Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/6038e2ed-90e4-4896-8a5b-2db43376a32c/ff1f7d27-c7d2-3fa3-8934-b87171daca54.roa
File:                     ff1f7d27-c7d2-3fa3-8934-b87171daca54.roa (raw, json)
Hash identifier:          AE+t2+pHHnupH2+U9ITlf5tbH0vhv8U6zDwJq5M7Rs4=
Subject key identifier:   39:8E:AD:75:08:8B:17:FD:38:E5:6A:2B:18:23:E5:B6:37:1D:FA:6C
Certificate issuer:       /CN=6038e2ed-90e4-4896-8a5b-2db43376a32c
Certificate serial:       010D0C9F4328584E18AEF48A99692C1EDD01D8C0
Authority key identifier: 29:05:D2:15:CB:91:AC:24:E4:54:D1:74:57:DB:F2:07:75:73:4D:40
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/6038e2ed-90e4-4896-8a5b-2db43376a32c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/6038e2ed-90e4-4896-8a5b-2db43376a32c/ff1f7d27-c7d2-3fa3-8934-b87171daca54.roa
Signing time:             Sun 07 Jun 2026 21:00:12 +0000
ROA not before:           Sun 07 Jun 2026 21:00:12 +0000
ROA not after:            Sat 05 Sep 2026 21:00:12 +0000
asID:                     21723
IP address blocks:        66.163.192.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/6038e2ed-90e4-4896-8a5b-2db43376a32c/6038e2ed-90e4-4896-8a5b-2db43376a32c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/6038e2ed-90e4-4896-8a5b-2db43376a32c/6038e2ed-90e4-4896-8a5b-2db43376a32c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/6038e2ed-90e4-4896-8a5b-2db43376a32c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:18:ae:f4:8a:99:69:2c:1e:dd:01:d8:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6038e2ed-90e4-4896-8a5b-2db43376a32c
        Validity
            Not Before: Jun  7 21:00:12 2026 GMT
            Not After : Sep  5 21:00:12 2026 GMT
        Subject: CN=d56d328d-e31a-4bc5-9c82-3d2e1a67a2f1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:3e:b9:3f:1c:6b:69:dd:5f:c4:7f:53:9e:df:
                    67:48:cb:1b:f0:d0:f0:1c:35:9f:65:4e:1a:c3:5c:
                    5c:e2:ee:01:ff:dd:36:fc:bb:aa:68:c7:6d:98:de:
                    33:7f:e7:4a:a9:50:79:56:2c:84:51:02:0b:84:35:
                    7b:d5:59:6c:48:8a:7b:96:07:ca:45:db:9f:c2:0f:
                    70:d6:e6:a5:c1:36:01:15:7a:39:e8:26:14:e0:29:
                    95:02:55:a7:f9:0b:0b:82:41:a8:b5:78:29:98:a9:
                    4f:36:b1:cf:7c:38:7c:75:66:23:5c:e2:92:da:05:
                    d7:cd:6e:18:0c:bd:36:d6:fa:54:6f:2c:87:05:3f:
                    70:74:91:bd:96:ee:7b:0b:11:0e:b2:ae:de:5e:a0:
                    6e:0b:79:04:40:28:54:63:4f:e5:1c:7c:4f:35:14:
                    3b:08:97:49:9a:1c:da:d5:d4:bd:c3:3c:64:ee:7b:
                    fd:1e:19:6c:3f:02:41:6e:9e:23:dd:57:31:57:c4:
                    e9:5c:c1:50:61:14:cb:98:78:bc:2c:e0:52:21:a9:
                    03:34:e6:45:09:1b:90:1d:df:0c:28:0a:3b:22:25:
                    3e:5a:a4:70:ca:00:d9:ff:f9:8a:45:f1:72:1f:13:
                    20:19:b5:49:f2:51:a7:c8:99:20:43:c2:6d:fe:7c:
                    e3:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:8E:AD:75:08:8B:17:FD:38:E5:6A:2B:18:23:E5:B6:37:1D:FA:6C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/6038e2ed-90e4-4896-8a5b-2db43376a32c/ff1f7d27-c7d2-3fa3-8934-b87171daca54.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/6038e2ed-90e4-4896-8a5b-2db43376a32c/6038e2ed-90e4-4896-8a5b-2db43376a32c.crl

