Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/72a39293-5ddb-4cc0-8353-2b258e2e78ea/507878bb-ce4f-3f0b-a5d0-3521d271d6d5.roa
File:                     507878bb-ce4f-3f0b-a5d0-3521d271d6d5.roa (raw, json)
Hash identifier:          6uVm88BmcdtlNtTPl3MKPaJHpFp36lXfwaZMCNS1bj0=
Subject key identifier:   BF:60:63:39:14:2E:EA:3B:C2:30:1C:81:BB:96:3A:46:ED:C5:14:F5
Certificate issuer:       /CN=72a39293-5ddb-4cc0-8353-2b258e2e78ea
Certificate serial:       010D0C9F4328584DE84B43D7F3224D109FEBC800
Authority key identifier: 54:EA:23:CA:05:20:B8:CA:42:80:7D:29:67:F8:3E:A1:F9:EE:DB:C3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/72a39293-5ddb-4cc0-8353-2b258e2e78ea.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/72a39293-5ddb-4cc0-8353-2b258e2e78ea/507878bb-ce4f-3f0b-a5d0-3521d271d6d5.roa
Signing time:             Thu 21 May 2026 13:00:32 +0000
ROA not before:           Thu 21 May 2026 13:00:32 +0000
ROA not after:            Wed 19 Aug 2026 13:00:32 +0000
asID:                     10753
IP address blocks:        66.128.192.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/72a39293-5ddb-4cc0-8353-2b258e2e78ea/72a39293-5ddb-4cc0-8353-2b258e2e78ea.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/72a39293-5ddb-4cc0-8353-2b258e2e78ea/72a39293-5ddb-4cc0-8353-2b258e2e78ea.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/72a39293-5ddb-4cc0-8353-2b258e2e78ea.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:e8:4b:43:d7:f3:22:4d:10:9f:eb:c8:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72a39293-5ddb-4cc0-8353-2b258e2e78ea
        Validity
            Not Before: May 21 13:00:32 2026 GMT
            Not After : Aug 19 13:00:32 2026 GMT
        Subject: CN=07a09130-e989-410c-a33a-f242595c182b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:31:75:b3:5d:96:12:cb:0b:4a:04:52:b6:0d:
                    ec:47:e0:fd:b8:49:6d:54:f0:16:29:17:a5:19:96:
                    90:3d:8f:e2:cc:44:0c:2a:78:c8:56:21:2f:88:6c:
                    25:ca:31:1a:55:c2:3c:06:ab:91:32:5b:c0:8b:06:
                    3f:74:80:3b:41:94:c6:12:c5:4f:e5:53:6e:1f:f7:
                    06:07:be:b6:37:03:a7:53:5e:0c:ca:fa:b8:cd:a4:
                    d8:a4:92:aa:6d:07:22:74:4c:f8:1f:6f:eb:26:21:
                    39:b0:a4:c5:d6:33:64:32:15:70:1b:29:00:18:e8:
                    88:05:82:cf:d7:82:39:54:d3:8a:05:d7:2f:4d:d8:
                    0c:4c:46:6b:be:20:1d:e1:87:31:4b:c5:d5:76:27:
                    58:37:ac:5b:4c:96:86:1f:b1:dd:fb:c2:c8:ca:78:
                    e9:5d:81:7b:2c:f8:38:77:cd:6b:08:01:7b:08:a6:
                    d6:95:96:6b:1d:45:4b:81:6f:ea:dd:58:4e:91:2b:
                    e1:fe:5a:84:b1:9f:8b:ee:21:c4:56:3a:37:71:53:
                    76:12:0d:06:7d:f5:65:45:ca:09:ca:4b:be:e5:cb:
                    6c:ac:71:67:48:69:5a:b7:53:ed:5a:35:82:91:f2:
                    be:03:7b:e5:11:b8:02:06:ce:d7:30:a5:2f:d2:53:
                    a4:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:60:63:39:14:2E:EA:3B:C2:30:1C:81:BB:96:3A:46:ED:C5:14:F5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/72a39293-5ddb-4cc0-8353-2b258e2e78ea/507878bb-ce4f-3f0b-a5d0-3521d271d6d5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/72a39293-5ddb-4cc0-8353-2b258e2e78ea/72a39293-5ddb-4cc0-8353-2b258e2e78ea.crl

            X509v3 Authority Key Identifier:
                keyid:54:EA:23:CA:05:20:B8:CA:42:80:7D:29:67:F8:3E:A1:F9:EE:DB:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/72a39293-5ddb-4cc0-8353-2b258e2e78ea.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.128.192.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         83:ba:4f:18:3c:d6:e4:88:91:5e:c9:1f:cd:4a:ef:aa:9a:35:
         ad:eb:07:19:eb:75:0f:c4:17:14:9d:78:65:df:3f:2c:f1:c2:
         4c:a5:ce:d8:a6:82:52:13:b0:cb:fb:dd:3e:bd:e8:44:56:28:
         1a:2d:62:f9:1e:8b:71:b2:22:89:84:35:c5:9f:3d:24:1c:2e:
         c1:c6:23:c3:ca:65:fa:bf:e4:0f:cc:23:b7:a8:cf:ce:12:08:
         0e:fd:cf:f4:52:3f:e8:c1:41:fc:af:47:ac:85:cd:10:65:f0:
         93:52:98:26:49:f9:92:85:82:95:13:fc:fe:b1:13:83:ca:99:
         ae:cf:0a:51:17:bb:42:35:89:3d:f2:16:4f:ea:79:d5:31:57:
         83:66:51:8c:33:e4:e0:09:b6:88:3c:9f:03:e5:bf:87:8f:6c:
         ed:ea:8a:57:45:5c:d3:3e:a4:04:c6:d4:f1:70:b8:f0:f9:5a:
         dd:e7:70:57:55:80:17:86:cc:af:2f:15:a7:d3:59:3d:ec:76:
         2e:4e:e4:e2:47:24:06:db:0b:0e:82:75:0c:ee:4f:03:98:8a:
         74:6d:03:9b:63:5e:31:16:7a:09:98:87:42:3b:87:cb:a2:c5:
         4d:8e:db:cc:47:a6:4d:d7:45:10:3a:fa:e8:a6:88:ed:54:a6:
         83:77:9a:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 21:03:17 2026 by rpki-client