Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0d86638a-2e12-4aa4-bdcd-22665b26e57c/941a6f47-59af-3c1c-8104-bf3efddc1d95.roa
File:                     941a6f47-59af-3c1c-8104-bf3efddc1d95.roa (raw, json)
Hash identifier:          Y686KyCUKyRt0rpbWcziJPKh7juO48ed0XJmDmOUlcw=
Subject key identifier:   BC:D7:A2:35:82:7F:5F:E6:96:33:84:28:DD:5E:97:2B:78:EB:E3:30
Certificate issuer:       /CN=0d86638a-2e12-4aa4-bdcd-22665b26e57c
Certificate serial:       010D0C9F4328584E9BE5110DEE4576416C614100
Authority key identifier: 58:46:71:B4:EB:9B:8E:63:06:78:A4:72:C1:68:25:40:B3:3F:13:D7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0d86638a-2e12-4aa4-bdcd-22665b26e57c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0d86638a-2e12-4aa4-bdcd-22665b26e57c/941a6f47-59af-3c1c-8104-bf3efddc1d95.roa
Signing time:             Fri 24 Jul 2026 21:00:12 +0000
ROA not before:           Fri 24 Jul 2026 21:00:12 +0000
ROA not after:            Thu 22 Oct 2026 21:00:12 +0000
asID:                     14618
IP address blocks:        66.197.184.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0d86638a-2e12-4aa4-bdcd-22665b26e57c/0d86638a-2e12-4aa4-bdcd-22665b26e57c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0d86638a-2e12-4aa4-bdcd-22665b26e57c/0d86638a-2e12-4aa4-bdcd-22665b26e57c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0d86638a-2e12-4aa4-bdcd-22665b26e57c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 29 Jul 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:9b:e5:11:0d:ee:45:76:41:6c:61:41:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0d86638a-2e12-4aa4-bdcd-22665b26e57c
        Validity
            Not Before: Jul 24 21:00:12 2026 GMT
            Not After : Oct 22 21:00:12 2026 GMT
        Subject: CN=ab225fe8-6cc2-4112-ad3c-0b23e8c4ad3e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:ce:2d:1d:19:f2:fa:43:65:30:68:4e:c9:47:
                    56:6b:80:49:da:92:e0:97:80:bc:67:41:05:b2:fa:
                    0d:a6:d2:1b:72:be:fc:8d:1a:fb:5f:b5:cf:1b:ff:
                    f9:db:b2:13:e9:56:8d:9b:11:7c:de:3c:ed:ec:ed:
                    ee:83:c6:a8:10:bc:2f:1a:31:59:c9:d2:46:41:ff:
                    0f:e0:31:71:8b:aa:c5:78:6d:62:79:10:3c:3c:35:
                    90:e1:2b:ba:93:8d:d8:7b:85:ee:0f:9e:9f:a0:6a:
                    55:65:12:13:a1:77:c4:48:61:d5:c0:72:b2:9c:d1:
                    a2:f1:7b:3e:92:f8:0d:bb:f5:36:23:40:ea:1c:97:
                    71:0c:b6:ec:ca:eb:1d:c8:83:3e:02:8e:7c:6e:f4:
                    e3:c2:9f:9c:33:cb:6f:5f:63:bf:d4:11:83:87:d9:
                    ef:92:ee:f6:93:6b:9f:3c:1a:fb:0e:09:d8:68:42:
                    f6:38:71:51:09:bd:9e:66:03:3e:c5:6e:8b:89:86:
                    b4:22:e1:73:8c:ef:9d:84:16:cc:09:e1:e6:f0:7e:
                    c3:a5:ce:f7:8f:52:14:54:33:10:05:40:81:84:91:
                    9f:be:51:8a:0b:a8:8e:21:f1:8a:88:03:b2:a5:7f:
                    06:37:99:6a:31:2b:7d:18:ac:ba:49:cd:51:65:bb:
                    68:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:D7:A2:35:82:7F:5F:E6:96:33:84:28:DD:5E:97:2B:78:EB:E3:30
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0d86638a-2e12-4aa4-bdcd-22665b26e57c/941a6f47-59af-3c1c-8104-bf3efddc1d95.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0d86638a-2e12-4aa4-bdcd-22665b26e57c/0d86638a-2e12-4aa4-bdcd-22665b26e57c.crl

            X509v3 Authority Key Identifier:
                keyid:58:46:71:B4:EB:9B:8E:63:06:78:A4:72:C1:68:25:40:B3:3F:13:D7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0d86638a-2e12-4aa4-bdcd-22665b26e57c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.197.184.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c4:ab:67:68:1e:33:26:4a:78:ca:c9:ee:a6:dd:ab:ca:2e:7c:
         c7:e1:8d:70:9d:e1:59:10:38:e1:97:58:0f:99:1b:58:e8:8b:
         39:48:77:75:ac:03:e0:ca:cd:b7:0d:1d:7a:e8:d2:45:ab:dc:
         f1:38:0c:03:6a:fd:c5:ff:1a:4c:d5:37:50:d7:3c:0b:6c:32:
         87:c8:20:ea:6f:72:f1:f7:ab:39:79:a6:b0:65:15:4a:54:79:
         5d:08:83:11:26:e7:79:9e:25:20:8f:21:18:48:0c:f5:c5:ed:
         60:77:7b:40:87:2e:9a:a7:03:66:c5:df:01:85:7a:ab:2d:b9:
         92:06:6c:5b:e9:a7:8c:6b:b7:d7:83:68:19:d7:95:d3:0d:82:
         5f:5c:01:73:d0:9e:77:bf:cc:46:c4:ae:f8:d2:9b:a4:1a:a9:
         da:23:7c:f7:98:9b:ca:20:20:af:8a:20:66:b9:19:0e:03:61:
         14:40:03:16:35:c4:11:e4:be:3c:b5:93:85:59:a9:b7:fe:67:
         72:f8:4f:bd:87:e6:0b:09:0c:af:b8:74:4e:90:91:d5:8a:f4:
         59:97:79:42:0e:2c:75:18:4b:37:25:97:ed:bf:1d:47:8d:f8:
         64:15:1e:83:3b:b5:97:47:93:0a:8f:3a:58:b0:0a:c7:ff:6b:
         76:4f:0f:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 21:43:56 2026 by rpki-client