7/d5cf750d-bb6a-34eb-a4d8-5d0948567519.roa
File:                     d5cf750d-bb6a-34eb-a4d8-5d0948567519.roa (raw, json)
Hash identifier:          ccxiO0rW6HcVKPJfg385IrFHCoJuDRDSys0q4DVdj10=
Subject key identifier:   DD:88:DD:8C:48:86:9F:86:4F:F2:81:A3:39:CF:DA:CB:73:AC:3D:68
Certificate issuer:       /CN=209f0328-0af3-4de3-a043-8072346acdf7
Certificate serial:       010D0C9F4328584E2D9F1064B30B2B1785F31F80
Authority key identifier: B2:82:2A:D1:B2:36:29:4D:B4:48:4F:CE:41:CC:7A:22:94:4B:64:07
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/209f0328-0af3-4de3-a043-8072346acdf7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/209f0328-0af3-4de3-a043-8072346acdf7/d5cf750d-bb6a-34eb-a4d8-5d0948567519.roa
Signing time:             Mon 15 Jun 2026 09:00:12 +0000
ROA not before:           Mon 15 Jun 2026 09:00:12 +0000
ROA not after:            Sun 13 Sep 2026 09:00:12 +0000
asID:                     7782
IP address blocks:        66.230.80.0/20 maxlen: 20
                          66.230.96.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/209f0328-0af3-4de3-a043-8072346acdf7/209f0328-0af3-4de3-a043-8072346acdf7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/209f0328-0af3-4de3-a043-8072346acdf7/209f0328-0af3-4de3-a043-8072346acdf7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/209f0328-0af3-4de3-a043-8072346acdf7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:2d:9f:10:64:b3:0b:2b:17:85:f3:1f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=209f0328-0af3-4de3-a043-8072346acdf7
        Validity
            Not Before: Jun 15 09:00:12 2026 GMT
            Not After : Sep 13 09:00:12 2026 GMT
        Subject: CN=10e2d7be-52af-49e8-b1ff-23e49f01a8ae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:34:a2:b2:93:e9:51:06:a9:6c:be:51:44:7e:
                    5d:08:eb:ff:95:5d:90:d9:78:d0:88:aa:c2:24:c1:
                    bf:d4:95:fb:60:c8:c0:c1:e7:7c:21:1d:59:02:38:
                    01:fd:9d:a2:f2:e8:95:38:b7:14:3e:46:39:c0:8d:
                    e0:28:97:a9:0a:6e:36:70:30:8f:5e:e2:12:99:33:
                    a4:08:81:cc:a5:e1:44:0e:c4:93:df:93:cf:f8:d4:
                    ea:a0:fa:d9:1e:f3:c4:1c:81:24:f6:e1:1e:55:ec:
                    9d:84:30:62:3f:a1:cf:ed:2c:c8:ba:56:9c:cb:1b:
                    f6:7a:3f:67:9c:27:1e:6c:fc:54:36:ac:47:53:d4:
                    ff:c9:86:31:7b:64:eb:12:9a:82:66:4d:4e:05:7e:
                    56:84:73:52:e5:73:d1:39:a9:dc:90:fb:f2:0a:e6:
                    d0:fc:34:0d:30:10:80:3e:c1:0d:1b:19:dd:b1:38:
                    a9:6e:ea:d7:42:f0:97:8a:76:a8:73:a5:14:db:84:
                    c8:69:7f:20:d4:89:98:5e:a7:1e:b4:b8:a6:31:32:
                    85:9e:4b:a7:75:2e:fa:22:10:42:3c:57:41:b4:cc:
                    8e:42:0e:75:aa:25:43:5f:f2:97:3c:b1:5c:c5:60:
                    ff:b1:72:0b:da:67:de:79:a7:a8:24:73:7a:ac:d4:
                    29:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:88:DD:8C:48:86:9F:86:4F:F2:81:A3:39:CF:DA:CB:73:AC:3D:68
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/209f0328-0af3-4de3-a043-8072346acdf7/d5cf750d-bb6a-34eb-a4d8-5d0948567519.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/209f0328-0af3-4de3-a043-8072346acdf7/209f0328-0af3-4de3-a043-8072346acdf7.crl

            X509v3 Authority Key Identifier:
                keyid:B2:82:2A:D1:B2:36:29:4D:B4:48:4F:CE:41:CC:7A:22:94:4B:64:07

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/209f0328-0af3-4de3-a043-8072346acdf7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.230.80.0-66.230.127.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7f:5f:f9:7f:05:c8:3d:b0:ae:6b:4c:47:9f:05:19:f8:00:22:
         0c:52:24:6b:e5:7a:57:01:37:db:20:46:99:13:e9:3c:16:8e:
         03:60:ee:39:da:58:9b:37:09:b8:6f:ef:99:8a:c9:d6:fe:0e:
         12:ef:b3:2e:1c:06:de:87:79:17:bd:35:51:a1:14:9e:9f:82:
         39:49:6a:e3:95:49:60:7e:79:7d:13:7f:5f:44:8c:47:5d:72:
         04:95:fa:5f:34:91:83:c4:93:23:9a:0c:79:e7:92:2f:cd:af:
         82:c3:aa:35:6b:c9:f6:1d:c1:f0:5f:c7:1a:4d:ee:ac:fa:66:
         5c:4d:e8:e1:8e:a7:27:a2:03:05:8a:ed:2b:a0:fb:94:fd:e3:
         19:fe:54:c4:7c:16:10:7e:bb:b6:72:a7:fe:59:b7:f1:4a:85:
         7a:11:5d:6e:64:98:95:8e:9d:75:fb:78:75:b2:73:4a:16:23:
         d5:8f:c8:7b:02:84:af:cf:4e:5d:e4:30:b3:9f:06:e6:b0:ec:
         b2:d4:e0:0c:5b:bd:84:5b:d2:56:b5:cf:dd:c6:61:a6:ce:3f:
         4b:11:3a:bc:59:8d:0e:81:96:f9:e0:bc:b9:aa:a8:d8:09:f3:
         06:0d:62:b7:ba:10:0a:10:91:df:90:69:fe:63:22:bf:c0:10:
         51:a4:16:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 10:27:40 2026 by rpki-client