Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/a6441cc0-8b50-4315-89e5-520919883370/a6726a3a-a08c-31d3-b67e-6bb1c9aa3aa0.roa
File:                     a6726a3a-a08c-31d3-b67e-6bb1c9aa3aa0.roa (raw, json)
Hash identifier:          gPQALq71wfNs0UiP4CVZGp1KvZgWwzPAl1MGbbDNLMA=
Subject key identifier:   EC:BB:B9:39:42:FE:0D:A5:85:7B:D0:3F:F4:A4:9F:1C:E5:05:D2:3C
Certificate issuer:       /CN=a6441cc0-8b50-4315-89e5-520919883370
Certificate serial:       010D0C9F4328584D5E12494DD5AF7BE578BE75E0
Authority key identifier: 90:CE:5D:C3:78:1C:50:BC:2C:46:56:9D:B2:C0:2A:69:0C:A2:5F:7C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/a6441cc0-8b50-4315-89e5-520919883370.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/a6441cc0-8b50-4315-89e5-520919883370/a6726a3a-a08c-31d3-b67e-6bb1c9aa3aa0.roa
Signing time:             Thu 02 Apr 2026 00:44:24 +0000
ROA not before:           Thu 02 Apr 2026 00:44:24 +0000
ROA not after:            Wed 01 Jul 2026 00:44:24 +0000
asID:                     397570
IP address blocks:        66.205.247.0/24 maxlen: 24
                          172.82.35.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/a6441cc0-8b50-4315-89e5-520919883370/a6441cc0-8b50-4315-89e5-520919883370.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/a6441cc0-8b50-4315-89e5-520919883370/a6441cc0-8b50-4315-89e5-520919883370.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/a6441cc0-8b50-4315-89e5-520919883370.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:5e:12:49:4d:d5:af:7b:e5:78:be:75:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a6441cc0-8b50-4315-89e5-520919883370
        Validity
            Not Before: Apr  2 00:44:24 2026 GMT
            Not After : Jul  1 00:44:24 2026 GMT
        Subject: CN=8598460a-5313-4615-bf7b-6821e8b28610
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:f9:f4:b9:0d:6a:f9:e7:9b:c3:d5:31:4c:c6:
                    97:86:99:2e:e0:96:ed:c6:90:93:01:9b:0e:58:8e:
                    be:5b:b1:e3:d4:eb:52:db:6d:2c:e6:13:ba:ae:9e:
                    01:16:9f:fb:5f:08:cd:be:dd:2c:43:23:22:7b:06:
                    d4:9d:25:17:5a:18:3d:85:0c:88:fc:18:72:3a:bf:
                    84:55:90:d7:cd:b1:14:5d:7a:6f:8d:fa:31:e3:1f:
                    9a:31:3b:3a:e3:c0:28:3e:85:6c:58:01:cc:28:be:
                    2f:61:57:63:67:f8:f4:87:1e:c5:25:2e:53:19:94:
                    7c:24:7d:cb:3f:71:07:ab:5d:14:e7:77:e7:b7:ca:
                    e0:6d:62:a6:7f:06:7f:2b:be:64:22:91:fb:1f:1c:
                    b9:0b:ad:19:8a:17:0f:5e:2f:f1:61:44:c1:50:25:
                    a0:17:5a:94:d4:b7:b3:22:bf:6f:0c:37:fa:26:8f:
                    9b:30:5e:28:ac:09:a4:a0:83:36:c5:ec:c9:40:a8:
                    6d:3b:91:ca:1f:0e:b1:d6:9f:80:21:57:19:66:45:
                    31:bd:63:3d:80:8d:37:72:b9:5b:30:d8:7c:55:5e:
                    5e:6b:22:ea:8c:63:6f:58:44:6c:4b:6c:c9:96:41:
                    2d:28:1f:0b:ab:ce:59:d8:8f:cf:97:2f:f2:73:79:
                    f9:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:BB:B9:39:42:FE:0D:A5:85:7B:D0:3F:F4:A4:9F:1C:E5:05:D2:3C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/a6441cc0-8b50-4315-89e5-520919883370/a6726a3a-a08c-31d3-b67e-6bb1c9aa3aa0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/a6441cc0-8b50-4315-89e5-520919883370/a6441cc0-8b50-4315-89e5-520919883370.crl

            X509v3 Authority Key Identifier:
                keyid:90:CE:5D:C3:78:1C:50:BC:2C:46:56:9D:B2:C0:2A:69:0C:A2:5F:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/a6441cc0-8b50-4315-89e5-520919883370.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.205.247.0/24
                  172.82.35.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         bd:17:22:da:90:39:10:bb:3f:80:f0:1b:d1:b8:41:a3:96:1e:
         fd:8d:55:d6:22:c4:30:03:6a:33:5c:5e:8f:47:d4:13:ab:40:
         12:3f:f7:70:2a:70:32:c5:d2:0c:45:88:f7:ae:36:23:6f:69:
         9c:b8:1a:96:16:50:2e:89:59:8c:17:8d:1c:a1:66:12:81:cf:
         f5:be:c4:6d:5b:5e:b0:90:79:60:0f:d2:71:00:4b:62:3c:44:
         1b:b5:2d:3f:21:20:05:7f:ca:bb:d0:92:7c:d2:11:07:e7:4b:
         e5:b1:16:9e:11:72:4e:33:cd:7d:c2:55:d7:ae:1d:9f:86:11:
         60:a2:c5:2f:cb:7c:cd:2a:0c:9e:27:94:70:49:78:3a:2f:81:
         5a:4d:ab:01:6b:0c:05:c8:65:cf:d4:a0:3f:9e:fd:13:4d:a4:
         10:51:2e:0d:82:c2:43:0e:5f:22:92:6b:0f:52:f9:e9:08:10:
         09:3e:f9:0c:37:00:2c:06:ed:c7:bc:7b:d9:08:99:43:7a:6b:
         11:97:44:e6:b4:95:94:9c:37:ab:e0:91:07:30:20:f4:c6:74:
         cb:cc:27:31:3b:b5:3a:5b:e6:b8:65:f2:df:7b:ae:af:5d:7f:
         fe:20:60:6f:45:a0:68:1a:be:6f:c4:2e:20:3b:4c:fc:f4:ca:
         53:ed:aa:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 21:19:33 2026 by rpki-client