Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/62db0999-415a-3faf-901c-9623d2cfe9e0.roa
File:                     62db0999-415a-3faf-901c-9623d2cfe9e0.roa (raw, json)
Hash identifier:          fq1gw1i51b+cI80hHnAJpZtlDiJHPUeSTNGbhcKaSRg=
Subject key identifier:   A6:BB:5E:E1:11:74:9B:EB:1A:C2:37:05:CC:7C:6C:F5:98:E0:95:12
Certificate issuer:       /CN=cb444bd8-be6d-4853-a460-b577b6f84b65
Certificate serial:       010D0C9F4328584EA79C4EAA34B46B9ACB54B3C0
Authority key identifier: 2D:A1:B0:8C:36:6A:A7:0F:6E:A9:91:B2:BB:47:5E:CD:7E:D7:58:09
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/62db0999-415a-3faf-901c-9623d2cfe9e0.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     400061
IP address blocks:        66.118.255.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/cb444bd8-be6d-4853-a460-b577b6f84b65.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/cb444bd8-be6d-4853-a460-b577b6f84b65.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:9c:4e:aa:34:b4:6b:9a:cb:54:b3:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cb444bd8-be6d-4853-a460-b577b6f84b65
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=39c6272f-ab9c-442f-b4d6-7c42664bfff7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:f1:a7:69:e0:6e:9e:66:f0:aa:a6:b8:c0:2b:
                    a8:fd:93:56:28:ad:57:7f:41:ab:10:8d:81:52:c6:
                    61:a7:b2:8f:12:b7:ff:c2:fc:35:86:95:f8:eb:7e:
                    0e:54:36:12:91:8e:7c:16:fe:f7:83:4c:30:a6:23:
                    e4:f6:9f:97:46:79:ea:3d:ae:f1:7a:4e:9e:4e:44:
                    06:a6:f1:f4:db:58:14:fd:e8:ab:3d:4f:1d:56:7e:
                    fa:24:a7:1c:a4:10:5f:c3:91:48:7e:75:d3:eb:44:
                    ed:69:32:51:ee:58:5b:1e:a8:26:b1:59:5f:00:d5:
                    d7:1d:58:fa:89:53:51:8f:ee:c1:92:fa:27:24:59:
                    b7:21:79:40:64:fd:67:f3:f9:ec:57:47:5e:b4:c3:
                    e6:6a:89:37:cc:ac:e6:61:1f:ed:70:d7:9c:7c:aa:
                    f1:81:19:93:3d:dd:bc:48:83:d2:bb:8e:45:2d:82:
                    44:74:9e:bb:be:cd:27:bf:7f:57:8e:35:a7:88:61:
                    c8:e5:e7:9e:22:81:1b:3d:03:4f:fa:f4:4f:e8:fa:
                    fc:af:05:89:e4:c7:7f:88:64:e6:a2:b6:84:15:e8:
                    74:cc:af:b6:a6:21:d1:fe:6a:f8:df:a9:e3:75:eb:
                    15:4c:d1:88:3a:b2:8b:fd:f6:88:23:5f:b1:87:34:
                    e1:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:BB:5E:E1:11:74:9B:EB:1A:C2:37:05:CC:7C:6C:F5:98:E0:95:12
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/62db0999-415a-3faf-901c-9623d2cfe9e0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/cb444bd8-be6d-4853-a460-b577b6f84b65.crl

            X509v3 Authority Key Identifier:
                keyid:2D:A1:B0:8C:36:6A:A7:0F:6E:A9:91:B2:BB:47:5E:CD:7E:D7:58:09

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.118.255.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3c:41:84:43:e3:d0:e3:59:c0:4f:0a:70:48:5f:ff:e1:f9:f5:
         15:de:18:90:8e:55:21:03:43:47:b3:b3:ef:1d:28:25:c1:bf:
         a3:0f:80:c9:1b:e8:fc:7f:c4:c8:75:31:06:b4:42:f2:88:ef:
         7c:45:9e:b2:2f:8a:18:5a:14:57:95:9c:2c:a8:21:fa:a1:10:
         a0:ff:03:4b:f1:fa:65:42:63:47:95:bb:3f:55:ce:99:1b:07:
         1b:0c:6a:be:91:6d:38:f5:b7:c7:96:b5:98:84:87:1b:0a:7f:
         52:18:e3:a2:b4:09:a8:f4:c9:8a:f1:cd:4a:3f:dc:cc:2d:75:
         1b:33:05:aa:b9:fc:41:5d:c6:ef:56:47:fa:10:23:83:f5:00:
         26:e9:d9:3a:96:18:f6:6b:dc:f8:22:47:9b:40:db:69:78:3a:
         36:f1:62:ca:9d:5d:65:5c:b3:51:38:20:b3:6d:28:1a:38:16:
         90:19:8f:57:12:d0:06:78:75:72:4b:4b:b4:28:25:09:88:16:
         80:42:f5:49:58:1d:25:a6:d0:bd:68:05:b9:57:e1:63:37:a7:
         fc:89:3e:9d:bb:24:fc:22:30:c6:8c:f1:12:30:1a:cd:6b:fc:
         10:ba:1d:7a:bd:c9:d6:1b:09:16:26:de:04:8b:66:08:2e:20:
         2a:41:68:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 07:38:20 2026 by rpki-client