Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460/0d5f7e7f-04fd-3eb3-84fb-a02a50f0c967.roa
File:                     0d5f7e7f-04fd-3eb3-84fb-a02a50f0c967.roa (raw, json)
Hash identifier:          KjY6neIbjQhnTY7R6auzHkeZ8AdtFdVKronekiLRNUM=
Subject key identifier:   E4:FB:99:08:6C:2F:45:A5:6B:F3:8F:16:6F:BA:36:FA:22:FF:A6:9F
Certificate issuer:       /CN=d1f886df-6c58-4ea7-9d1f-0659e2324460
Certificate serial:       010D0C9F4328584E104EDC5D4CB5A37B47D1BA80
Authority key identifier: DE:16:51:20:56:83:D6:08:13:E6:42:45:8E:FD:16:70:EE:87:6F:BB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460/0d5f7e7f-04fd-3eb3-84fb-a02a50f0c967.roa
Signing time:             Thu 04 Jun 2026 21:00:12 +0000
ROA not before:           Thu 04 Jun 2026 21:00:12 +0000
ROA not after:            Wed 02 Sep 2026 21:00:12 +0000
asID:                     6621
IP address blocks:        67.44.0.0/20 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460/d1f886df-6c58-4ea7-9d1f-0659e2324460.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460/d1f886df-6c58-4ea7-9d1f-0659e2324460.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 16 Jun 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:10:4e:dc:5d:4c:b5:a3:7b:47:d1:ba:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d1f886df-6c58-4ea7-9d1f-0659e2324460
        Validity
            Not Before: Jun  4 21:00:12 2026 GMT
            Not After : Sep  2 21:00:12 2026 GMT
        Subject: CN=0197cf3d-0e74-42ea-8652-f4a31d4a83a4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:50:55:ef:df:1b:1e:12:15:25:de:53:e6:af:
                    a7:8d:ac:98:f9:2f:54:05:be:d1:08:d7:7c:d2:db:
                    d7:f6:f7:f7:d5:2f:9d:cb:cd:71:68:4e:94:27:62:
                    6c:8a:3b:2d:02:bc:94:df:28:1c:6e:63:bf:de:f0:
                    8e:42:1a:ea:9b:3f:21:97:ef:43:78:8a:a1:83:b0:
                    8a:53:fe:1a:f6:33:ca:0f:99:54:6a:5c:c0:ca:df:
                    3b:34:63:fa:28:85:41:93:9a:70:a4:b2:fe:ae:98:
                    55:a5:d5:96:29:3e:f3:8e:88:c5:f6:78:76:f4:6b:
                    b4:46:0e:19:48:91:9f:44:75:17:46:24:2e:09:73:
                    e3:55:3f:49:f2:78:09:c5:3f:e4:09:3f:7b:81:17:
                    f5:71:80:81:63:ef:ec:84:c2:b0:7b:4f:bf:f3:57:
                    61:ed:ed:9f:a1:1e:16:40:a8:b9:7e:7b:dd:f8:ac:
                    5d:89:0c:bb:22:5d:a6:87:e1:10:d9:5e:1b:43:88:
                    66:af:ff:16:02:67:4d:4c:0f:13:ef:f2:60:73:97:
                    61:c3:59:e9:17:7a:c4:7e:18:f2:b9:23:3f:61:8e:
                    39:43:b9:22:a8:27:28:45:68:1d:6c:c6:a0:3b:5a:
                    12:f4:82:ef:15:de:34:c7:80:79:f9:98:b3:f3:81:
                    77:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:FB:99:08:6C:2F:45:A5:6B:F3:8F:16:6F:BA:36:FA:22:FF:A6:9F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460/0d5f7e7f-04fd-3eb3-84fb-a02a50f0c967.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460/d1f886df-6c58-4ea7-9d1f-0659e2324460.crl

            X509v3 Authority Key Identifier:
                keyid:DE:16:51:20:56:83:D6:08:13:E6:42:45:8E:FD:16:70:EE:87:6F:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.44.0.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         85:c7:c6:11:d1:ff:99:2d:39:cd:34:a4:cb:bd:05:e0:a2:82:
         60:d1:35:a8:2c:0b:fb:86:35:6d:5c:ec:13:d8:84:2f:f9:04:
         fc:7e:c0:81:c8:0c:0c:d3:7f:68:d3:9d:62:32:6d:b6:83:f1:
         c0:4d:04:aa:f8:67:0d:9a:20:09:ee:52:94:4c:0c:23:ed:e1:
         98:9d:9c:9c:47:d1:41:d3:7b:32:a7:2f:66:6c:31:e7:ed:b9:
         2a:c1:cb:0e:00:fe:b6:eb:d7:20:bb:5f:41:72:5f:fa:8e:ee:
         ce:8b:4f:9d:44:b8:12:8b:47:78:51:7c:b8:cc:91:02:e2:de:
         a3:d6:22:c6:83:9b:40:7b:85:6b:80:42:d4:21:d2:89:88:83:
         8c:e3:27:16:be:9a:f3:53:72:8d:c7:1d:13:21:95:97:9f:50:
         46:6f:d9:f9:f7:16:3f:a6:de:47:44:57:c0:f3:83:4d:6d:fa:
         e5:14:35:6e:78:57:75:8a:4a:ca:67:01:ac:11:dc:8e:7c:e1:
         86:51:be:15:c0:88:e5:3d:77:9c:bd:96:4a:66:fb:8b:64:cf:
         6b:0c:c4:6f:d0:18:05:11:34:30:73:86:61:d0:b9:62:99:b4:
         52:0b:83:e3:e5:86:e5:15:97:e3:7d:d3:26:23:e0:2a:0b:e0:
         c3:5f:6e:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 22:25:31 2026 by rpki-client