Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/b83e3038-2eba-46a0-8240-4d1069d8038e/79bd44b5-96b1-3b06-ac37-206b1f66177a.roa
File:                     79bd44b5-96b1-3b06-ac37-206b1f66177a.roa (raw, json)
Hash identifier:          vU9qvuwO7dDlaY/sT4uOF0diDAhWCa3HIT0O0ugxgUY=
Subject key identifier:   19:A0:54:B1:94:E1:AC:DA:E3:23:03:63:A2:82:37:6D:88:35:D2:E6
Certificate issuer:       /CN=b83e3038-2eba-46a0-8240-4d1069d8038e
Certificate serial:       010D0C9F4328584E1B798BFCD932DCAEECBBC480
Authority key identifier: 44:5B:56:48:AE:5B:3B:62:3A:D6:8E:EB:F4:4C:5F:54:25:85:71:58
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/b83e3038-2eba-46a0-8240-4d1069d8038e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/b83e3038-2eba-46a0-8240-4d1069d8038e/79bd44b5-96b1-3b06-ac37-206b1f66177a.roa
Signing time:             Mon 08 Jun 2026 21:00:12 +0000
ROA not before:           Mon 08 Jun 2026 21:00:12 +0000
ROA not after:            Sun 06 Sep 2026 21:00:12 +0000
asID:                     40156
IP address blocks:        66.187.64.0/20 maxlen: 20
                          162.218.228.0/22 maxlen: 22
                          216.230.224.0/20 maxlen: 20
                          2604:e880::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/b83e3038-2eba-46a0-8240-4d1069d8038e/b83e3038-2eba-46a0-8240-4d1069d8038e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/b83e3038-2eba-46a0-8240-4d1069d8038e/b83e3038-2eba-46a0-8240-4d1069d8038e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/b83e3038-2eba-46a0-8240-4d1069d8038e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:1b:79:8b:fc:d9:32:dc:ae:ec:bb:c4:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b83e3038-2eba-46a0-8240-4d1069d8038e
        Validity
            Not Before: Jun  8 21:00:12 2026 GMT
            Not After : Sep  6 21:00:12 2026 GMT
        Subject: CN=828bbd20-94da-4ee9-9360-1ef7d27f15d6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:39:50:6a:6c:7d:1f:9a:87:6a:28:8a:9e:c8:
                    5f:17:ac:17:26:93:98:69:04:8d:29:db:7c:30:d1:
                    89:19:98:05:4c:c6:49:c1:dc:9c:de:b9:ad:82:a5:
                    37:fb:5a:0b:06:30:08:dc:a0:bb:5f:dd:ce:8b:78:
                    6a:df:d1:9d:4b:96:39:13:62:50:42:59:e1:dd:78:
                    0e:20:28:dd:95:f1:71:d7:c0:b1:b6:77:bd:99:91:
                    f7:b0:d6:64:96:43:ce:eb:2c:eb:d2:d5:ab:dc:c3:
                    9b:77:d8:32:63:ec:42:e8:7d:0d:7c:71:82:28:5e:
                    20:f7:0c:b7:6f:a6:f0:41:f5:b0:17:b5:a3:93:df:
                    5d:c0:c5:d9:f3:39:51:0a:0f:9b:7e:6e:46:fd:e4:
                    f6:09:8c:33:59:5b:1a:99:0b:a7:55:0d:33:ec:6d:
                    72:5a:8a:99:35:36:f8:f7:48:ca:64:27:73:38:cf:
                    b8:28:ab:ea:04:e2:cc:ad:ed:f4:a4:53:bb:05:a7:
                    86:da:06:ee:4e:11:07:aa:16:b6:59:22:95:a3:2a:
                    bf:e3:8b:b2:c4:92:1a:06:ef:35:1f:94:7d:de:e1:
                    8e:d7:09:0a:5c:93:bd:78:0f:0f:16:34:7c:dc:0b:
                    22:ff:7c:15:02:db:79:36:60:db:a8:93:d1:fb:db:
                    e8:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:A0:54:B1:94:E1:AC:DA:E3:23:03:63:A2:82:37:6D:88:35:D2:E6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/b83e3038-2eba-46a0-8240-4d1069d8038e/79bd44b5-96b1-3b06-ac37-206b1f66177a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/b83e3038-2eba-46a0-8240-4d1069d8038e/b83e3038-2eba-46a0-8240-4d1069d8038e.crl

            X509v3 Authority Key Identifier:
                keyid:44:5B:56:48:AE:5B:3B:62:3A:D6:8E:EB:F4:4C:5F:54:25:85:71:58

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/b83e3038-2eba-46a0-8240-4d1069d8038e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.187.64.0/20
                  162.218.228.0/22
                  216.230.224.0/20
                IPv6:
                  2604:e880::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ca:b8:f0:62:3a:a5:c6:b6:b6:52:41:e0:5b:a2:57:4d:77:51:
         6e:19:d9:c3:a4:79:4d:2e:5d:d4:0c:d7:97:9f:ca:87:db:a6:
         20:67:10:52:d8:7a:c9:1b:4d:ab:af:39:fe:4b:a0:88:aa:c1:
         88:23:02:37:c6:9c:0c:29:61:4a:61:81:6b:b3:c9:77:ce:a5:
         6c:23:c6:27:18:72:41:0a:eb:60:8d:ff:51:e3:db:9b:a2:7e:
         01:cb:33:de:61:bc:e0:17:4a:65:a1:58:25:c8:d7:d5:3a:a5:
         b7:81:72:ce:35:b6:c6:0b:95:60:b5:25:97:ee:88:e0:ff:4d:
         3c:0b:73:87:9c:bd:96:56:40:6d:c8:94:34:ed:5b:8c:4e:9b:
         62:73:7c:83:84:f6:45:83:fb:51:cd:66:f9:c0:7d:b9:27:48:
         d5:dc:c7:50:4e:61:00:9f:49:aa:e2:ac:ef:65:92:81:7f:32:
         d9:71:b9:57:8b:47:9f:04:89:7d:78:96:b0:43:58:9e:16:d7:
         ba:73:08:6a:6c:2f:c5:ed:b1:ba:4a:2f:70:91:e9:70:a2:c9:
         66:2b:b7:47:94:7a:15:be:17:3b:25:5f:fb:aa:cb:1f:18:22:
         99:75:0c:70:b1:79:69:8c:02:20:d9:6f:89:04:ab:32:13:b6:
         74:fa:56:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 16:55:12 2026 by rpki-client