Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e6e2c8e3-cce6-4734-bf05-d45daaa2af3e/c66a1e6a-63f9-3eb4-952d-3ca62300c41f.roa
File:                     c66a1e6a-63f9-3eb4-952d-3ca62300c41f.roa (raw, json)
Hash identifier:          MxKanrfkPVuVc5qovwD1QknfwLIjdlsOMv3WGIQ4E94=
Subject key identifier:   A6:BB:C7:2F:76:F4:C7:B6:E0:1B:1F:C9:92:ED:F3:63:71:14:CB:1E
Certificate issuer:       /CN=e6e2c8e3-cce6-4734-bf05-d45daaa2af3e
Certificate serial:       010D0C9F4328584E6F3A1E06317EA09E05C9A480
Authority key identifier: BA:4F:D9:5B:71:8D:D4:4B:C8:0C:E0:4A:B2:B2:53:3A:15:9A:6A:4A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e6e2c8e3-cce6-4734-bf05-d45daaa2af3e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e6e2c8e3-cce6-4734-bf05-d45daaa2af3e/c66a1e6a-63f9-3eb4-952d-3ca62300c41f.roa
Signing time:             Wed 08 Jul 2026 21:00:12 +0000
ROA not before:           Wed 08 Jul 2026 21:00:12 +0000
ROA not after:            Tue 06 Oct 2026 21:00:12 +0000
asID:                     400113
IP address blocks:        23.249.173.0/24 maxlen: 24
                          2602:fd86:1::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e6e2c8e3-cce6-4734-bf05-d45daaa2af3e/e6e2c8e3-cce6-4734-bf05-d45daaa2af3e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e6e2c8e3-cce6-4734-bf05-d45daaa2af3e/e6e2c8e3-cce6-4734-bf05-d45daaa2af3e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e6e2c8e3-cce6-4734-bf05-d45daaa2af3e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:6f:3a:1e:06:31:7e:a0:9e:05:c9:a4:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e6e2c8e3-cce6-4734-bf05-d45daaa2af3e
        Validity
            Not Before: Jul  8 21:00:12 2026 GMT
            Not After : Oct  6 21:00:12 2026 GMT
        Subject: CN=8ff9b6c9-33fa-4e66-8bd8-a43df2be40b5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:b9:39:a8:be:be:c6:97:f1:da:0d:00:ee:ad:
                    13:a5:20:54:fc:7b:b5:c1:9a:d1:07:2a:1f:96:e4:
                    7c:46:6f:3a:17:59:7d:6a:34:d0:2a:14:ad:98:95:
                    19:86:2d:7d:18:c3:a5:7b:90:51:a7:0f:1e:f2:a5:
                    97:ea:9c:e2:93:a7:58:be:8b:87:ba:b4:c1:4f:fc:
                    be:eb:e7:38:8f:13:c3:af:df:e4:11:f0:a1:4f:a6:
                    b1:02:1d:74:6c:6c:3f:15:82:f8:e7:a3:e8:89:64:
                    c1:16:61:5a:a4:9c:61:6e:81:4a:f0:8c:9a:84:24:
                    c8:a9:5c:9f:bb:2b:f7:29:31:9d:1b:12:24:f9:b1:
                    ca:ea:73:c5:1d:d1:71:45:d9:8a:25:ed:b1:21:ce:
                    59:86:5d:31:a4:3c:bc:1f:11:d6:7c:94:cc:17:df:
                    6f:85:23:07:a5:7e:e4:4a:06:41:38:61:20:4a:0f:
                    a4:61:9b:f5:d0:3a:50:68:bd:49:3f:a7:6d:28:a9:
                    e8:77:d7:70:a1:4a:ba:6f:c9:2b:91:7b:7e:b5:ff:
                    8e:bd:0f:7e:4f:70:af:30:ca:31:3d:86:41:ca:53:
                    68:43:0f:96:8b:e9:ad:16:ee:4f:1d:3a:b4:22:2c:
                    e7:65:c0:18:82:cd:f1:cb:d5:67:6a:3c:4c:f1:94:
                    06:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:BB:C7:2F:76:F4:C7:B6:E0:1B:1F:C9:92:ED:F3:63:71:14:CB:1E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e6e2c8e3-cce6-4734-bf05-d45daaa2af3e/c66a1e6a-63f9-3eb4-952d-3ca62300c41f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e6e2c8e3-cce6-4734-bf05-d45daaa2af3e/e6e2c8e3-cce6-4734-bf05-d45daaa2af3e.crl

            X509v3 Authority Key Identifier:
                keyid:BA:4F:D9:5B:71:8D:D4:4B:C8:0C:E0:4A:B2:B2:53:3A:15:9A:6A:4A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e6e2c8e3-cce6-4734-bf05-d45daaa2af3e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.249.173.0/24
                IPv6:
                  2602:fd86:1::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a5:63:88:56:91:fa:44:38:4b:fd:84:8c:89:39:44:28:e4:fa:
         4a:21:83:3a:05:11:57:2b:cd:1e:ce:6c:48:8d:8a:9c:62:c7:
         c3:6c:c8:5c:8d:58:31:3d:d0:09:c9:e9:27:5b:10:b1:3c:b3:
         e4:fa:e7:df:11:cd:cc:f4:dc:4a:e9:f6:11:b7:f5:5a:94:76:
         ee:6a:4f:8d:aa:8f:a7:71:b3:1b:27:3b:b7:df:6f:b6:23:fe:
         8f:25:a4:34:9d:0a:84:22:c9:93:04:d6:50:56:5b:e6:80:f4:
         ce:a4:36:e9:8d:be:2a:61:dd:13:ed:2d:f1:db:fa:ff:3f:82:
         55:f3:50:4d:a5:ee:31:56:65:0d:1f:04:a6:af:44:2b:74:32:
         24:70:b5:a1:e6:c1:cf:27:61:5f:44:11:35:1d:49:d4:06:95:
         a2:eb:1d:4e:8e:e0:95:1d:17:b8:3e:de:41:05:c3:02:a4:00:
         fb:b0:75:b4:57:73:32:29:a9:b8:ce:78:8e:b6:6f:9a:63:2b:
         05:7a:43:54:98:1f:fc:6a:5d:cb:9a:78:96:f0:be:d6:ab:7d:
         37:9d:7c:30:9c:98:79:db:29:c1:a2:01:6d:03:4c:69:28:4b:
         75:d5:9e:c3:2e:e5:b0:de:e3:68:d7:e9:af:bf:be:e5:7b:53:
         59:df:a3:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 19:08:58 2026 by rpki-client