Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460/d0848359-cc87-3030-8bdc-18cf636b6387.roa
File:                     d0848359-cc87-3030-8bdc-18cf636b6387.roa (raw, json)
Hash identifier:          WUv8ONoKtb+AKH3FyJSLgMAUeln8oRReYw6cJp2M+Gg=
Subject key identifier:   A9:63:79:81:FB:AA:D6:CA:FB:90:27:41:EC:53:CF:B2:7E:87:B9:FC
Certificate issuer:       /CN=d1f886df-6c58-4ea7-9d1f-0659e2324460
Certificate serial:       010D0C9F4328584EA787D4837A91753B5D93F200
Authority key identifier: DE:16:51:20:56:83:D6:08:13:E6:42:45:8E:FD:16:70:EE:87:6F:BB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460/d0848359-cc87-3030-8bdc-18cf636b6387.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     6621
IP address blocks:        67.44.0.0/17 maxlen: 17
                          67.44.128.0/21 maxlen: 21
                          67.44.160.0/22 maxlen: 22
                          67.44.164.0/22 maxlen: 22
                          67.44.168.0/22 maxlen: 22
                          67.44.172.0/22 maxlen: 22
                          67.44.176.0/22 maxlen: 22
                          67.44.180.0/22 maxlen: 22
                          67.44.184.0/22 maxlen: 22
                          67.44.188.0/22 maxlen: 22
                          67.44.192.0/22 maxlen: 22
                          67.44.196.0/22 maxlen: 22
                          67.44.200.0/22 maxlen: 22
                          67.44.204.0/22 maxlen: 22
                          67.44.208.0/22 maxlen: 22
                          67.44.212.0/22 maxlen: 22
                          67.44.216.0/22 maxlen: 22
                          67.44.220.0/22 maxlen: 22
                          67.44.224.0/22 maxlen: 22
                          67.44.228.0/22 maxlen: 22
                          67.44.232.0/22 maxlen: 22
                          67.44.236.0/22 maxlen: 22
                          67.44.240.0/22 maxlen: 22
                          67.44.244.0/22 maxlen: 22
                          67.44.248.0/22 maxlen: 22
                          67.44.252.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460/d1f886df-6c58-4ea7-9d1f-0659e2324460.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460/d1f886df-6c58-4ea7-9d1f-0659e2324460.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:87:d4:83:7a:91:75:3b:5d:93:f2:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d1f886df-6c58-4ea7-9d1f-0659e2324460
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=b5c1a180-400e-438d-95f8-be3c23ffa8f1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:dc:11:be:81:e2:22:da:bf:e5:4d:91:06:4c:
                    62:9a:1c:e0:21:d9:9d:43:f6:2f:5e:eb:a6:77:c6:
                    28:56:60:4c:0f:d2:00:b0:a2:e2:7e:f1:34:be:f1:
                    45:44:0e:01:9e:d3:e8:aa:e5:2e:de:c1:55:e6:1e:
                    22:07:27:4c:17:f6:e9:9c:af:a8:a9:56:c3:0c:4d:
                    1f:9a:4d:23:b9:95:3b:9e:79:21:6e:68:7c:91:3d:
                    c6:b5:27:39:45:bf:84:ad:d8:ea:d4:e3:5c:f0:34:
                    57:24:64:f2:8e:a5:9c:57:42:50:85:d7:e0:8e:b3:
                    5b:fd:61:cc:2e:d9:26:95:0a:6f:26:7b:69:df:4e:
                    ad:39:7b:bc:34:c6:dd:b7:fa:23:ec:84:8c:79:5a:
                    7b:63:bc:13:bb:2b:8e:93:4a:9d:0e:f4:95:58:01:
                    54:0f:65:60:a8:85:81:7d:df:16:08:d9:b1:d0:1e:
                    b0:fe:9e:bd:7e:7c:97:b9:0b:52:f9:2d:12:0e:69:
                    34:60:70:4a:9f:e9:88:81:07:20:7c:7a:32:6d:f0:
                    32:d9:69:18:06:72:77:ad:db:16:49:97:6c:f7:54:
                    1d:54:1e:38:39:3f:41:e3:14:a2:93:9d:8e:29:e9:
                    f2:bd:cf:a0:f8:18:fa:9d:7c:44:21:5d:fe:68:50:
                    24:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:63:79:81:FB:AA:D6:CA:FB:90:27:41:EC:53:CF:B2:7E:87:B9:FC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460/d0848359-cc87-3030-8bdc-18cf636b6387.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460/d1f886df-6c58-4ea7-9d1f-0659e2324460.crl

            X509v3 Authority Key Identifier:
                keyid:DE:16:51:20:56:83:D6:08:13:E6:42:45:8E:FD:16:70:EE:87:6F:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.44.0.0-67.44.135.255
                  67.44.160.0-67.44.255.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         48:3c:89:85:62:0d:e7:8d:f8:9f:fc:ea:9f:3d:06:e9:58:86:
         e3:02:0a:e5:eb:63:d9:a0:5b:71:e9:d1:3d:27:e7:27:2f:8f:
         4d:16:70:3a:71:a5:06:60:77:85:32:2c:c5:e7:3e:0d:f8:e4:
         48:02:f4:36:2e:1e:86:73:60:b3:b8:a1:66:c8:1e:db:b7:8d:
         67:50:6c:98:14:bf:1c:fa:95:9a:33:14:0f:67:83:36:4d:81:
         7f:44:12:ae:e8:a5:d1:96:24:a3:ae:a0:ab:b1:a4:2a:5c:0a:
         86:d3:07:18:34:af:6e:28:90:58:4e:a8:a8:15:29:08:e0:fd:
         4b:a6:8d:ad:79:6f:92:01:de:dc:8a:ca:bf:ce:19:a4:aa:2f:
         66:2f:fc:cf:f4:c4:36:7d:47:ab:82:4c:0f:e3:75:59:37:16:
         9a:3e:c9:ba:6f:e7:d9:3c:13:a6:1c:9a:31:30:64:e2:09:8e:
         f2:22:ae:43:2a:a2:97:87:1e:e8:b6:c1:98:c6:63:04:ea:38:
         61:a4:6b:ea:f5:10:71:51:51:c2:8a:60:15:57:86:ef:29:7a:
         e0:61:eb:f5:08:36:18:a1:3b:65:ae:5b:fe:1b:15:02:62:8f:
         3e:30:ad:1b:a7:22:2c:94:25:e5:d2:04:55:9b:28:6c:a2:c7:
         72:66:ea:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 12:31:10 2026 by rpki-client