Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a678b84f-a615-4754-9dcb-e51b04125026/c40b8517-cb95-3d62-a746-1fc2642ef195.roa
File:                     c40b8517-cb95-3d62-a746-1fc2642ef195.roa (raw, json)
Hash identifier:          5FKW3PVQ9ueCkyS9rBi8uAdVzHWBWZldb9J1QFK306U=
Subject key identifier:   06:3C:42:59:DA:AD:5F:14:29:69:20:33:12:B8:F2:E3:2D:9B:B2:91
Certificate issuer:       /CN=a678b84f-a615-4754-9dcb-e51b04125026
Certificate serial:       010D0C9F4328584EA78F23E04D7FC612ECB23680
Authority key identifier: D3:9E:94:40:5E:55:0F:6B:1A:42:B4:FD:DD:48:3D:5C:90:F9:E1:E1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a678b84f-a615-4754-9dcb-e51b04125026.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a678b84f-a615-4754-9dcb-e51b04125026/c40b8517-cb95-3d62-a746-1fc2642ef195.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     16661
IP address blocks:        172.83.94.0/24 maxlen: 24
                          2602:f685::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a678b84f-a615-4754-9dcb-e51b04125026/a678b84f-a615-4754-9dcb-e51b04125026.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a678b84f-a615-4754-9dcb-e51b04125026/a678b84f-a615-4754-9dcb-e51b04125026.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a678b84f-a615-4754-9dcb-e51b04125026.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:8f:23:e0:4d:7f:c6:12:ec:b2:36:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a678b84f-a615-4754-9dcb-e51b04125026
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=5b81da36-84ea-42b5-9b08-3b0b73670fd9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:20:d2:e9:49:73:d6:ea:7f:f3:43:0f:30:46:
                    db:08:dd:99:e7:64:d0:7c:f7:1b:c9:d5:61:aa:1c:
                    86:80:1a:2b:d0:d4:c8:5a:8c:80:ea:9d:e4:d3:75:
                    21:dd:8f:da:66:cc:29:ea:8a:61:f3:f6:7e:f1:ba:
                    18:d8:7f:db:f1:5e:e1:5f:37:c5:33:55:bb:32:e8:
                    a1:5a:18:17:98:a7:b8:29:cd:fa:a0:5c:8a:ec:72:
                    cb:26:ed:a2:47:49:c0:3b:35:8b:15:46:a7:10:38:
                    f6:21:84:f4:34:e6:23:6b:5d:2b:d0:68:46:9d:2e:
                    da:7b:99:ae:8c:85:bf:42:19:78:c4:94:ce:b8:48:
                    3a:dd:27:5f:3c:12:69:e8:49:53:34:ff:f7:82:6f:
                    7f:bd:81:c8:45:1c:d1:cb:1b:d3:a6:39:92:7c:33:
                    8e:f7:9f:5f:a7:32:37:56:bd:da:b4:55:5a:08:69:
                    2c:98:3c:e1:91:f2:61:b8:3f:99:83:73:ca:28:4a:
                    f2:cb:9d:76:d6:da:dd:be:dc:8b:e0:a0:04:7b:a3:
                    86:b1:5d:ea:b7:58:f0:01:b2:69:8c:1b:6c:40:37:
                    8e:57:26:8a:62:90:39:22:c1:92:5f:12:14:eb:68:
                    9d:bf:eb:8b:ed:83:5d:29:ae:de:17:53:26:28:89:
                    0f:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:3C:42:59:DA:AD:5F:14:29:69:20:33:12:B8:F2:E3:2D:9B:B2:91
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a678b84f-a615-4754-9dcb-e51b04125026/c40b8517-cb95-3d62-a746-1fc2642ef195.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a678b84f-a615-4754-9dcb-e51b04125026/a678b84f-a615-4754-9dcb-e51b04125026.crl

            X509v3 Authority Key Identifier:
                keyid:D3:9E:94:40:5E:55:0F:6B:1A:42:B4:FD:DD:48:3D:5C:90:F9:E1:E1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a678b84f-a615-4754-9dcb-e51b04125026.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.83.94.0/24
                IPv6:
                  2602:f685::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         13:7a:e4:8b:e4:33:be:4d:dd:13:4f:e4:8c:d0:f4:e6:5c:2c:
         10:51:d2:4c:e1:a4:5c:1f:7c:22:7a:5a:b4:76:a7:da:e1:ec:
         ff:c6:a5:eb:5e:e5:e2:77:b8:75:db:28:5c:f8:a3:f9:23:ab:
         f0:50:ad:58:a6:06:b9:aa:51:fe:7d:2d:03:5a:24:17:c1:32:
         6f:f4:56:1c:dc:ce:03:f8:5a:ea:dd:f5:f5:31:c3:2a:b8:74:
         70:ea:92:0f:4c:78:e9:bf:ff:b0:61:ce:3d:42:09:9d:86:ae:
         97:1c:76:74:c9:52:ee:e1:8c:b4:ff:af:f8:6b:33:4d:cd:50:
         93:cf:da:b6:cf:b7:ce:55:22:8f:30:d1:47:9a:2f:b0:09:19:
         4a:a4:03:da:9e:7f:9c:70:8a:69:aa:58:e8:77:42:29:b7:c4:
         cf:ac:13:b6:df:25:70:19:bb:10:45:60:b7:26:02:c2:a6:64:
         11:07:6d:e7:46:38:0c:55:83:59:41:86:f3:9a:45:96:49:12:
         c4:52:53:3e:e9:81:91:4c:50:ee:cd:95:42:4f:09:db:81:df:
         f5:b1:23:d7:6e:6d:04:fb:14:2d:f4:35:a6:f7:67:b2:49:e6:
         9a:98:2e:5a:54:14:58:d1:29:28:2d:7d:12:15:5f:23:bd:07:
         8f:3a:57:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 14:19:15 2026 by rpki-client