Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df7ca79a-f8f5-408a-86fb-472d63ed156f/541af175-265a-3096-8295-96504805d06d.roa
File:                     541af175-265a-3096-8295-96504805d06d.roa (raw, json)
Hash identifier:          EMw6yt7zbeNXW4zaE0w+njSErzb0xsijtmYApVnpXUk=
Subject key identifier:   3F:18:4D:9C:72:74:E6:EE:DB:59:72:A9:97:85:91:A8:74:11:EF:AA
Certificate issuer:       /CN=df7ca79a-f8f5-408a-86fb-472d63ed156f
Certificate serial:       010D0C9F4328584E253F0740CF03E9FFDD0D6430
Authority key identifier: CD:25:D2:1D:B4:E5:3B:C2:CE:4F:45:5C:0F:74:36:4D:CA:A2:45:9E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df7ca79a-f8f5-408a-86fb-472d63ed156f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df7ca79a-f8f5-408a-86fb-472d63ed156f/541af175-265a-3096-8295-96504805d06d.roa
Signing time:             Fri 12 Jun 2026 09:00:11 +0000
ROA not before:           Fri 12 Jun 2026 09:00:11 +0000
ROA not after:            Thu 10 Sep 2026 09:00:11 +0000
asID:                     62537
IP address blocks:        66.85.52.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df7ca79a-f8f5-408a-86fb-472d63ed156f/df7ca79a-f8f5-408a-86fb-472d63ed156f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df7ca79a-f8f5-408a-86fb-472d63ed156f/df7ca79a-f8f5-408a-86fb-472d63ed156f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df7ca79a-f8f5-408a-86fb-472d63ed156f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 15 Jun 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:25:3f:07:40:cf:03:e9:ff:dd:0d:64:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df7ca79a-f8f5-408a-86fb-472d63ed156f
        Validity
            Not Before: Jun 12 09:00:11 2026 GMT
            Not After : Sep 10 09:00:11 2026 GMT
        Subject: CN=1cf19f3c-1a8f-41d1-8ae4-c2c62e0ba01a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:9b:d7:bc:73:6a:d2:a5:91:8f:e9:e9:d8:71:
                    6e:48:9d:fe:42:42:48:9f:8e:3c:45:fe:22:95:b3:
                    6e:b7:43:ce:2d:32:52:26:5a:fa:fb:e2:26:c4:84:
                    52:d4:29:ce:3d:ba:a3:40:52:4e:46:92:45:ca:62:
                    2c:ad:fd:1e:f2:0a:dd:7b:9d:0c:7d:98:51:4b:99:
                    82:44:aa:b4:08:f7:b2:ec:d1:ff:0d:2e:72:d5:33:
                    ef:e2:b3:a1:85:de:5a:5e:f2:05:0f:b3:06:26:2f:
                    0f:15:a1:a5:66:d6:fe:d8:60:63:99:db:3c:2b:a8:
                    0e:8a:a4:eb:41:b4:62:47:b8:7b:f9:8c:e5:5c:95:
                    e3:76:31:3e:24:e6:60:a2:32:cf:ba:9a:49:c3:12:
                    e6:56:5f:bc:55:00:f8:8e:8a:91:48:c2:66:1d:92:
                    04:9e:79:d5:a3:74:a6:bc:da:b1:cb:87:26:8f:36:
                    2f:ac:50:7d:fe:b8:96:d7:d5:1e:32:b5:e1:78:d9:
                    9e:a5:0d:0d:a0:27:69:f2:95:9d:e8:a6:f3:e3:48:
                    48:23:0f:73:eb:11:bf:a2:55:71:bf:de:29:a3:f2:
                    28:09:d4:bf:73:28:9e:e8:82:9c:32:02:f9:f6:b0:
                    16:1c:6d:e9:1f:30:6f:de:62:67:72:39:29:22:b0:
                    58:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:18:4D:9C:72:74:E6:EE:DB:59:72:A9:97:85:91:A8:74:11:EF:AA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df7ca79a-f8f5-408a-86fb-472d63ed156f/541af175-265a-3096-8295-96504805d06d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df7ca79a-f8f5-408a-86fb-472d63ed156f/df7ca79a-f8f5-408a-86fb-472d63ed156f.crl

            X509v3 Authority Key Identifier:
                keyid:CD:25:D2:1D:B4:E5:3B:C2:CE:4F:45:5C:0F:74:36:4D:CA:A2:45:9E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df7ca79a-f8f5-408a-86fb-472d63ed156f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.85.52.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         47:92:35:b5:4d:7d:d5:7f:f6:ad:f7:ab:7e:24:4e:cf:cc:00:
         e1:fb:4e:16:30:d1:5e:b2:93:dc:45:2e:6b:c6:52:9f:a6:61:
         4d:73:32:63:60:99:14:04:7d:ae:ac:51:8f:98:0d:21:86:9a:
         3f:16:fc:d9:0f:0a:8d:e7:d1:58:7a:c4:01:ab:df:7f:b5:a1:
         60:ce:70:cf:79:27:ab:96:1e:7f:36:57:3a:99:25:b0:76:d6:
         18:02:a6:0c:3d:91:ce:b6:e8:66:91:66:33:d1:c5:0d:9f:f5:
         e9:10:f1:c0:57:13:58:3f:10:4e:cf:9f:58:fe:92:9e:cf:e9:
         c0:25:22:3a:d0:9c:2e:79:45:be:a8:d8:9d:68:ab:f0:1d:3f:
         74:92:26:2a:b9:52:ee:ed:91:b2:4c:b7:90:18:f9:66:64:4b:
         10:40:37:df:3a:87:e8:54:f3:d2:33:b7:48:08:33:95:3d:20:
         a0:30:aa:94:f2:83:60:36:6d:a8:ea:2f:fb:21:ef:93:0c:f8:
         65:36:35:ed:5a:30:31:32:50:4c:bf:fc:a9:28:8c:8a:b1:c8:
         e4:40:1a:16:3e:b2:1b:8f:a1:c1:1e:36:0a:68:e8:b6:06:ca:
         9e:52:1e:a6:c0:de:b4:11:b6:04:48:2e:06:71:69:9b:04:ca:
         68:f0:ab:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 00:45:30 2026 by rpki-client