Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/b6611c1b-1497-4989-b7b9-c2f01c7884bd/8b9d715e-2e25-3202-b101-71e95160c941.roa
File:                     8b9d715e-2e25-3202-b101-71e95160c941.roa (raw, json)
Hash identifier:          XPmWqaRuT7zDn1rgAMIXJdqb975/zh6EPb0wj7OJN1s=
Subject key identifier:   0C:26:89:8F:5F:28:51:91:F1:99:9F:E7:D8:72:FE:F8:32:10:7B:58
Certificate issuer:       /CN=b6611c1b-1497-4989-b7b9-c2f01c7884bd
Certificate serial:       010D0C9F4328584E1B1B114E0CC06B3DF351EF00
Authority key identifier: EE:34:B8:41:E3:8A:CE:A2:37:5D:78:5F:90:FD:59:D3:EB:F7:15:B1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/b6611c1b-1497-4989-b7b9-c2f01c7884bd.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/b6611c1b-1497-4989-b7b9-c2f01c7884bd/8b9d715e-2e25-3202-b101-71e95160c941.roa
Signing time:             Mon 08 Jun 2026 17:49:53 +0000
ROA not before:           Mon 08 Jun 2026 17:49:53 +0000
ROA not after:            Sun 06 Sep 2026 17:49:53 +0000
asID:                     22526
IP address blocks:        66.71.201.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/b6611c1b-1497-4989-b7b9-c2f01c7884bd/b6611c1b-1497-4989-b7b9-c2f01c7884bd.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/b6611c1b-1497-4989-b7b9-c2f01c7884bd/b6611c1b-1497-4989-b7b9-c2f01c7884bd.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/b6611c1b-1497-4989-b7b9-c2f01c7884bd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 15 Jun 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:1b:1b:11:4e:0c:c0:6b:3d:f3:51:ef:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b6611c1b-1497-4989-b7b9-c2f01c7884bd
        Validity
            Not Before: Jun  8 17:49:53 2026 GMT
            Not After : Sep  6 17:49:53 2026 GMT
        Subject: CN=00e3d797-16a1-4192-983f-723ba4a4924a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:a2:7f:22:4f:10:43:ad:bc:8d:fd:ba:58:4d:
                    e3:52:d2:e6:b5:7a:92:ff:66:8d:9b:10:27:fa:06:
                    fc:2f:03:34:51:55:19:c9:6c:56:ba:66:d2:8f:6b:
                    f7:e0:9e:15:f9:55:08:75:6d:18:7f:40:ee:24:6a:
                    4d:23:ca:ee:0f:e0:3e:1a:79:39:9a:56:e4:f6:0d:
                    83:e8:a5:79:84:8b:04:73:15:32:d7:91:4a:e5:a8:
                    ff:97:df:1a:37:03:a4:85:10:08:34:a3:cd:bd:f7:
                    11:77:ad:37:e7:36:9a:c1:b9:ad:d5:5b:ed:25:1c:
                    42:97:d0:ed:2c:68:24:b1:f1:ef:66:37:40:31:ee:
                    c7:d7:9c:12:26:79:25:f9:75:91:86:ba:03:2b:47:
                    fd:d1:66:2c:2f:87:4c:36:cd:49:99:80:46:d5:29:
                    75:0a:73:7b:b9:ae:6e:04:76:e8:9c:ef:ef:71:eb:
                    f3:06:72:75:45:0e:8a:0c:f0:ce:db:9d:2c:2e:4c:
                    24:fd:fb:20:50:1e:7a:ba:06:c3:2f:ac:0b:ad:fb:
                    97:2e:04:c8:34:b0:65:82:d5:fc:c6:ed:70:23:37:
                    6c:99:8f:24:d3:0b:ed:21:77:f9:9d:d9:f6:3f:c0:
                    ad:8d:16:11:ce:5c:c0:02:e3:6c:85:26:76:89:64:
                    32:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:26:89:8F:5F:28:51:91:F1:99:9F:E7:D8:72:FE:F8:32:10:7B:58
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/b6611c1b-1497-4989-b7b9-c2f01c7884bd/8b9d715e-2e25-3202-b101-71e95160c941.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/b6611c1b-1497-4989-b7b9-c2f01c7884bd/b6611c1b-1497-4989-b7b9-c2f01c7884bd.crl

            X509v3 Authority Key Identifier:
                keyid:EE:34:B8:41:E3:8A:CE:A2:37:5D:78:5F:90:FD:59:D3:EB:F7:15:B1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/b6611c1b-1497-4989-b7b9-c2f01c7884bd.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.71.201.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         80:1e:45:cd:20:79:3d:06:e9:9d:01:1a:ec:0d:6e:aa:f1:eb:
         0c:6f:c5:f9:0b:df:c5:13:07:6f:d1:a5:8f:64:e9:cd:ca:b0:
         8a:62:22:9d:e0:2b:4c:9e:d6:84:c8:57:4b:89:d4:2a:21:6b:
         e5:81:2b:e8:0f:72:be:24:ba:44:80:c0:ed:bd:86:b1:6e:5f:
         68:85:cc:2f:33:cb:6c:9f:41:b9:a3:94:c9:ed:05:69:a2:75:
         43:3e:f3:df:2c:eb:db:31:77:78:fc:cc:00:02:19:b9:74:4f:
         cb:0e:0c:d9:44:99:de:da:a5:a4:9f:25:dc:96:66:1e:12:e5:
         04:53:d4:4c:13:46:d3:58:8b:17:c8:3a:7a:01:62:dc:35:f6:
         fb:51:02:6d:95:97:fe:0e:8f:e0:bc:5d:52:ae:2a:3b:67:b9:
         43:e8:12:4d:40:ed:f4:25:e3:02:0b:d2:5c:01:4e:ca:9f:66:
         0a:f5:a9:15:b6:8e:c8:6b:9a:f5:b1:ef:8f:93:ee:24:c1:34:
         aa:72:a6:9b:8f:c0:d7:ff:15:af:5a:12:0d:67:58:29:6a:7a:
         ce:f1:fb:8c:4e:a3:d3:81:c4:75:57:0b:e9:a0:76:95:e5:33:
         b0:6c:a9:23:07:53:0a:36:ee:c0:b9:e1:a2:06:15:f5:b7:13:
         78:22:a2:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 00:59:39 2026 by rpki-client