Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/080ee973-f267-3e54-b3f7-c9f2e882e521.roa
File:                     080ee973-f267-3e54-b3f7-c9f2e882e521.roa (raw, json)
Hash identifier:          pcVTtkDxj98vd1ztqWOa0kz1qXmT+WL2wCauIMIagvE=
Subject key identifier:   B8:F9:22:31:A4:7D:0A:FB:9F:FD:6B:87:AF:AB:43:F4:D1:46:4C:6D
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584D5243B2C1048CD27E22459780
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/080ee973-f267-3e54-b3f7-c9f2e882e521.roa
Signing time:             Sat 28 Mar 2026 19:13:19 +0000
ROA not before:           Sat 28 Mar 2026 19:13:19 +0000
ROA not after:            Fri 26 Jun 2026 19:13:19 +0000
asID:                     22258
IP address blocks:        75.66.18.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:52:43:b2:c1:04:8c:d2:7e:22:45:97:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Mar 28 19:13:19 2026 GMT
            Not After : Jun 26 19:13:19 2026 GMT
        Subject: CN=bb4dc9ed-6e20-4bdf-9306-ae29d0d8b41e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:94:de:d9:d9:16:c7:d3:fb:5c:92:b4:96:1f:
                    b2:7b:4a:01:25:cb:9e:42:4b:f3:00:b0:3f:e9:a9:
                    b8:1f:b4:dc:e6:59:dd:8f:93:b2:d9:5d:dc:66:57:
                    43:61:34:53:f0:ac:a1:f6:e6:ef:4a:cf:5b:74:44:
                    62:4c:29:f8:b0:3f:32:96:d7:c4:0e:14:fc:c1:b7:
                    72:df:04:75:b9:6b:cc:18:5c:b0:e2:9f:b1:16:2a:
                    f5:47:8c:1e:22:50:61:55:95:35:99:50:6f:1b:55:
                    b9:33:23:77:bf:26:70:d1:a0:ea:38:9d:cb:aa:38:
                    d0:17:c0:fe:a4:2f:21:44:2a:21:0a:d8:32:be:c6:
                    d2:3a:dc:6f:59:33:d3:2c:21:df:13:aa:18:54:f4:
                    7e:ba:b1:6b:52:75:bf:fb:54:17:f1:0e:2e:d1:dc:
                    d3:26:05:fd:7c:2a:c7:1b:f7:f6:96:fc:f9:15:a8:
                    7e:3d:49:6e:c9:34:07:6c:a5:84:4a:a8:78:61:63:
                    ec:48:3e:5c:a9:42:be:20:f9:64:15:fe:66:e8:d8:
                    cf:f6:d9:f9:75:39:30:30:3a:f6:cc:3f:c7:42:8f:
                    00:f8:52:ab:40:b6:47:db:a7:a0:95:d7:8f:21:26:
                    5a:74:67:72:a4:f7:f2:f2:82:6e:fa:5b:f3:bc:3a:
                    cd:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:F9:22:31:A4:7D:0A:FB:9F:FD:6B:87:AF:AB:43:F4:D1:46:4C:6D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/080ee973-f267-3e54-b3f7-c9f2e882e521.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.66.18.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         67:cc:ef:b3:ea:60:0d:6e:17:77:a4:a2:cd:ee:45:cd:7a:03:
         85:a9:76:5e:07:52:f0:df:c2:52:80:09:20:2f:80:35:31:b6:
         02:f4:5c:0c:2b:a7:0c:be:41:91:e0:48:f5:80:d7:fa:61:66:
         64:55:fd:a7:68:3e:c2:89:da:ce:df:2c:53:30:04:cf:77:5b:
         c2:0a:f0:21:61:84:69:03:52:d7:df:d8:48:9f:2f:bb:37:e4:
         2c:c2:d6:36:03:f7:5c:89:34:8f:cb:46:bc:7a:08:26:d8:40:
         77:41:9e:d0:c5:53:00:d7:75:d3:eb:94:41:b5:d9:7f:ae:96:
         99:cb:fe:35:d7:e4:a3:64:9e:c3:21:05:6c:0e:e5:d3:46:aa:
         68:8b:ac:79:f4:69:e4:53:8f:ef:f2:07:15:7c:f4:ee:d1:85:
         fa:8b:d9:54:ab:73:ad:f4:0f:94:b3:02:78:6c:e2:db:e0:a0:
         64:d1:09:e0:08:32:74:49:08:c3:08:89:7d:cd:fc:96:d5:19:
         51:a4:3a:2d:7a:66:c6:d3:d5:cc:79:98:0a:25:fa:c4:e5:46:
         62:ec:d5:65:db:d8:b3:cc:ec:92:95:49:db:db:65:ae:1a:ec:
         9a:35:73:64:8e:df:01:7b:2f:9e:0f:41:9d:40:27:da:87:e6:
         fa:34:73:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 12:42:28 2026 by rpki-client