Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/66c993bd-0997-43a9-a584-9bfe93e5b3cb/c8972a92-f068-3c0b-8304-820d431aa979.roa
File:                     c8972a92-f068-3c0b-8304-820d431aa979.roa (raw, json)
Hash identifier:          pYXLrbS/7q2tBRyxwuIAbqBgUXrkTbn7RtqSr5R77z0=
Subject key identifier:   E2:77:73:DD:DF:00:0B:AB:3F:61:3D:F1:40:F9:E1:EF:DC:B4:68:25
Certificate issuer:       /CN=66c993bd-0997-43a9-a584-9bfe93e5b3cb
Certificate serial:       010D0C9F4328584E1D9661C486C2E213ED89B180
Authority key identifier: AE:30:E3:D1:B5:03:1B:9B:69:42:B9:6B:A1:10:C7:AC:07:9A:0B:88
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/66c993bd-0997-43a9-a584-9bfe93e5b3cb.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/66c993bd-0997-43a9-a584-9bfe93e5b3cb/c8972a92-f068-3c0b-8304-820d431aa979.roa
Signing time:             Tue 09 Jun 2026 15:09:57 +0000
ROA not before:           Tue 09 Jun 2026 15:09:57 +0000
ROA not after:            Mon 07 Sep 2026 15:09:57 +0000
asID:                     16509
IP address blocks:        146.202.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/66c993bd-0997-43a9-a584-9bfe93e5b3cb/66c993bd-0997-43a9-a584-9bfe93e5b3cb.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/66c993bd-0997-43a9-a584-9bfe93e5b3cb/66c993bd-0997-43a9-a584-9bfe93e5b3cb.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/66c993bd-0997-43a9-a584-9bfe93e5b3cb.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 16 Jun 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:1d:96:61:c4:86:c2:e2:13:ed:89:b1:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66c993bd-0997-43a9-a584-9bfe93e5b3cb
        Validity
            Not Before: Jun  9 15:09:57 2026 GMT
            Not After : Sep  7 15:09:57 2026 GMT
        Subject: CN=77712670-6abf-4afe-b269-f3c07db423f9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:e9:55:7e:6b:ff:b0:c3:d4:25:ad:1f:45:bb:
                    a2:04:3d:c3:6a:0b:09:8b:3a:06:bb:7c:ed:e8:02:
                    b6:f3:24:55:c9:e3:e4:36:54:9b:15:02:fa:d6:48:
                    90:fa:1b:76:00:c0:25:ca:b7:cd:40:40:d2:ee:e9:
                    79:3d:29:0c:73:29:ab:5b:09:ae:65:77:4a:ac:b7:
                    e8:9f:2b:cd:12:16:fd:02:55:76:78:50:8d:91:97:
                    76:0b:d0:e3:6f:ab:8d:84:96:5c:eb:a3:6b:b8:5b:
                    61:08:dc:0d:bf:5a:8d:83:91:21:69:35:c4:28:a7:
                    59:74:8b:99:8d:5e:13:4a:ff:37:2a:f1:e9:0f:c7:
                    d9:2c:bd:8e:1c:20:fe:85:23:94:2c:a5:d9:7c:92:
                    2d:f2:c8:fd:4b:5b:4b:d5:ac:77:ef:c1:0d:5f:19:
                    3c:dd:dc:85:a0:2e:c3:16:85:30:69:ce:f3:99:a3:
                    c1:e1:98:fb:0b:1e:b7:bd:df:6d:f2:5c:a2:26:6b:
                    e6:4b:17:3b:6f:dc:e7:6e:b6:3f:ae:4d:42:ae:98:
                    e9:fb:0e:d7:b1:d4:0f:9c:2e:6f:03:ba:84:3b:f2:
                    a1:dd:56:ea:0c:81:50:ee:96:29:30:cb:51:43:4c:
                    6d:6c:df:52:36:c7:93:ff:f9:1a:bf:ba:32:b2:f1:
                    23:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:77:73:DD:DF:00:0B:AB:3F:61:3D:F1:40:F9:E1:EF:DC:B4:68:25
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/66c993bd-0997-43a9-a584-9bfe93e5b3cb/c8972a92-f068-3c0b-8304-820d431aa979.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/66c993bd-0997-43a9-a584-9bfe93e5b3cb/66c993bd-0997-43a9-a584-9bfe93e5b3cb.crl

            X509v3 Authority Key Identifier:
                keyid:AE:30:E3:D1:B5:03:1B:9B:69:42:B9:6B:A1:10:C7:AC:07:9A:0B:88

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/66c993bd-0997-43a9-a584-9bfe93e5b3cb.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  146.202.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1e:9a:b2:07:f3:6d:e6:cb:c0:18:6c:d5:9a:0e:70:0b:64:9b:
         67:d4:bc:59:9e:73:20:3d:f8:30:90:91:bc:67:7d:cc:0f:10:
         01:3d:06:b0:0d:34:b3:d0:16:05:c0:4d:81:10:90:e3:94:54:
         6a:28:79:5f:78:71:47:b2:f4:45:ff:4f:b1:fc:01:ce:91:c1:
         a4:b6:4b:19:de:6a:03:bc:54:32:df:3f:1f:0f:ed:a8:9e:a9:
         35:ba:22:3e:cd:4c:bb:49:44:1b:ab:55:61:12:08:58:47:c8:
         47:e1:d4:2f:c7:38:cf:66:53:05:51:5c:ae:e4:22:24:6e:96:
         9f:a1:4a:e5:67:c1:b5:69:54:ce:ac:fe:05:3f:4a:12:2c:8b:
         2b:ed:3f:28:2d:93:7b:ee:90:ab:81:35:33:00:bc:07:74:3b:
         ba:26:1f:25:a1:cf:d5:34:10:4f:36:9d:72:fe:55:7c:fe:46:
         0e:3a:99:9e:e7:95:06:cd:04:c4:b8:82:92:63:b6:dd:85:82:
         90:cc:bb:d1:6c:e0:70:37:cf:0a:c2:b5:f6:6d:73:0f:2a:92:
         a7:f6:11:de:17:b0:3f:ae:27:91:f9:71:e7:14:94:b1:07:31:
         98:34:f0:43:c3:64:c7:ee:48:fb:7f:81:36:ac:d5:8f:76:2c:
         5e:75:33:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 01:28:59 2026 by rpki-client