Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/252db782-9372-33d7-9608-d50c53b0dfe6.roa
File:                     252db782-9372-33d7-9608-d50c53b0dfe6.roa (raw, json)
Hash identifier:          NQx+z8KT2tJA5P50Pxxke9NZ6It+R9MYUkU6kXVkuRc=
Subject key identifier:   C2:96:2F:FE:7D:DB:26:73:61:59:58:6A:63:FF:32:CA:A4:D5:2C:1E
Certificate issuer:       /CN=0090b0ee-3d7e-47d6-b73d-36494798d9e7
Certificate serial:       010D0C9F4328584D4D5A6F9778DACD4887123C80
Authority key identifier: F8:C1:BA:7B:E0:5D:2E:86:50:75:BA:87:D5:90:30:5C:B7:36:0A:D1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/252db782-9372-33d7-9608-d50c53b0dfe6.roa
Signing time:             Fri 27 Mar 2026 01:00:31 +0000
ROA not before:           Fri 27 Mar 2026 01:00:31 +0000
ROA not after:            Thu 25 Jun 2026 01:00:31 +0000
asID:                     54538
IP address blocks:        66.232.37.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/0090b0ee-3d7e-47d6-b73d-36494798d9e7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/0090b0ee-3d7e-47d6-b73d-36494798d9e7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 23:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:4d:5a:6f:97:78:da:cd:48:87:12:3c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0090b0ee-3d7e-47d6-b73d-36494798d9e7
        Validity
            Not Before: Mar 27 01:00:31 2026 GMT
            Not After : Jun 25 01:00:31 2026 GMT
        Subject: CN=a9c71726-643f-4b7d-965b-58eea12af061
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:a1:f3:89:8f:55:85:bf:cb:6a:2d:e5:e4:61:
                    91:c9:bf:7f:3f:7e:e3:68:12:11:b3:bd:0a:04:87:
                    d5:58:7a:e0:97:c6:65:e4:8f:4d:c8:7c:a0:87:a4:
                    15:73:91:cb:e3:1f:75:da:44:ad:71:cf:0e:06:33:
                    19:e7:d6:98:af:f8:20:3b:43:44:52:76:a9:f1:de:
                    70:a7:d1:67:f1:69:1c:50:16:a1:92:25:93:2d:fd:
                    d3:3c:56:0a:ca:63:1e:2d:f1:30:4d:a2:7d:c1:f8:
                    d8:63:2d:cd:3e:bd:5f:54:08:fb:97:4e:49:34:a7:
                    0f:cb:a3:86:a9:16:6f:8c:40:0a:fa:14:81:24:3e:
                    17:0f:b3:4f:4a:c1:cc:6e:08:d9:4b:48:d3:ee:11:
                    78:36:14:b4:c2:bb:17:80:76:7e:a2:3d:63:e5:83:
                    19:2d:41:70:16:dd:77:a6:9f:13:4f:d3:2c:7e:b5:
                    f5:43:d6:98:e4:5f:ea:0c:69:9e:70:33:79:03:53:
                    44:18:66:4a:55:af:06:46:6d:52:4a:77:f2:8b:ea:
                    19:fe:a4:fe:ae:36:cf:e5:a2:b4:00:2e:1b:07:77:
                    bc:df:54:f8:24:63:54:bd:48:fb:39:f5:2b:65:3e:
                    f0:2e:6e:62:48:89:05:9a:ac:e4:33:49:17:38:01:
                    83:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:96:2F:FE:7D:DB:26:73:61:59:58:6A:63:FF:32:CA:A4:D5:2C:1E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/252db782-9372-33d7-9608-d50c53b0dfe6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/0090b0ee-3d7e-47d6-b73d-36494798d9e7.crl

            X509v3 Authority Key Identifier:
                keyid:F8:C1:BA:7B:E0:5D:2E:86:50:75:BA:87:D5:90:30:5C:B7:36:0A:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.232.37.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         67:cf:78:ac:00:59:c1:e0:0e:c4:d1:a3:e7:11:02:8b:93:7d:
         19:a5:21:44:fc:f6:de:f1:1e:e5:7d:73:5e:ac:b9:43:a7:39:
         f6:cd:f1:f3:c3:59:a2:0f:9b:5b:36:10:ba:d4:4d:3f:d9:c1:
         93:dc:36:2c:e7:0e:90:6f:5c:b9:81:af:6b:3d:68:6b:74:3f:
         41:22:0d:c1:83:77:c7:78:02:34:29:bd:97:9c:3e:b5:a1:1f:
         79:f4:0b:4d:38:70:41:3c:5c:70:14:1a:7f:a9:68:a3:3b:c6:
         00:64:04:5d:63:ec:1a:1a:35:fb:50:e4:a1:a2:72:98:d8:ac:
         bb:7c:56:8e:8f:48:c3:92:2b:07:71:8f:43:e9:7d:2b:1a:fa:
         2e:51:3f:4d:f2:ed:34:dc:cd:4f:ee:28:a4:99:7d:e5:b9:46:
         f3:23:d8:50:34:61:19:4d:b7:d1:b0:cf:19:34:c8:e8:6d:98:
         a8:0d:18:a6:77:a3:af:b8:36:9a:16:e9:8f:11:02:4f:4a:d8:
         0f:34:67:4e:9f:ce:9d:98:d5:80:5f:3a:f3:49:9f:36:ac:2e:
         74:6d:3c:94:24:e7:ce:8d:bb:b2:0c:f7:21:72:3b:29:13:db:
         da:83:78:00:2a:1f:27:85:ad:60:20:97:7b:29:58:a8:84:82:
         9e:32:28:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 18:03:46 2026 by rpki-client