Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf/0752d7a5-5222-310c-85f3-05e84bd2890b.roa
File:                     0752d7a5-5222-310c-85f3-05e84bd2890b.roa (raw, json)
Hash identifier:          JjYmhsNkTVbMSU8DWYwWsmA8DJFv3pm6tD0j+/sHB+w=
Subject key identifier:   08:64:AC:86:E3:35:50:4E:2E:D3:C4:E3:0B:62:FD:86:0C:13:FE:29
Certificate issuer:       /CN=4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf
Certificate serial:       010D0C9F4328584DF4DB5EC3DE031E1450BB0580
Authority key identifier: D8:2B:96:CD:C2:38:E4:0E:17:FA:7A:F5:14:C2:56:60:9D:D2:71:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf/0752d7a5-5222-310c-85f3-05e84bd2890b.roa
Signing time:             Tue 26 May 2026 01:00:24 +0000
ROA not before:           Tue 26 May 2026 01:00:24 +0000
ROA not after:            Mon 24 Aug 2026 01:00:24 +0000
asID:                     4213
IP address blocks:        66.172.0.0/18 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:f4:db:5e:c3:de:03:1e:14:50:bb:05:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf
        Validity
            Not Before: May 26 01:00:24 2026 GMT
            Not After : Aug 24 01:00:24 2026 GMT
        Subject: CN=af6efbee-6d05-4da3-9ea2-c6c1e4e7e078
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:4b:d2:ac:d5:d1:23:7d:1a:f2:96:a5:49:ae:
                    c0:2c:b2:13:7a:4c:65:81:75:27:e9:2d:4c:fa:e6:
                    e1:22:60:e7:21:de:b4:f2:60:d9:b5:cd:ac:33:77:
                    d9:1d:37:c7:13:e0:0b:f3:6e:fd:72:7a:e1:7d:c8:
                    fd:94:a2:6a:ff:24:3e:9d:68:70:a1:34:e1:57:5c:
                    14:35:d4:0e:40:12:5c:bd:78:a4:2b:21:4e:cc:2f:
                    ac:06:72:64:eb:70:f5:cd:7f:ee:46:9d:82:a7:de:
                    42:ef:c8:62:07:ae:8e:39:90:e6:73:ae:96:d3:41:
                    5a:8d:0a:1e:58:52:38:b1:36:86:18:1c:95:98:b4:
                    80:9c:0d:7f:2b:aa:c1:8b:07:57:ea:89:2b:12:91:
                    b5:8c:be:16:ec:e7:34:09:e2:6b:3c:52:a0:91:4b:
                    97:1f:48:33:e7:23:a3:bc:bc:d8:5e:25:20:4c:6c:
                    20:dc:e1:11:8d:13:ae:e3:c8:74:6d:87:5b:67:9d:
                    ce:82:dc:9e:11:92:76:e2:32:8b:0e:cf:b4:b4:aa:
                    9c:fa:40:0c:91:a9:72:71:a6:6b:59:52:94:2f:80:
                    78:32:2f:ea:52:ad:77:00:b5:2b:b9:b1:5f:76:c0:
                    1c:7a:05:ea:99:d4:fb:0a:c0:d5:4e:b1:d9:02:f2:
                    6b:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:64:AC:86:E3:35:50:4E:2E:D3:C4:E3:0B:62:FD:86:0C:13:FE:29
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf/0752d7a5-5222-310c-85f3-05e84bd2890b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf.crl

            X509v3 Authority Key Identifier:
                keyid:D8:2B:96:CD:C2:38:E4:0E:17:FA:7A:F5:14:C2:56:60:9D:D2:71:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.172.0.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8a:53:5e:16:fe:cb:10:c0:bf:8b:c1:50:b1:01:9d:d7:e2:48:
         70:aa:3e:3c:cb:fd:5b:af:57:f1:b3:dc:b0:f4:c4:2d:48:3a:
         98:95:c8:4a:39:36:28:ad:0b:85:bd:30:be:0c:7e:31:78:2a:
         13:1b:b2:e6:79:67:59:ec:8e:4e:a2:c2:c9:a9:1c:12:50:19:
         69:81:1d:a2:be:c9:f5:68:3c:4c:6f:79:20:11:f1:09:b1:f2:
         aa:49:ab:94:90:28:2c:5e:60:e2:77:96:43:d0:d6:8a:7f:bb:
         f0:47:6c:f0:51:e3:44:b7:23:23:61:34:aa:aa:bd:a2:d8:36:
         c6:52:ee:6b:a4:c4:8b:53:97:3d:0b:55:58:aa:f9:ad:d3:9f:
         eb:6a:20:65:8b:fc:5e:47:b2:1d:5a:8a:a9:43:fb:60:5c:c3:
         83:55:09:c9:3f:ee:47:78:9c:47:1f:71:f5:c6:f5:bc:2e:5b:
         65:d6:39:28:39:06:e8:d4:f4:52:af:f2:0f:1e:1e:4a:2f:12:
         73:30:a1:a5:04:97:02:1a:65:57:ec:9e:f9:7c:b9:cd:ae:f7:
         91:88:fa:86:e5:ed:b8:3c:26:67:4a:6a:8a:49:96:b8:a8:dd:
         63:f7:4a:49:3e:9e:89:82:64:43:68:c0:b3:1d:a8:7d:3f:5f:
         37:12:9f:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 15:53:32 2026 by rpki-client