Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/306772fb-1d86-38f2-8e6c-664150d1e0f2.roa
File:                     306772fb-1d86-38f2-8e6c-664150d1e0f2.roa (raw, json)
Hash identifier:          sEJadwGXWSzD6UTDyloKuTI2dr17aLLg6ZQl/R5jgm8=
Subject key identifier:   F9:5A:8D:E7:F5:23:77:03:A7:67:71:CD:C5:54:10:06:64:B0:5E:18
Certificate issuer:       /CN=da370214-1d61-48bf-84a0-a60096ccaae7
Certificate serial:       010D0C9F4328584E1319943F695F1F5EA039B710
Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/306772fb-1d86-38f2-8e6c-664150d1e0f2.roa
Signing time:             Fri 05 Jun 2026 21:00:12 +0000
ROA not before:           Fri 05 Jun 2026 21:00:12 +0000
ROA not after:            Thu 03 Sep 2026 21:00:12 +0000
asID:                     20115
IP address blocks:        67.103.32.0/19 maxlen: 24
                          67.103.224.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 15 Jun 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:13:19:94:3f:69:5f:1f:5e:a0:39:b7:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7
        Validity
            Not Before: Jun  5 21:00:12 2026 GMT
            Not After : Sep  3 21:00:12 2026 GMT
        Subject: CN=420dfcde-4f53-4521-a840-3761dc110040
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:ea:e2:49:22:62:56:8f:de:5b:bb:24:59:80:
                    a5:8f:72:0d:cd:06:37:ca:4c:a1:94:c9:06:0f:b9:
                    c2:94:dc:88:9b:fc:b5:d5:8f:8d:16:82:ed:3c:b3:
                    e1:ce:7b:aa:da:07:1d:06:76:ad:ac:d7:83:7d:e7:
                    a0:e2:78:49:97:7c:38:fc:00:7f:38:26:af:cc:d1:
                    27:8a:9e:08:8d:01:4a:a2:77:5e:14:77:eb:c2:62:
                    cc:9a:fa:b7:76:28:02:e2:fd:65:5d:5c:ff:f0:0f:
                    72:10:e9:b8:6d:30:f7:bb:3d:92:b4:6c:46:95:16:
                    ea:c3:b3:0d:28:25:de:4d:87:cf:45:59:e4:1c:79:
                    fe:49:ee:d6:36:1c:e0:ed:95:ec:b4:8f:c0:33:64:
                    7d:96:b0:ec:27:a2:51:55:f2:d8:28:aa:3c:63:a8:
                    13:9c:6f:4b:ac:1a:62:1d:5a:cd:77:ee:9d:f3:ee:
                    49:db:ce:c7:31:49:0c:03:4c:19:09:ac:36:0f:6e:
                    fe:35:ad:04:14:41:be:45:a0:06:44:d2:c8:da:54:
                    05:12:bd:bc:92:52:45:71:df:43:0d:e8:52:5c:2e:
                    c1:61:4f:ca:2e:47:43:8f:86:2e:f3:e4:c7:ea:24:
                    17:b4:30:de:9d:1a:a2:bb:a8:94:c6:d8:9c:61:85:
                    f7:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:5A:8D:E7:F5:23:77:03:A7:67:71:CD:C5:54:10:06:64:B0:5E:18
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/306772fb-1d86-38f2-8e6c-664150d1e0f2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl

            X509v3 Authority Key Identifier:
                keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.103.32.0/19
                  67.103.224.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         bb:d1:29:69:a1:c0:c5:c0:63:0f:69:09:04:0e:0f:00:6e:95:
         c4:6d:b1:fd:b7:5e:41:8e:bb:42:2c:c7:40:f2:18:40:b5:a3:
         fa:d4:4e:cd:a4:e4:c5:48:d8:4e:58:a4:b3:58:da:e7:df:a2:
         e4:ee:a1:38:60:eb:69:fe:7c:c9:57:28:79:e1:f7:af:40:c5:
         8f:a5:85:70:7d:99:c3:12:ff:50:66:90:17:c3:b5:1d:13:22:
         4e:b2:c3:37:7f:28:42:9c:f4:db:e5:ea:f3:73:ad:f3:16:49:
         71:a9:7f:6b:e2:3c:76:42:0f:71:b1:fb:3a:0c:2d:75:11:df:
         78:76:8b:9e:bb:8a:eb:ed:d1:d7:40:02:16:68:7c:4b:85:09:
         23:fb:9a:6b:d8:84:e8:d2:04:dd:15:94:ad:eb:65:3f:8b:d8:
         65:40:c1:65:4f:34:c0:5f:6b:7a:a5:38:70:03:c5:13:1c:91:
         93:e3:a6:1c:90:0f:fc:66:63:c3:e5:dd:a4:ee:c4:a7:08:b1:
         f9:31:6e:06:ff:a7:cf:66:af:9f:f2:54:00:20:de:c7:1a:11:
         7f:3e:68:fa:f6:b4:c6:f9:07:e9:cd:1a:5a:14:d5:e9:3d:5d:
         82:e7:bf:99:99:08:98:c3:36:cf:4c:a7:88:71:e8:1f:e4:31:
         76:cf:18:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 23:32:52 2026 by rpki-client