Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c6d16a39-472c-48cc-ac4c-7e385950a0e2/597a4a98-ab76-322c-ba9a-4708d1443182.roa
File:                     597a4a98-ab76-322c-ba9a-4708d1443182.roa (raw, json)
Hash identifier:          S7KmBgoTuFp2HnukzhtOLZQ/5BfE7D77ScjS6a1gjU0=
Subject key identifier:   78:9C:F6:E0:E2:58:E9:2F:4E:7A:2D:55:4F:B8:88:A8:D2:E7:3F:19
Certificate issuer:       /CN=c6d16a39-472c-48cc-ac4c-7e385950a0e2
Certificate serial:       010D0C9F4328584E253EEE48EB207C314A9E8000
Authority key identifier: 4E:9E:79:41:AD:55:D4:9D:9D:D7:5D:EE:90:7D:F7:4E:30:AA:90:3D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c6d16a39-472c-48cc-ac4c-7e385950a0e2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c6d16a39-472c-48cc-ac4c-7e385950a0e2/597a4a98-ab76-322c-ba9a-4708d1443182.roa
Signing time:             Fri 12 Jun 2026 09:00:11 +0000
ROA not before:           Fri 12 Jun 2026 09:00:11 +0000
ROA not after:            Thu 10 Sep 2026 09:00:11 +0000
asID:                     401319
IP address blocks:        66.51.103.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c6d16a39-472c-48cc-ac4c-7e385950a0e2/c6d16a39-472c-48cc-ac4c-7e385950a0e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c6d16a39-472c-48cc-ac4c-7e385950a0e2/c6d16a39-472c-48cc-ac4c-7e385950a0e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c6d16a39-472c-48cc-ac4c-7e385950a0e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:25:3e:ee:48:eb:20:7c:31:4a:9e:80:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c6d16a39-472c-48cc-ac4c-7e385950a0e2
        Validity
            Not Before: Jun 12 09:00:11 2026 GMT
            Not After : Sep 10 09:00:11 2026 GMT
        Subject: CN=c5a5bea5-a9a4-42cd-9e1b-6dbd2789ce3f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:1e:c4:4e:ed:93:ad:92:7b:f4:59:ed:31:95:
                    9c:44:5f:39:14:9c:fe:15:13:9a:35:06:0a:01:ac:
                    77:4a:8e:99:b2:65:0b:3e:8a:b7:55:82:b4:ee:03:
                    16:6a:27:5b:c9:2e:ce:54:5a:7d:11:8d:0e:c6:0c:
                    6b:b0:70:1f:ba:26:dd:6a:17:7a:ba:47:b1:26:6e:
                    e8:43:30:db:4a:ae:26:53:a4:5f:2c:76:98:8d:be:
                    ca:f2:db:91:6f:1e:9d:b5:7a:12:28:ee:03:36:d0:
                    32:9f:cb:ce:18:e6:0f:4b:0d:b1:55:81:16:91:2a:
                    3d:68:a7:ef:6c:cf:2d:3f:07:cd:27:0d:ed:25:c0:
                    e5:cc:6e:35:95:eb:7a:08:91:a5:6a:4b:0b:62:ae:
                    f3:68:09:13:65:08:78:94:06:cd:16:e1:d1:ea:dc:
                    2d:ab:c0:16:07:f4:c4:a1:b5:9f:43:ae:3a:7c:a6:
                    fe:b8:d2:f9:b9:51:81:a0:55:76:b3:32:9a:86:a9:
                    08:99:20:ac:fe:b9:3c:4c:57:77:b7:82:7a:59:55:
                    bc:d4:f0:3a:30:e8:2d:9f:a4:6b:36:fb:70:42:18:
                    eb:76:c3:6d:24:39:4a:98:ef:ea:c2:c7:48:3e:b6:
                    ba:c9:27:a8:45:ff:e4:82:b9:70:39:e5:87:9e:e1:
                    ce:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:9C:F6:E0:E2:58:E9:2F:4E:7A:2D:55:4F:B8:88:A8:D2:E7:3F:19
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c6d16a39-472c-48cc-ac4c-7e385950a0e2/597a4a98-ab76-322c-ba9a-4708d1443182.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c6d16a39-472c-48cc-ac4c-7e385950a0e2/c6d16a39-472c-48cc-ac4c-7e385950a0e2.crl

            X509v3 Authority Key Identifier:
                keyid:4E:9E:79:41:AD:55:D4:9D:9D:D7:5D:EE:90:7D:F7:4E:30:AA:90:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c6d16a39-472c-48cc-ac4c-7e385950a0e2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.51.103.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6e:ab:58:58:48:d9:1b:5f:f7:30:55:b3:74:7f:77:90:fc:0e:
         2c:f7:ad:27:86:24:2a:57:21:44:3d:d4:d6:43:3e:e8:aa:38:
         64:8a:6d:88:28:b7:30:b7:01:81:a4:9c:b7:22:e6:db:ed:2a:
         2c:f0:26:43:44:87:73:ad:11:ea:ba:c4:a0:41:64:f2:18:17:
         0f:b5:d8:13:50:2b:96:09:61:bd:2f:04:bd:fd:d7:48:9c:24:
         b5:6a:7b:b6:a2:25:03:6b:bc:fa:ff:d2:ed:9a:8a:cb:83:5e:
         75:15:35:44:48:97:6b:7e:7d:f3:28:2e:1d:cc:04:31:48:2d:
         d3:a2:b5:c0:f0:8b:c2:2a:5f:3e:56:c0:d1:2a:e4:f0:e4:4d:
         f3:9d:a5:10:d6:4b:03:f9:68:41:c6:fb:0a:b8:6a:92:39:7b:
         04:54:ee:02:e4:dc:cb:d7:1f:50:b9:4a:40:59:46:4f:41:a4:
         e2:ae:04:64:4b:0b:28:f1:72:4a:0a:a2:77:88:d3:f7:4c:2a:
         4c:84:94:32:3f:3b:4f:c7:4a:c9:36:dd:a8:8f:38:fb:5d:bd:
         3b:9a:ef:3b:61:d0:95:30:62:93:e3:18:3e:e6:0e:4c:24:b1:
         a4:59:da:62:de:f7:6f:7d:be:50:0e:de:9c:30:63:df:7f:45:
         be:05:41:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 16:57:47 2026 by rpki-client