Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c727dab7-c852-4d24-82ff-cf171b24f2f9/f559caa1-3a42-3c18-8d9e-23368bbdf22b.roa
File:                     f559caa1-3a42-3c18-8d9e-23368bbdf22b.roa (raw, json)
Hash identifier:          2zaTGlif1Y88LZLloYlyjeRzT+3CsFvt2/yUaxDzSzs=
Subject key identifier:   EA:F5:C9:11:2F:76:36:63:BC:5E:6E:6F:8F:78:2B:D1:E1:AE:C0:E0
Certificate issuer:       /CN=c727dab7-c852-4d24-82ff-cf171b24f2f9
Certificate serial:       010D0C9F4328584E016B2D9DF026BAD18EE7B380
Authority key identifier: 61:1F:5A:5F:17:55:FD:D5:D0:A3:4E:20:8D:D4:8C:CC:1D:AF:69:1A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c727dab7-c852-4d24-82ff-cf171b24f2f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c727dab7-c852-4d24-82ff-cf171b24f2f9/f559caa1-3a42-3c18-8d9e-23368bbdf22b.roa
Signing time:             Sat 30 May 2026 13:00:10 +0000
ROA not before:           Sat 30 May 2026 13:00:10 +0000
ROA not after:            Fri 28 Aug 2026 13:00:10 +0000
asID:                     394161
IP address blocks:        66.17.0.0/18 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c727dab7-c852-4d24-82ff-cf171b24f2f9/c727dab7-c852-4d24-82ff-cf171b24f2f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c727dab7-c852-4d24-82ff-cf171b24f2f9/c727dab7-c852-4d24-82ff-cf171b24f2f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c727dab7-c852-4d24-82ff-cf171b24f2f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 15 Jun 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:01:6b:2d:9d:f0:26:ba:d1:8e:e7:b3:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c727dab7-c852-4d24-82ff-cf171b24f2f9
        Validity
            Not Before: May 30 13:00:10 2026 GMT
            Not After : Aug 28 13:00:10 2026 GMT
        Subject: CN=98d6d03a-acec-44ff-a973-d3e50e64b927
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:e9:cf:ae:d1:cc:06:22:dd:8b:f7:2b:be:90:
                    f8:88:dd:87:20:43:ea:2e:b5:e4:0a:fe:dc:7d:97:
                    19:84:13:30:3e:12:72:23:0f:88:f2:a7:8d:ec:00:
                    d7:a2:49:02:ce:41:80:03:96:3e:b3:c2:d4:f6:16:
                    6b:87:09:27:ca:5d:2d:68:c7:ed:e0:54:bb:98:01:
                    f8:3e:ae:c4:43:32:c6:31:11:b5:81:39:50:9f:23:
                    80:85:95:f2:ed:3f:c8:61:f8:1f:b5:2c:2e:6b:f4:
                    40:1b:4f:5d:d2:35:a8:d5:13:40:10:0d:a8:f7:a7:
                    9b:db:16:c1:17:2f:08:36:17:50:c4:6b:e4:fd:a1:
                    46:22:47:57:74:55:73:15:28:9f:75:f4:a7:83:7e:
                    9e:26:a2:82:e5:68:9d:5f:5b:cb:c5:4f:45:59:87:
                    78:92:5b:d4:c9:97:50:66:3a:2b:da:a3:b9:0a:f4:
                    62:80:da:17:1d:78:10:a6:bb:d9:b6:ec:44:30:13:
                    a8:61:e8:5a:d9:14:76:be:b6:98:32:63:9c:b4:13:
                    38:74:11:a0:f2:99:f1:7e:09:20:f5:69:45:0a:dc:
                    bf:f3:7b:6b:8d:f4:0e:d2:19:c8:38:25:28:33:dd:
                    12:37:0b:03:6a:b5:21:7f:dd:89:cd:f3:23:e9:4d:
                    fc:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:F5:C9:11:2F:76:36:63:BC:5E:6E:6F:8F:78:2B:D1:E1:AE:C0:E0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c727dab7-c852-4d24-82ff-cf171b24f2f9/f559caa1-3a42-3c18-8d9e-23368bbdf22b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c727dab7-c852-4d24-82ff-cf171b24f2f9/c727dab7-c852-4d24-82ff-cf171b24f2f9.crl

            X509v3 Authority Key Identifier:
                keyid:61:1F:5A:5F:17:55:FD:D5:D0:A3:4E:20:8D:D4:8C:CC:1D:AF:69:1A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c727dab7-c852-4d24-82ff-cf171b24f2f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.17.0.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         12:5e:db:fa:fe:1b:05:66:e9:ec:21:b7:39:ba:a6:99:5e:f8:
         09:9e:ce:fa:69:c0:2a:08:ca:75:79:ca:8e:b8:71:b0:13:84:
         d0:78:d2:8a:88:64:ba:5c:2c:95:e8:55:e5:86:ad:c0:29:c7:
         a5:73:b6:04:79:84:99:b9:9e:cd:7a:1c:32:b3:37:79:f8:99:
         d2:ec:ae:a0:24:6e:b9:b1:e0:8e:64:10:71:89:53:a6:db:5d:
         ee:46:39:6c:be:81:c6:37:f2:16:9f:be:8e:9a:59:b2:7e:1b:
         52:52:26:f4:e8:75:12:a5:da:db:89:7c:33:c4:70:53:6f:62:
         f3:04:f2:9f:5f:a5:29:3b:4e:65:bd:e0:0b:e7:7a:52:c5:7f:
         5c:74:71:62:78:a6:55:93:dd:11:9c:ec:1a:29:00:a6:0c:91:
         15:ac:f9:88:dc:db:81:50:2f:46:18:b7:d6:e5:ed:8e:52:19:
         0c:8d:3e:b0:97:e3:3a:f9:a2:77:ee:7c:59:7b:e7:52:23:52:
         b8:03:08:71:c3:d8:50:aa:a0:e5:36:ea:be:9e:17:94:3e:02:
         55:5c:0b:91:c4:32:08:68:f5:4a:52:ac:a3:32:1b:de:a0:0e:
         06:fa:ac:12:4f:1b:7d:31:26:c7:aa:16:62:6f:e6:f4:50:16:
         fc:c2:92:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 20:00:13 2026 by rpki-client