Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/2b6ddeac-f233-3429-8785-5def0d6a5bbe.roa
File:                     2b6ddeac-f233-3429-8785-5def0d6a5bbe.roa (raw, json)
Hash identifier:          FDB/m96WmhvNJiYTB3iPs6Imz+oqYIPES9gVQq7qeck=
Subject key identifier:   4F:4D:A2:F1:73:AA:33:8B:38:52:4D:D3:A9:00:7A:C3:3B:EB:CD:FA
Certificate issuer:       /CN=da370214-1d61-48bf-84a0-a60096ccaae7
Certificate serial:       010D0C9F4328584EA79877E48899CEB2ABF01B00
Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/2b6ddeac-f233-3429-8785-5def0d6a5bbe.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     5650
IP address blocks:        66.93.124.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 31 Jul 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:98:77:e4:88:99:ce:b2:ab:f0:1b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=6b263254-3d37-4374-b246-bd1e09128f51
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:ba:a7:3b:2d:28:ba:4e:30:a5:4a:52:7c:4c:
                    10:d6:87:02:3d:72:f4:e2:f8:e1:a2:10:cf:81:a3:
                    e7:00:b4:ac:60:21:25:3e:6d:d1:e7:08:e4:40:4d:
                    cc:c8:65:fd:2c:cd:70:cb:42:36:c4:1a:92:a8:8a:
                    47:d6:47:ba:bb:53:34:86:0d:d5:bb:35:f2:b9:31:
                    3a:d4:2b:a6:a6:89:4d:af:f9:4d:99:65:f6:97:53:
                    99:ef:31:ad:ee:6e:6c:f9:96:a2:69:0c:c8:0b:a2:
                    0f:ef:19:cb:c3:8a:2f:2b:5a:0d:7d:72:fb:0b:eb:
                    a0:83:b0:54:22:d1:bf:a5:aa:49:ab:dc:cf:f9:57:
                    97:db:ab:05:93:aa:65:77:16:28:8a:be:6c:a2:67:
                    38:58:0b:09:33:f6:52:82:1d:c2:5a:b2:9d:5d:25:
                    f8:96:b6:90:8e:34:12:17:17:59:3b:b0:cc:ba:27:
                    bd:54:f3:a4:fe:fe:83:0e:54:19:d2:4d:3c:8f:3b:
                    a5:42:9f:9f:e9:c5:90:12:2b:c7:e8:74:b0:d7:f0:
                    28:27:44:68:65:2d:db:29:0e:d8:ee:7e:37:1a:79:
                    18:09:62:66:35:f3:9c:55:75:7a:52:ae:7f:dd:81:
                    6d:83:23:d1:79:c1:36:ef:a3:c2:06:6d:e0:20:d4:
                    84:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:4D:A2:F1:73:AA:33:8B:38:52:4D:D3:A9:00:7A:C3:3B:EB:CD:FA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/2b6ddeac-f233-3429-8785-5def0d6a5bbe.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl

            X509v3 Authority Key Identifier:
                keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.93.124.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         18:42:2e:ca:e6:61:9f:b4:d5:75:2b:a7:16:6b:a8:23:2e:75:
         b7:99:12:2f:b4:5a:e0:48:b9:6f:fc:77:c6:9d:8a:35:cb:25:
         25:fc:16:eb:82:79:96:81:b0:c9:39:37:88:42:79:12:22:ab:
         10:15:82:2b:a1:71:d7:16:5e:30:36:ad:6f:bf:e2:6d:ac:61:
         04:28:be:3b:7a:1c:57:82:fe:e9:5d:c0:fe:b8:bf:72:21:6a:
         bd:6f:e5:18:d5:1f:b2:f2:66:dd:e8:81:1d:0a:bd:a1:bc:9f:
         5c:97:0b:7e:ba:55:ae:af:ce:b4:07:64:d3:77:b9:ee:7c:12:
         77:9c:35:5c:b6:0c:ae:b8:35:fd:9d:87:7b:40:ec:d7:c7:23:
         f1:32:98:cc:46:cc:c0:82:e7:a9:33:27:b7:84:19:29:4c:78:
         ae:6f:c4:65:22:a8:00:1b:c7:1a:fc:4c:ca:3e:61:a9:fa:ef:
         b8:59:86:54:72:6e:28:7d:fc:0f:1e:7f:87:30:a4:d0:8b:ca:
         b3:07:68:c8:06:1f:76:35:84:37:af:57:45:91:3b:2c:ea:c9:
         95:a7:8c:f0:da:9c:34:7d:60:a2:78:e7:ba:82:ed:b8:c6:cd:
         14:a8:68:1e:24:79:25:8b:4b:74:88:f9:9a:f3:29:b9:a0:5b:
         ac:fa:a0:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 19:44:47 2026 by rpki-client