Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/59adcb6d-cc06-4e2c-b5df-20bfcd83176e/14b6f162-589d-35b5-8def-b17cc85251d7.roa
File:                     14b6f162-589d-35b5-8def-b17cc85251d7.roa (raw, json)
Hash identifier:          u+gfGFvCn8LWDlAH0/6glQd6tP4jApSy1sYo2eIbaEs=
Subject key identifier:   A6:4F:C6:AF:B5:21:58:7F:24:A9:22:FB:45:DC:36:23:5B:21:E0:88
Certificate issuer:       /CN=59adcb6d-cc06-4e2c-b5df-20bfcd83176e
Certificate serial:       010D0C9F4328584ED431EEC34575418306B80A80
Authority key identifier: AF:87:4C:56:51:24:6C:74:D8:15:A7:F0:86:EA:58:E0:54:53:AF:2E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/59adcb6d-cc06-4e2c-b5df-20bfcd83176e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/59adcb6d-cc06-4e2c-b5df-20bfcd83176e/14b6f162-589d-35b5-8def-b17cc85251d7.roa
Signing time:             Fri 14 Aug 2026 01:00:13 +0000
ROA not before:           Fri 14 Aug 2026 01:00:13 +0000
ROA not after:            Thu 12 Nov 2026 02:00:13 +0000
asID:                     7794
IP address blocks:        66.203.160.0/19 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/59adcb6d-cc06-4e2c-b5df-20bfcd83176e/59adcb6d-cc06-4e2c-b5df-20bfcd83176e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/59adcb6d-cc06-4e2c-b5df-20bfcd83176e/59adcb6d-cc06-4e2c-b5df-20bfcd83176e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/59adcb6d-cc06-4e2c-b5df-20bfcd83176e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 24 Sep 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:d4:31:ee:c3:45:75:41:83:06:b8:0a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=59adcb6d-cc06-4e2c-b5df-20bfcd83176e
        Validity
            Not Before: Aug 14 01:00:13 2026 GMT
            Not After : Nov 12 02:00:13 2026 GMT
        Subject: CN=230d1e3d-3de3-426b-91f0-119e23398130
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:11:aa:9f:a8:22:69:44:60:b0:81:44:ae:44:
                    f5:4e:5c:b6:dc:d3:75:a5:fb:6f:d1:44:4b:c9:76:
                    9b:69:1e:ca:0c:87:dd:06:bd:f2:51:2b:4f:fd:89:
                    81:82:b9:6b:35:6d:59:cb:a6:d0:52:de:7e:25:63:
                    67:76:6c:93:01:1b:2a:96:ea:6e:b8:c6:23:f2:65:
                    5a:00:89:1b:60:bf:46:af:83:64:b7:99:aa:74:20:
                    ab:76:d1:45:36:fe:5e:8b:29:e6:46:5a:95:c7:c6:
                    d7:35:20:16:31:f5:57:98:7e:85:37:42:d3:8f:ba:
                    6a:4c:35:25:d9:a9:24:81:d3:38:cf:f1:44:e1:6d:
                    a6:81:e2:ed:59:5a:38:2e:3b:53:71:89:70:e2:e3:
                    e3:53:32:1f:c9:f2:08:c5:6f:d0:c5:08:46:af:e8:
                    28:de:a6:44:7a:24:d9:d8:20:1d:c1:af:0b:df:a8:
                    c7:4d:c0:b3:c0:32:9d:f9:de:7d:98:c3:0c:c8:96:
                    02:30:24:7b:58:17:5d:d2:f2:02:f0:e4:02:ac:61:
                    8e:35:99:b0:35:6b:7b:f5:69:8e:ba:91:8c:f1:01:
                    62:bf:dc:62:59:56:7d:77:19:87:71:8c:ff:a2:df:
                    a1:4c:2b:aa:b3:cf:99:f5:12:8b:47:35:35:4e:fa:
                    29:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:4F:C6:AF:B5:21:58:7F:24:A9:22:FB:45:DC:36:23:5B:21:E0:88
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/59adcb6d-cc06-4e2c-b5df-20bfcd83176e/14b6f162-589d-35b5-8def-b17cc85251d7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/59adcb6d-cc06-4e2c-b5df-20bfcd83176e/59adcb6d-cc06-4e2c-b5df-20bfcd83176e.crl

            X509v3 Authority Key Identifier:
                keyid:AF:87:4C:56:51:24:6C:74:D8:15:A7:F0:86:EA:58:E0:54:53:AF:2E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/59adcb6d-cc06-4e2c-b5df-20bfcd83176e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.203.160.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9c:13:75:b2:d3:37:b4:b7:73:3b:88:95:a4:40:4e:a2:d6:6e:
         35:fd:26:37:b9:d3:5a:62:59:b9:44:10:08:3b:db:0f:52:64:
         0a:d8:d4:b0:aa:d8:73:6f:0a:1c:3e:af:c0:ae:6a:40:ec:7c:
         3f:b3:35:21:4c:f1:ca:b8:bf:ca:49:3e:b9:b2:37:01:d0:c0:
         4f:05:05:c2:81:7c:d3:4b:f6:0d:ac:44:0c:fb:f1:75:2d:ac:
         2f:6c:64:35:af:3d:fd:de:b5:40:64:fa:f7:59:2a:cc:42:26:
         2d:92:ff:71:10:99:d3:f5:f0:83:18:a0:91:34:ed:fb:83:82:
         46:f2:b0:bf:e9:15:35:e3:39:12:c6:76:37:55:9e:bd:5d:bb:
         04:61:c2:29:f2:05:5e:01:bc:59:1b:80:8d:b6:db:38:7c:6e:
         ae:40:5d:f8:ae:f4:67:c1:10:97:2b:f9:cc:69:0b:1f:7e:45:
         b5:54:b5:ac:10:01:2f:09:5f:63:41:0e:07:6c:a3:06:12:c3:
         e8:93:9d:41:7e:73:fd:a3:e4:54:ba:7c:2e:0d:14:e4:06:ae:
         d5:a0:82:1b:29:33:52:c3:be:b6:24:03:52:65:4b:57:f3:29:
         aa:43:53:6c:cb:f6:66:90:5b:6e:37:2e:9b:2a:c9:a8:27:13:
         b3:da:67:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 09:34:30 2026 by rpki-client