Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b9b87434-00de-4d2f-a45d-abe1efe5ecfd/9ac55e82-af0b-386e-930f-141c78e43568.roa
File:                     9ac55e82-af0b-386e-930f-141c78e43568.roa (raw, json)
Hash identifier:          L7rQNxJeVgBHP39YqGjHgKP8/hxnBGhd3oH+DCZd8jU=
Subject key identifier:   3F:59:19:8D:03:F8:60:86:76:E6:72:20:4E:FD:0B:A8:F1:E2:85:71
Certificate issuer:       /CN=b9b87434-00de-4d2f-a45d-abe1efe5ecfd
Certificate serial:       010D0C9F4328584CCA41D6401A55726D18C4D900
Authority key identifier: 67:BA:AB:82:D5:25:B6:AD:DE:AC:2E:FF:27:E5:85:9C:97:CE:3C:6B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b9b87434-00de-4d2f-a45d-abe1efe5ecfd.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b9b87434-00de-4d2f-a45d-abe1efe5ecfd/9ac55e82-af0b-386e-930f-141c78e43568.roa
Signing time:             Sun 08 Feb 2026 02:00:32 +0000
ROA not before:           Sun 08 Feb 2026 02:00:32 +0000
ROA not after:            Sat 09 May 2026 01:00:32 +0000
asID:                     17176
IP address blocks:        66.187.253.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b9b87434-00de-4d2f-a45d-abe1efe5ecfd/b9b87434-00de-4d2f-a45d-abe1efe5ecfd.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b9b87434-00de-4d2f-a45d-abe1efe5ecfd/b9b87434-00de-4d2f-a45d-abe1efe5ecfd.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b9b87434-00de-4d2f-a45d-abe1efe5ecfd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:ca:41:d6:40:1a:55:72:6d:18:c4:d9:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b9b87434-00de-4d2f-a45d-abe1efe5ecfd
        Validity
            Not Before: Feb  8 02:00:32 2026 GMT
            Not After : May  9 01:00:32 2026 GMT
        Subject: CN=696c1340-8f2d-4fa4-b52d-4aa3d245d440
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:8c:ff:6c:9b:92:f0:79:d1:85:40:5c:7e:90:
                    fe:7f:d6:62:ed:e7:4f:1e:2b:9e:dd:03:71:27:ce:
                    44:34:08:6c:c2:b0:7a:78:9a:cc:72:c5:4c:68:69:
                    21:68:0d:91:ad:cf:3c:5c:6e:ff:6e:4c:33:0d:d4:
                    38:0e:b5:cf:7e:55:3b:d2:66:1b:f4:2d:7d:55:0b:
                    8e:a0:18:6f:c2:48:ae:be:af:fa:b3:2e:02:be:90:
                    c6:43:7b:54:b5:35:e9:24:2b:c4:1b:bb:05:7d:80:
                    f9:8e:93:36:c2:ad:bb:9b:c5:6c:04:a6:a8:08:03:
                    da:94:dc:a9:9a:17:1f:2d:c5:64:89:99:0c:0e:bf:
                    ad:94:c7:8f:9f:94:64:99:cd:ea:cd:9e:25:a7:95:
                    59:c7:81:e8:bc:84:d8:7e:11:9c:e9:4a:02:dc:e9:
                    58:d8:56:58:f1:cb:54:a3:34:e3:8b:df:40:d0:5d:
                    56:81:86:8d:6b:00:05:bf:e5:ff:c6:89:9a:c1:ce:
                    79:21:cc:a6:48:02:90:17:99:6e:ce:fb:a5:46:70:
                    2e:1b:f2:8c:c1:05:eb:93:54:34:52:c1:79:01:52:
                    75:49:c9:2a:9c:2d:df:b0:82:da:db:8c:43:82:49:
                    07:a3:83:de:4a:b5:1b:d5:84:87:52:46:5a:e3:bc:
                    de:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:59:19:8D:03:F8:60:86:76:E6:72:20:4E:FD:0B:A8:F1:E2:85:71
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b9b87434-00de-4d2f-a45d-abe1efe5ecfd/9ac55e82-af0b-386e-930f-141c78e43568.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b9b87434-00de-4d2f-a45d-abe1efe5ecfd/b9b87434-00de-4d2f-a45d-abe1efe5ecfd.crl

            X509v3 Authority Key Identifier:
                keyid:67:BA:AB:82:D5:25:B6:AD:DE:AC:2E:FF:27:E5:85:9C:97:CE:3C:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b9b87434-00de-4d2f-a45d-abe1efe5ecfd.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.187.253.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c5:65:93:39:a2:ce:aa:44:bc:45:57:29:49:3e:05:4f:57:43:
         08:d6:73:b3:fb:5a:b3:5a:67:a4:ac:93:9f:35:37:de:ef:0a:
         36:ef:3a:98:28:80:8f:6d:81:52:9f:2a:08:ae:59:f6:70:5f:
         16:e7:cc:33:9f:bd:81:04:29:7f:26:5e:83:22:b8:0b:66:83:
         b4:a6:dc:97:2b:91:1d:d6:fc:e7:a5:66:f9:9d:5c:76:93:4f:
         33:b9:16:0b:14:fc:69:fd:c7:b9:4f:36:ec:7e:d6:e1:45:f4:
         77:6f:dc:81:3b:ee:3d:f6:ae:4e:b4:33:21:bb:6d:1f:56:93:
         eb:b2:ac:ba:f6:da:d7:1e:51:15:1e:c4:1d:cd:62:79:8e:c6:
         a7:c9:60:85:6d:5c:96:74:9d:b7:26:c4:67:96:1b:0d:91:64:
         52:e6:35:8c:4c:d8:0e:3d:58:db:3d:0a:14:4a:e8:27:68:c7:
         d3:91:bd:dd:8d:f1:6b:5d:c5:53:09:66:4b:0b:c4:78:a3:ec:
         0b:5b:99:fb:01:1b:e4:89:24:ac:46:31:74:69:50:d9:84:da:
         ab:46:ed:21:af:3c:60:75:f7:8d:0e:a3:6d:39:3d:19:8a:43:
         94:1e:0f:0f:0f:24:37:36:79:e6:f6:7d:b5:79:c1:6b:56:aa:
         8c:4e:de:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:08:20 2026 by rpki-client