Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/cc601ecf-87ab-3dcf-851f-1fa4d0daa47e.roa
File:                     cc601ecf-87ab-3dcf-851f-1fa4d0daa47e.roa (raw, json)
Hash identifier:          Wm02Bsy4cusD3QB/g7jtgQfdQOqMSPzltWGB0+nxbAE=
Subject key identifier:   6D:A6:D0:3F:24:14:48:AB:A4:C0:B3:68:46:FD:EE:2C:86:09:DF:33
Certificate issuer:       /CN=da370214-1d61-48bf-84a0-a60096ccaae7
Certificate serial:       010D0C9F4328584D86957FE9D55413B422953380
Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/cc601ecf-87ab-3dcf-851f-1fa4d0daa47e.roa
Signing time:             Thu 16 Apr 2026 13:00:31 +0000
ROA not before:           Thu 16 Apr 2026 13:00:31 +0000
ROA not after:            Wed 15 Jul 2026 13:00:31 +0000
asID:                     6079
IP address blocks:        66.92.112.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:86:95:7f:e9:d5:54:13:b4:22:95:33:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7
        Validity
            Not Before: Apr 16 13:00:31 2026 GMT
            Not After : Jul 15 13:00:31 2026 GMT
        Subject: CN=d99d143b-25db-4735-b0f3-9f6d33907360
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:df:b8:c2:23:23:b1:57:6d:22:87:bf:9b:45:
                    a4:60:df:2c:bb:97:31:a7:d2:7f:97:ac:ca:84:c6:
                    29:b4:ee:c4:a4:94:c4:26:41:4a:d1:e3:58:50:df:
                    f4:da:67:a5:3f:64:c3:ec:64:4f:1e:b3:ae:5d:b8:
                    87:c5:a2:f9:ba:48:c1:69:e6:c6:63:ed:6c:47:2b:
                    d8:1f:67:c2:22:48:3d:d7:f2:64:43:6d:58:6e:d6:
                    e5:b3:9a:ff:78:7c:e1:c9:4b:f3:18:26:df:14:32:
                    f4:f6:df:15:81:b5:ce:59:89:9e:38:78:45:4c:f8:
                    7b:ce:3f:53:b4:49:96:b4:a6:fa:32:49:c3:c5:fc:
                    61:c8:19:c1:34:89:bb:48:7e:52:0d:8e:65:46:af:
                    f9:d5:37:36:74:26:f0:72:17:37:72:21:9d:d9:55:
                    a3:fd:5c:00:42:41:09:c4:96:79:2c:17:08:77:08:
                    ed:54:a4:17:d9:8b:ee:22:9a:22:2a:85:bd:dd:b6:
                    65:03:0e:f4:b7:2a:13:d0:a5:33:07:1b:e5:d6:5d:
                    68:79:53:75:a7:01:3b:7b:70:02:d8:3a:db:df:8f:
                    c8:68:b8:90:de:bb:09:f1:1c:e3:5d:51:67:02:fa:
                    33:54:c2:0d:31:cc:fc:05:8d:a6:ba:7b:5e:b9:0c:
                    1a:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:A6:D0:3F:24:14:48:AB:A4:C0:B3:68:46:FD:EE:2C:86:09:DF:33
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/cc601ecf-87ab-3dcf-851f-1fa4d0daa47e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl

            X509v3 Authority Key Identifier:
                keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.92.112.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ad:8b:9e:ec:9f:04:c2:ca:9c:d4:10:b0:10:9e:81:a2:56:65:
         70:4f:aa:f9:56:27:83:b7:ad:77:38:24:03:b2:95:bc:79:4f:
         8d:fb:76:16:15:aa:35:14:5c:e6:a1:9b:06:0a:98:99:f2:d5:
         64:53:f5:93:00:de:e8:bf:2a:42:ce:32:49:e3:66:cd:90:59:
         c8:16:21:35:0b:2c:f6:5b:7e:30:1d:17:c8:55:77:0f:72:21:
         ac:b9:3c:be:ab:9a:6f:44:9e:51:a4:47:92:cf:1d:13:2f:f0:
         60:9f:d2:de:cd:e6:d6:74:fe:54:49:e1:7d:2a:25:66:fe:0b:
         1f:4b:29:04:41:de:ec:cb:ac:08:a8:b1:b8:85:df:a9:aa:7d:
         ac:27:51:15:72:19:54:ce:18:2e:50:24:d0:d7:1c:ea:5e:47:
         0f:6f:a8:e3:ad:e6:75:31:af:c5:05:04:03:5d:fe:d6:12:b1:
         62:1e:88:de:70:63:30:cc:4d:3e:b1:ee:30:54:b8:05:b7:ec:
         39:f6:1c:a3:b9:27:e8:52:5b:5d:c7:4f:cf:87:47:2e:dd:5b:
         b7:10:66:de:b9:9f:e5:5b:c7:d2:59:a4:36:e1:e8:74:84:0a:
         66:47:c6:cf:7f:d6:d2:8d:69:50:c5:6b:14:89:f1:f5:76:a0:
         77:e4:01:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 20:54:36 2026 by rpki-client