            X509v3 Authority Key Identifier:
                keyid:29:05:D2:15:CB:91:AC:24:E4:54:D1:74:57:DB:F2:07:75:73:4D:40

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/6038e2ed-90e4-4896-8a5b-2db43376a32c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.163.192.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         60:d8:ca:be:18:5d:2f:39:2b:7d:c7:46:ba:2a:32:44:06:35:
         f3:af:a7:7e:89:c9:81:24:af:52:7c:50:cb:a8:bc:9a:f1:29:
         2f:b7:aa:be:14:19:73:c1:77:22:14:b9:38:42:29:24:98:b3:
         91:52:10:76:ad:51:b0:96:45:33:fe:cf:ba:9f:61:3f:ea:d3:
         7f:fd:15:f3:02:fd:f6:ff:76:b1:7e:bd:73:f3:37:ea:4f:34:
         67:4b:c8:33:f6:48:19:63:98:88:8d:8e:8a:0c:ea:ee:49:fb:
         81:4c:77:5a:d3:cc:5b:ca:d6:3c:53:40:fd:04:f7:f1:7f:84:
         3a:42:a2:c4:52:c0:8e:3b:69:a6:19:ec:09:ad:4a:ee:be:90:
         7f:77:dc:5b:28:82:c8:88:64:5c:ae:76:2e:1e:33:e1:6e:1d:
         35:67:be:cc:d4:9e:43:2b:67:a5:73:08:bd:6b:5d:7b:c5:76:
         2b:fd:8a:70:67:70:89:d8:cf:d8:9b:25:e3:56:89:c4:31:95:
         09:c8:bd:b4:e2:78:63:88:d4:42:fa:c1:b4:92:f7:b3:76:6e:
         9a:28:6f:b4:de:7e:ed:84:13:5a:1d:4e:e5:04:84:e9:24:d8:
         5f:36:d5:99:a1:6f:38:f8:41:66:3d:6d:e1:0f:c8:2c:23:66:
         ac:a4:07:56
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4YrvSKmWksHt0B2MAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjAzOGUyZWQtOTBlNC00ODk2LThhNWItMmRiNDMzNzZh
MzJjMB4XDTI2MDYwNzIxMDAxMloXDTI2MDkwNTIxMDAxMlowLzEtMCsGA1UEAxMk
ZDU2ZDMyOGQtZTMxYS00YmM1LTljODItM2QyZTFhNjdhMmYxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgT65Pxxrad1fxH9Tnt9nSMsb8NDwHDWfZU4a
w1xc4u4B/902/LuqaMdtmN4zf+dKqVB5ViyEUQILhDV71VlsSIp7lgfKRdufwg9w
1ualwTYBFXo56CYU4CmVAlWn+QsLgkGotXgpmKlPNrHPfDh8dWYjXOKS2gXXzW4Y
DL021vpUbyyHBT9wdJG9lu57CxEOsq7eXqBuC3kEQChUY0/lHHxPNRQ7CJdJmhza
1dS9wzxk7nv9HhlsPwJBbp4j3VcxV8TpXMFQYRTLmHi8LOBSIakDNOZFCRuQHd8M
KAo7IiU+WqRwygDZ//mKRfFyHxMgGbVJ8lGnyJkgQ8Jt/nzjdwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDmOrXUIixf9OOVqKxgj5bY3HfpsMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS82MDM4
ZTJlZC05MGU0LTQ4OTYtOGE1Yi0yZGI0MzM3NmEzMmMvZmYxZjdkMjctYzdkMi0z
ZmEzLTg5MzQtYjg3MTcxZGFjYTU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i
YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvNjAzOGUyZWQtOTBlNC00ODk2LThh
NWItMmRiNDMzNzZhMzJjLzYwMzhlMmVkLTkwZTQtNDg5Ni04YTViLTJkYjQzMzc2
YTMyYy5jcmwwHwYDVR0jBBgwFoAUKQXSFcuRrCTkVNF0V9vyB3VzTUAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi
Ni1iZjMyLWM5NDkyMjg2ZjE5NS82MDM4ZTJlZC05MGU0LTQ4OTYtOGE1Yi0yZGI0
MzM3NmEzMmMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEQqPAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGDYyr4YXS85K33HRroqMkQGNfOvp36JyYEkr1J8UMuovJrxKS+3qr4U
GXPBdyIUuThCKSSYs5FSEHatUbCWRTP+z7qfYT/q03/9FfMC/fb/drF+vXPzN+pP
NGdLyDP2SBljmIiNjooM6u5J+4FMd1rTzFvK1jxTQP0E9/F/hDpCosRSwI47aaYZ
7AmtSu6+kH933FsogsiIZFyudi4eM+FuHTVnvszUnkMrZ6VzCL1rXXvFdiv9inBn
cInYz9ibJeNWicQxlQnIvbTieGOI1EL6wbSS97N2bpoob7Tefu2EE1odTuUEhOkk
2F821Zmhbzj4QWY9beEPyCwjZqykB1Y=
-----END CERTIFICATE-----
Generated at Sat Jun 13 14:29:24 2026 by rpki-client