Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8780f59d-efa1-4d8e-b7c0-66773735a31d/00fb5d69-be72-3724-b959-5abaccb05f5d.roa
File:                     00fb5d69-be72-3724-b959-5abaccb05f5d.roa (raw, json)
Hash identifier:          idj27O9DHmsgC2idNvgWbBzxnWNs3+mtffX6cLv6jhM=
Subject key identifier:   39:0D:AA:63:13:C7:2D:EE:68:D3:0A:A7:08:45:FB:D8:C9:41:9D:E6
Certificate issuer:       /CN=8780f59d-efa1-4d8e-b7c0-66773735a31d
Certificate serial:       010D0C9F4328584E0005E0FDE08DAA2565716DC0
Authority key identifier: 6E:AA:38:FA:81:26:FD:B9:F1:3B:FC:A7:1E:F9:74:FC:4E:6D:D4:92
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8780f59d-efa1-4d8e-b7c0-66773735a31d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8780f59d-efa1-4d8e-b7c0-66773735a31d/00fb5d69-be72-3724-b959-5abaccb05f5d.roa
Signing time:             Sat 30 May 2026 01:00:10 +0000
ROA not before:           Sat 30 May 2026 01:00:10 +0000
ROA not after:            Fri 28 Aug 2026 01:00:10 +0000
asID:                     11711
IP address blocks:        66.18.160.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8780f59d-efa1-4d8e-b7c0-66773735a31d/8780f59d-efa1-4d8e-b7c0-66773735a31d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8780f59d-efa1-4d8e-b7c0-66773735a31d/8780f59d-efa1-4d8e-b7c0-66773735a31d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8780f59d-efa1-4d8e-b7c0-66773735a31d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 15 Jun 2026 23:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:00:05:e0:fd:e0:8d:aa:25:65:71:6d:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8780f59d-efa1-4d8e-b7c0-66773735a31d
        Validity
            Not Before: May 30 01:00:10 2026 GMT
            Not After : Aug 28 01:00:10 2026 GMT
        Subject: CN=a6711b6d-469d-442f-9601-0d618d1bb4cb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:e7:99:5c:18:53:dd:2b:9f:f3:53:67:90:ae:
                    d3:bb:81:b4:bf:68:c7:e2:fc:ea:68:2e:39:49:9a:
                    15:b5:4f:62:7a:be:ff:ea:13:e4:db:c7:10:8e:bb:
                    51:18:0a:fe:99:f6:11:7e:ec:98:93:06:0c:30:17:
                    6c:91:9e:d8:4d:83:93:1a:a8:24:60:58:44:a7:fd:
                    be:35:d6:b6:2e:19:1e:84:87:ac:61:8b:1b:87:1a:
                    59:2b:7c:8b:22:1a:28:9e:80:1c:c8:b4:42:07:fc:
                    6e:60:c2:11:83:74:29:f1:24:72:d6:ff:f1:1d:5d:
                    aa:43:5c:b1:47:32:e5:c7:6f:28:cc:f0:68:af:04:
                    e1:08:d3:74:78:de:81:f8:78:43:d7:0d:b3:1c:11:
                    b6:6a:5a:1f:a2:88:7a:68:c2:b4:b1:48:10:4e:81:
                    57:d5:70:8f:a6:3f:ca:6d:28:3a:62:00:8a:19:15:
                    5f:25:b7:78:f6:20:2a:8d:b0:6c:9f:ad:a4:4c:6a:
                    71:a6:3e:0f:8b:32:e8:b0:e3:98:a7:d5:84:76:7d:
                    c6:57:ec:88:e1:04:65:0e:5f:2b:58:dd:be:1f:a0:
                    19:ac:91:85:8a:ff:26:71:cb:ab:ac:e8:82:56:65:
                    00:75:90:ba:64:c1:ef:73:d3:42:29:33:03:f6:64:
                    63:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:0D:AA:63:13:C7:2D:EE:68:D3:0A:A7:08:45:FB:D8:C9:41:9D:E6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8780f59d-efa1-4d8e-b7c0-66773735a31d/00fb5d69-be72-3724-b959-5abaccb05f5d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8780f59d-efa1-4d8e-b7c0-66773735a31d/8780f59d-efa1-4d8e-b7c0-66773735a31d.crl

            X509v3 Authority Key Identifier:
                keyid:6E:AA:38:FA:81:26:FD:B9:F1:3B:FC:A7:1E:F9:74:FC:4E:6D:D4:92

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8780f59d-efa1-4d8e-b7c0-66773735a31d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.18.160.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5d:86:53:2a:c4:35:4a:9d:05:f3:c6:f6:49:a5:32:5c:83:61:
         33:5d:48:ad:d4:03:b0:eb:b0:85:5d:62:32:70:7f:52:ca:b3:
         82:40:8f:2c:b0:97:e1:96:7a:8f:30:ef:da:dd:4d:2b:8c:a6:
         de:eb:1a:4d:6e:50:4f:6b:5f:44:f7:39:ce:c5:b3:97:ca:27:
         22:37:a7:9e:a1:d1:04:57:e1:5f:f4:6f:17:c6:d0:cb:31:b0:
         90:de:15:d6:33:87:18:c7:4b:b1:81:cc:15:57:92:65:91:ac:
         e2:7c:12:83:7c:25:64:af:1b:34:1a:1f:51:46:03:67:a7:77:
         3c:59:57:6e:19:4a:38:86:3e:ff:e4:e2:be:f2:4c:b0:e6:98:
         5f:62:2f:2f:0e:57:50:52:25:c7:92:ec:8d:01:62:4c:3d:7a:
         a1:48:8b:12:fb:34:96:e4:9b:4e:16:fd:3a:1c:61:ad:b7:44:
         43:fa:59:30:a0:4b:ac:d4:a9:40:f4:54:1a:1f:63:4f:4d:cc:
         9b:b5:66:e8:31:fb:5f:9b:9b:1f:59:90:a9:d7:b1:b2:d7:e4:
         60:d8:3f:b5:b6:84:c2:42:2e:c3:4d:5c:0a:6b:58:8f:6d:9d:
         c1:8e:b8:10:32:be:31:73:05:d1:f5:b8:72:01:ed:6c:7d:b0:
         57:3a:f6:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 20:27:00 2026 by rpki-client