Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/a7303dff-f882-3a07-b42a-7634ed6f964a.roa
File:                     a7303dff-f882-3a07-b42a-7634ed6f964a.roa (raw, json)
Hash identifier:          uib6E5/zOMLbXBqU8kUV4y6oHsBcGZrBLTD+WQedSlM=
Subject key identifier:   E9:01:F8:16:E1:33:8F:44:E7:1A:95:00:5D:BB:49:4F:C0:D7:46:28
Certificate issuer:       /CN=da370214-1d61-48bf-84a0-a60096ccaae7
Certificate serial:       010D0C9F4328584DF375E9687D81081D046BE620
Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/a7303dff-f882-3a07-b42a-7634ed6f964a.roa
Signing time:             Mon 25 May 2026 13:00:31 +0000
ROA not before:           Mon 25 May 2026 13:00:31 +0000
ROA not after:            Sun 23 Aug 2026 13:00:31 +0000
asID:                     401783
IP address blocks:        66.80.172.0/22 maxlen: 24
                          207.145.96.0/22 maxlen: 24
                          207.145.184.0/22 maxlen: 24
                          207.168.116.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 15 Jun 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:f3:75:e9:68:7d:81:08:1d:04:6b:e6:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7
        Validity
            Not Before: May 25 13:00:31 2026 GMT
            Not After : Aug 23 13:00:31 2026 GMT
        Subject: CN=6ddf3c29-9e71-4021-8758-09a1824dedbd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:71:51:64:bc:45:15:2e:8f:b1:af:32:0a:1d:
                    61:e6:ae:2b:64:f0:4a:55:b7:05:d4:d4:6a:28:e8:
                    b3:83:50:86:67:67:12:5e:a9:39:4b:be:85:04:6d:
                    de:48:78:52:58:45:41:4d:60:5f:24:01:5d:e1:7f:
                    b6:12:3f:ef:53:94:7c:94:bc:8c:20:1c:30:44:4a:
                    05:8e:c9:6e:20:30:a8:2c:fe:46:d6:6d:76:19:c2:
                    12:e3:96:f2:4a:2f:c0:6c:58:bf:17:c1:fb:47:54:
                    f1:96:8f:8e:d1:b8:f7:fd:6b:f7:a0:06:13:f4:a3:
                    92:86:a8:ae:6a:fe:2e:d4:aa:f2:a8:34:4c:79:a4:
                    3d:02:2f:b9:48:d5:55:c0:e1:f1:aa:39:61:20:2e:
                    c3:7d:45:ce:86:db:f0:fc:f7:04:0c:be:c4:66:c7:
                    12:5e:60:3c:59:66:b1:07:f0:21:cd:7a:8d:ff:05:
                    8e:4e:d2:80:d6:0c:eb:86:1e:18:2b:53:a5:cf:78:
                    67:3a:16:35:43:fe:b9:1e:16:f7:d0:db:93:38:3c:
                    2f:5f:1f:da:8b:6f:21:86:fd:1e:2d:f1:56:fc:59:
                    15:10:3e:50:3c:49:3e:52:bd:84:ae:8c:4d:d9:5c:
                    14:fc:fb:31:bb:f7:0e:5d:ac:c9:84:8d:4f:14:cc:
                    fb:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:01:F8:16:E1:33:8F:44:E7:1A:95:00:5D:BB:49:4F:C0:D7:46:28
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/a7303dff-f882-3a07-b42a-7634ed6f964a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl

            X509v3 Authority Key Identifier:
                keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.80.172.0/22
                  207.145.96.0/22
                  207.145.184.0/22
                  207.168.116.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         47:08:58:88:fb:af:7f:64:76:86:78:57:7a:cb:6d:0a:ee:64:
         67:74:29:07:c8:33:7f:f4:54:a5:1c:83:7d:ee:77:cd:39:58:
         e2:3b:57:64:18:28:5a:dd:bb:85:4c:53:f4:ec:e6:ce:01:34:
         0e:4f:de:17:bc:9b:52:7d:f3:a7:e7:03:b4:af:d3:cb:85:88:
         60:9c:5a:6d:ba:6e:10:19:e6:7c:a9:2e:7d:e8:81:0f:35:44:
         2c:b7:e5:87:af:e7:13:ea:91:db:a4:fe:c5:b5:17:9d:dd:e4:
         26:86:84:22:34:62:5c:7a:de:6b:d8:6d:75:aa:14:2e:7a:2a:
         8c:3e:f4:e7:b4:1d:20:91:d9:8e:a6:a7:02:2b:1b:43:97:74:
         53:96:91:8b:5a:90:e6:f5:b4:c9:e3:98:76:13:41:19:36:8c:
         63:57:a3:87:99:77:7d:41:dc:11:fb:fe:72:2e:95:83:c8:ec:
         c5:22:55:27:92:47:8f:40:4f:17:19:87:e2:5d:71:7c:ed:a7:
         22:47:92:51:1e:04:d6:75:f2:0c:2d:dd:05:8e:05:e8:f8:09:
         32:45:9a:40:1b:3b:e9:b8:50:b5:cd:49:5b:4b:b4:e0:08:95:
         0a:cb:67:4b:18:3d:61:72:83:c3:a6:52:e0:5a:7d:9c:44:3c:
         d9:e3:57:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 00:53:25 2026 by rpki-client