Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/54a220d5-4ac8-4e34-bec0-5a555376e674/8ee0b24d-9b96-33a9-bcde-3ba92396e636.roa
File:                     8ee0b24d-9b96-33a9-bcde-3ba92396e636.roa (raw, json)
Hash identifier:          Ir5BZPWNFlNKM8YdwejsoJzs1FEvTmrC8gC9AKWc5pw=
Subject key identifier:   BA:F7:F4:18:70:B0:B0:6F:A7:27:D6:27:8E:0A:7A:7E:E5:1B:8F:55
Certificate issuer:       /CN=54a220d5-4ac8-4e34-bec0-5a555376e674
Certificate serial:       010D0C9F4328584CF85240A6CB6F9B39A58ED980
Authority key identifier: 25:F2:C6:AC:82:D3:6D:FD:8A:21:67:4D:19:83:03:66:A1:0F:97:74
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/54a220d5-4ac8-4e34-bec0-5a555376e674.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/54a220d5-4ac8-4e34-bec0-5a555376e674/8ee0b24d-9b96-33a9-bcde-3ba92396e636.roa
Signing time:             Tue 24 Feb 2026 14:00:41 +0000
ROA not before:           Tue 24 Feb 2026 14:00:41 +0000
ROA not after:            Mon 25 May 2026 13:00:41 +0000
asID:                     19381
IP address blocks:        66.85.10.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/54a220d5-4ac8-4e34-bec0-5a555376e674/54a220d5-4ac8-4e34-bec0-5a555376e674.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/54a220d5-4ac8-4e34-bec0-5a555376e674/54a220d5-4ac8-4e34-bec0-5a555376e674.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/54a220d5-4ac8-4e34-bec0-5a555376e674.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:f8:52:40:a6:cb:6f:9b:39:a5:8e:d9:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54a220d5-4ac8-4e34-bec0-5a555376e674
        Validity
            Not Before: Feb 24 14:00:41 2026 GMT
            Not After : May 25 13:00:41 2026 GMT
        Subject: CN=8c44d709-388b-413c-a2b1-52d282f322aa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:e9:a6:7d:f8:4e:82:cc:13:a6:6d:33:50:49:
                    d3:b3:fc:ed:78:9c:02:97:1e:b0:ba:38:8d:41:a9:
                    78:44:22:60:ec:2d:df:1e:cd:d1:2c:cd:ad:72:98:
                    24:71:d7:27:83:45:2f:f9:d5:ba:ed:aa:5d:14:25:
                    de:ae:42:34:82:05:33:b3:16:10:e6:b3:34:ee:7a:
                    6f:ec:ce:22:f6:0a:48:a8:61:19:1b:8e:12:e6:4d:
                    89:fa:f4:02:4b:2c:c5:63:d0:67:58:21:78:16:8c:
                    79:79:62:ef:39:af:a9:b3:b8:e0:30:37:bf:32:64:
                    d5:18:bc:17:eb:9f:a9:46:b8:f9:b4:07:35:52:70:
                    6e:5c:b4:67:9c:fe:93:59:56:93:2e:29:21:f2:41:
                    7e:ce:96:44:65:46:4c:98:3e:35:df:8b:6c:41:ae:
                    36:39:02:83:ad:79:6a:cc:e8:de:ff:c9:19:d4:ed:
                    00:dd:48:ef:ab:68:94:0b:59:d1:32:c1:95:92:77:
                    38:ec:2d:99:f1:c3:e4:1b:1a:40:9b:42:f5:38:63:
                    36:8c:39:13:90:a4:1a:68:9c:83:b6:3d:e7:ea:31:
                    6d:bc:36:29:05:d0:d5:46:a8:fa:e8:af:8a:67:9c:
                    31:46:b6:cc:d9:98:08:24:c7:81:f2:a0:20:d9:16:
                    6c:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:F7:F4:18:70:B0:B0:6F:A7:27:D6:27:8E:0A:7A:7E:E5:1B:8F:55
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/54a220d5-4ac8-4e34-bec0-5a555376e674/8ee0b24d-9b96-33a9-bcde-3ba92396e636.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/54a220d5-4ac8-4e34-bec0-5a555376e674/54a220d5-4ac8-4e34-bec0-5a555376e674.crl

            X509v3 Authority Key Identifier:
                keyid:25:F2:C6:AC:82:D3:6D:FD:8A:21:67:4D:19:83:03:66:A1:0F:97:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/54a220d5-4ac8-4e34-bec0-5a555376e674.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.85.10.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2b:c7:9f:49:cf:d5:ea:7c:26:98:6f:6d:cf:cc:a6:04:6d:d2:
         0f:e2:d3:a3:f3:b8:42:a6:77:2d:4f:9f:e0:9a:b4:79:f3:d0:
         99:64:63:f1:86:76:f9:4f:53:68:f4:be:4d:9b:56:b9:67:b3:
         5d:0e:ab:fa:e6:40:6d:9f:70:82:30:16:df:07:d2:3d:aa:66:
         13:1f:ea:2d:cf:c0:fc:c2:9b:04:e4:d5:b1:2d:6f:6a:56:a8:
         cd:ec:b7:a8:fc:ca:8b:28:5e:50:4a:65:30:d7:25:45:7b:b7:
         af:28:63:2a:0d:3e:af:fe:82:e0:62:e5:cd:63:ef:00:a6:9a:
         7e:ac:0c:67:5d:73:5a:5f:6d:89:f3:a1:8a:ba:dc:ae:2b:b5:
         01:a6:3f:9d:69:56:6d:09:85:28:14:36:c1:b7:f9:5c:4d:67:
         f5:17:3b:49:1a:55:03:76:41:d5:e4:d4:6c:80:ef:99:29:55:
         73:31:92:fb:2c:0c:6c:88:52:c2:fc:bc:3a:f3:69:8f:2f:f2:
         3a:bd:50:84:0b:05:d6:2f:ee:3a:3f:5d:11:33:9c:53:00:d3:
         b5:35:e3:04:57:c5:35:40:e0:d4:cb:7e:a8:d8:44:fc:c2:20:
         d2:d8:48:d9:6a:72:d7:ec:8b:37:71:ea:6e:29:3e:55:66:bd:
         93:5b:ec:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 17:41:37 2026 by rpki-client