Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/633577db-b536-4aaf-b9a1-5bcbc598f2e3/5ca16d79-c43b-39e4-8cda-77a30be0272d.roa
File:                     5ca16d79-c43b-39e4-8cda-77a30be0272d.roa (raw, json)
Hash identifier:          KqgJFGZIvMkzPMRUvpb7mWYUmvLb78g8vA0CzR98zTs=
Subject key identifier:   5C:28:48:3D:8F:EA:5A:86:35:7B:AB:6B:31:BD:10:2A:B3:7C:7A:A7
Certificate issuer:       /CN=633577db-b536-4aaf-b9a1-5bcbc598f2e3
Certificate serial:       010D0C9F4328584E1B798F451AF9DAFCF585E640
Authority key identifier: E6:F8:FB:EC:98:60:8A:2A:11:11:66:BA:90:81:E5:E7:7A:AB:9F:9D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/633577db-b536-4aaf-b9a1-5bcbc598f2e3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/633577db-b536-4aaf-b9a1-5bcbc598f2e3/5ca16d79-c43b-39e4-8cda-77a30be0272d.roa
Signing time:             Mon 08 Jun 2026 21:00:12 +0000
ROA not before:           Mon 08 Jun 2026 21:00:12 +0000
ROA not after:            Sun 06 Sep 2026 21:00:12 +0000
asID:                     400610
IP address blocks:        66.219.116.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/633577db-b536-4aaf-b9a1-5bcbc598f2e3/633577db-b536-4aaf-b9a1-5bcbc598f2e3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/633577db-b536-4aaf-b9a1-5bcbc598f2e3/633577db-b536-4aaf-b9a1-5bcbc598f2e3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/633577db-b536-4aaf-b9a1-5bcbc598f2e3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 15 Jun 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:1b:79:8f:45:1a:f9:da:fc:f5:85:e6:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=633577db-b536-4aaf-b9a1-5bcbc598f2e3
        Validity
            Not Before: Jun  8 21:00:12 2026 GMT
            Not After : Sep  6 21:00:12 2026 GMT
        Subject: CN=8ff21c23-095d-4b69-aa63-97908799e93e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:c6:50:fb:82:e5:db:c7:79:dc:82:25:45:c1:
                    ff:1b:02:53:db:ce:8c:71:a2:de:db:bd:e0:da:a5:
                    52:d4:9b:e0:27:e8:25:46:e4:e9:8d:d4:47:25:17:
                    29:f2:65:b3:77:17:03:9e:d5:a0:7a:54:7b:3b:20:
                    33:41:6d:be:01:08:cd:c7:bb:fd:b0:20:8b:74:8a:
                    26:eb:09:bf:03:8b:0c:1a:54:77:f6:6c:24:44:2c:
                    b1:ad:d4:de:88:f4:4c:8f:48:a5:1b:ca:18:75:f0:
                    37:30:3a:70:fd:66:a6:79:d7:1c:35:12:48:cd:2e:
                    bc:2f:34:0e:53:52:e7:0e:96:b2:6a:f5:b1:ad:bd:
                    67:5e:dc:93:29:40:18:ee:35:d2:fb:e6:bc:30:f5:
                    4e:cd:f0:76:bc:21:b1:e3:86:eb:72:5a:34:d3:ba:
                    2a:eb:90:42:54:1d:61:b3:16:43:38:38:99:c7:43:
                    75:23:1a:c1:fb:33:ff:98:3f:66:20:1d:4b:51:7d:
                    05:33:a2:5e:bb:c3:f6:17:5b:6c:79:97:23:3d:c9:
                    a0:aa:31:a3:60:11:00:e6:9a:a8:78:4c:fe:67:da:
                    1f:80:85:54:95:dd:cd:2b:04:2e:bb:ed:66:bc:25:
                    9f:d5:76:f4:d5:30:de:15:60:f1:ef:6a:31:9d:18:
                    8d:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:28:48:3D:8F:EA:5A:86:35:7B:AB:6B:31:BD:10:2A:B3:7C:7A:A7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/633577db-b536-4aaf-b9a1-5bcbc598f2e3/5ca16d79-c43b-39e4-8cda-77a30be0272d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/633577db-b536-4aaf-b9a1-5bcbc598f2e3/633577db-b536-4aaf-b9a1-5bcbc598f2e3.crl

            X509v3 Authority Key Identifier:
                keyid:E6:F8:FB:EC:98:60:8A:2A:11:11:66:BA:90:81:E5:E7:7A:AB:9F:9D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/633577db-b536-4aaf-b9a1-5bcbc598f2e3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.219.116.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         55:28:7d:b3:76:61:0a:11:25:f9:9f:e9:72:56:7f:17:0a:55:
         74:64:4e:2c:88:58:7a:1f:66:b0:b2:4a:6d:15:94:00:d8:d8:
         7d:cc:07:6a:db:d6:9a:d6:10:10:8c:29:da:5f:48:8d:06:69:
         f0:a9:22:a9:c0:7e:4f:5b:0a:5b:1e:16:63:1b:62:94:bc:00:
         6d:c1:16:e7:bc:21:91:c4:62:46:f5:25:7e:2a:a2:98:d4:7f:
         fa:9f:3d:0e:68:54:ea:2d:4c:26:9e:85:81:43:1a:73:7e:3a:
         7a:1f:e3:2f:7c:25:f3:d2:e6:4a:65:bb:84:67:62:fc:c7:25:
         9c:41:4c:d8:b1:66:cc:c5:1c:9e:a5:cc:ae:06:33:90:81:ee:
         8c:78:51:81:9e:8a:7f:2d:82:6a:7f:c0:d9:cd:f0:60:a9:d8:
         72:92:86:7d:ed:4a:2d:91:c6:1e:dc:b6:66:8a:7a:86:82:c4:
         d8:ca:8d:62:72:d0:9a:d3:79:73:f3:2f:6b:b5:5f:02:df:db:
         98:4e:4d:c1:58:96:2e:b6:e7:7c:2d:ba:90:da:95:ef:61:0a:
         95:44:59:6d:e5:2c:94:69:31:2a:39:88:cd:ea:5a:b7:58:5b:
         82:0a:e2:ea:06:a3:2d:cf:49:6d:84:c1:00:9e:c3:ec:a0:e3:
         35:76:33:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 18:42:39 2026 by rpki-client