Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/66cb728c-d2d4-30fc-9ad1-2039318ab524.roa
File:                     66cb728c-d2d4-30fc-9ad1-2039318ab524.roa (raw, json)
Hash identifier:          sR/jxOayCvv7ve5evMo5dN7pxR+JG/tkx5dHcexNwZU=
Subject key identifier:   45:29:EB:33:62:69:E3:57:DE:C5:15:92:79:F0:7E:43:50:77:31:BD
Certificate issuer:       /CN=b433f23f-334b-4db9-9fe1-bef76714d97f
Certificate serial:       010D0C9F4328584D7F9A8C035709BF1BB0980200
Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/66cb728c-d2d4-30fc-9ad1-2039318ab524.roa
Signing time:             Tue 14 Apr 2026 01:00:24 +0000
ROA not before:           Tue 14 Apr 2026 01:00:24 +0000
ROA not after:            Mon 13 Jul 2026 01:00:24 +0000
asID:                     20940
IP address blocks:        165.254.136.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:7f:9a:8c:03:57:09:bf:1b:b0:98:02:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f
        Validity
            Not Before: Apr 14 01:00:24 2026 GMT
            Not After : Jul 13 01:00:24 2026 GMT
        Subject: CN=42ea0102-a66b-4852-ab33-503ee1e21299
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:01:aa:6b:17:8c:34:21:9b:23:21:2a:79:fd:
                    43:b1:cc:ff:cb:d2:e5:5a:7d:2d:53:a7:08:8a:51:
                    34:ad:4f:ef:30:a1:fe:b6:b9:e4:1d:37:36:02:17:
                    9b:5e:9e:bc:c7:da:3a:ce:45:e0:7b:3b:1b:66:26:
                    db:75:66:96:d9:b1:ed:cd:a3:0c:45:10:73:d9:69:
                    07:8e:83:ea:a0:3c:d4:01:66:26:c8:d9:3a:7a:c3:
                    55:ca:88:b8:82:9d:ae:b4:58:fe:27:6b:bc:b2:e9:
                    b0:83:d4:53:7e:a0:0e:2a:30:b1:a9:2d:99:e1:38:
                    46:9d:58:b7:16:b5:16:48:49:f8:5d:7c:c8:b6:b5:
                    0c:da:15:cd:a5:0b:64:8c:8c:2c:33:82:ec:cb:cd:
                    b1:c5:bd:dd:5e:95:2f:30:34:76:58:4b:5d:1b:a1:
                    3e:7c:5c:54:38:8e:3d:dd:5f:ea:3d:36:d9:b6:02:
                    9e:8e:52:9e:54:75:34:0c:44:7a:ae:ab:ca:fe:c4:
                    1f:6b:3f:56:5f:f3:33:39:dd:ef:93:d8:d7:3c:68:
                    a0:9e:18:09:1f:25:b3:aa:17:b9:e0:2e:99:57:b8:
                    af:ef:1d:5f:b1:fa:de:9e:0d:e0:69:ba:4f:19:d7:
                    56:90:bb:c8:79:ca:c7:6a:de:dd:12:bd:95:1f:bd:
                    c6:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:29:EB:33:62:69:E3:57:DE:C5:15:92:79:F0:7E:43:50:77:31:BD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/66cb728c-d2d4-30fc-9ad1-2039318ab524.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl

            X509v3 Authority Key Identifier:
                keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  165.254.136.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c9:21:24:f9:1f:ca:c1:f1:ab:ba:3e:47:e3:22:e2:b2:2e:52:
         61:9b:13:aa:a0:5a:5f:22:91:f8:7f:e7:67:77:e6:d1:92:80:
         a5:01:b3:82:f3:72:53:34:40:7f:46:a1:4c:7a:ca:9a:f7:fe:
         7e:6f:9d:aa:f0:17:23:b8:e5:f5:72:47:f2:57:c4:ea:7a:b0:
         35:58:7f:9a:cb:17:b0:5e:6b:f3:61:77:bd:43:50:a9:e8:45:
         95:a9:b4:cf:a6:e2:07:79:98:bf:4c:49:75:64:68:02:53:b4:
         4a:75:40:d0:7b:26:ff:73:6e:54:8b:63:41:a9:67:0e:24:46:
         a3:df:31:9c:32:55:f2:14:17:95:4f:64:ce:5b:45:bb:5d:a1:
         d2:e4:91:16:1c:fb:d5:8d:d1:06:1a:d4:01:07:67:7f:6c:45:
         56:fc:5f:eb:b4:6b:3f:f3:76:c3:2c:fd:41:62:ad:7f:de:b1:
         34:04:b0:c2:a4:c7:3f:7d:98:d8:de:f8:e8:ae:9c:83:63:b5:
         c6:47:47:cf:5f:fb:14:a3:44:e4:8a:0d:9b:d6:a0:93:45:ea:
         d5:d0:ab:77:a6:b0:37:09:5c:7c:f7:fc:ca:36:53:45:3a:36:
         4a:fe:43:7e:67:ef:26:35:af:bd:fa:7a:55:43:50:7c:57:b2:
         c2:6b:49:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 14:19:05 2026 by rpki-client