Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9775324a-f646-4b8e-b5f0-2477c7b3b0db/20b2023f-82de-3259-ba57-7e643af343f4.roa
File:                     20b2023f-82de-3259-ba57-7e643af343f4.roa (raw, json)
Hash identifier:          7Y/TRS9jFADXqftoK5CilJLH69JtJM+T+sqZ69YPD8o=
Subject key identifier:   F7:F3:C1:DB:D5:8C:AF:0D:29:7E:D4:D0:16:67:AE:9D:6E:AE:BA:5F
Certificate issuer:       /CN=9775324a-f646-4b8e-b5f0-2477c7b3b0db
Certificate serial:       010D0C9F4328584CA75C6FA34BCC0DE36A10DBDA
Authority key identifier: D5:56:65:C0:12:DB:64:CB:F1:79:F9:47:F0:03:40:B2:C7:70:22:D8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9775324a-f646-4b8e-b5f0-2477c7b3b0db.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9775324a-f646-4b8e-b5f0-2477c7b3b0db/20b2023f-82de-3259-ba57-7e643af343f4.roa
Signing time:             Mon 26 Jan 2026 14:00:41 +0000
ROA not before:           Mon 26 Jan 2026 14:00:41 +0000
ROA not after:            Sun 26 Apr 2026 13:00:41 +0000
asID:                     20115
IP address blocks:        66.39.229.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9775324a-f646-4b8e-b5f0-2477c7b3b0db/9775324a-f646-4b8e-b5f0-2477c7b3b0db.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9775324a-f646-4b8e-b5f0-2477c7b3b0db/9775324a-f646-4b8e-b5f0-2477c7b3b0db.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9775324a-f646-4b8e-b5f0-2477c7b3b0db.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:a7:5c:6f:a3:4b:cc:0d:e3:6a:10:db:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9775324a-f646-4b8e-b5f0-2477c7b3b0db
        Validity
            Not Before: Jan 26 14:00:41 2026 GMT
            Not After : Apr 26 13:00:41 2026 GMT
        Subject: CN=dc368447-41de-4884-8387-6b3040d3fc43
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:88:0b:5c:5b:f9:01:3c:59:d8:9d:37:71:48:
                    00:78:7c:f7:d9:cd:2a:c6:f1:4f:ba:03:be:b0:4e:
                    dd:43:54:03:53:fb:d4:3d:f8:ba:90:d8:e4:ce:77:
                    02:9b:f6:94:ac:dc:51:82:18:61:72:1f:b3:08:67:
                    e3:f7:43:9d:12:0c:f7:1c:ec:a0:71:9d:a2:96:3b:
                    52:8b:d9:3a:69:40:94:89:d9:51:d9:25:79:5e:07:
                    b6:06:93:88:ca:f1:0d:8f:e8:e9:e4:04:98:a2:84:
                    d9:2c:07:b2:62:b0:9c:44:71:84:a5:82:51:31:73:
                    8e:14:d4:7a:3e:ff:a6:dd:0a:16:2d:74:6f:d7:66:
                    fc:6b:75:44:1c:dc:18:23:83:35:9f:9c:c6:e2:2f:
                    d2:78:d0:50:46:75:8d:3f:28:6f:c9:6b:4e:5a:80:
                    99:84:08:a2:be:e4:1e:be:25:fb:db:84:a9:00:cd:
                    f8:b8:3b:87:56:1a:3a:df:89:87:66:3a:93:f4:98:
                    b3:0b:b1:15:c6:44:e5:0d:65:fd:0e:dc:23:dc:53:
                    87:a0:61:77:61:77:32:bd:9d:7c:e1:91:64:43:9d:
                    05:fb:55:1f:53:df:cf:df:ed:8d:40:b7:a4:8e:20:
                    54:7c:60:1f:c7:30:84:6b:45:25:04:ab:90:af:5a:
                    f9:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:F3:C1:DB:D5:8C:AF:0D:29:7E:D4:D0:16:67:AE:9D:6E:AE:BA:5F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9775324a-f646-4b8e-b5f0-2477c7b3b0db/20b2023f-82de-3259-ba57-7e643af343f4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9775324a-f646-4b8e-b5f0-2477c7b3b0db/9775324a-f646-4b8e-b5f0-2477c7b3b0db.crl

            X509v3 Authority Key Identifier:
                keyid:D5:56:65:C0:12:DB:64:CB:F1:79:F9:47:F0:03:40:B2:C7:70:22:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9775324a-f646-4b8e-b5f0-2477c7b3b0db.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.39.229.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         09:de:86:0e:ee:fd:8c:e5:96:2e:30:af:a7:df:04:a0:0a:4a:
         03:82:fb:3a:12:e0:2d:f4:e3:40:71:eb:90:4a:75:85:ab:4a:
         12:8f:a6:8c:da:4a:5e:c0:4c:4d:a5:d2:6e:ca:30:4f:04:94:
         5b:2a:09:b0:1b:cd:14:c5:82:bc:26:bb:cc:7a:07:9b:43:87:
         8b:a6:e9:8f:a4:31:b5:9e:cf:5f:19:e8:a2:bb:cb:02:71:44:
         97:f7:13:19:94:50:0d:3e:18:20:7f:85:ff:a6:ce:32:d8:c1:
         12:60:54:7e:67:15:da:73:73:54:ed:d3:fb:43:ba:9a:d0:02:
         f7:ad:53:28:4d:63:a5:8f:5e:cb:cf:1f:8d:c1:a9:53:ed:2f:
         72:34:63:65:21:7d:cf:a1:80:78:5b:e0:10:0c:c2:b1:18:d3:
         41:af:3c:eb:f3:ff:0f:d5:58:6c:34:2a:3e:52:e6:e2:dc:dd:
         e0:9b:10:ce:1d:cb:67:10:b4:02:f7:52:7e:b2:0b:56:e4:42:
         57:99:f0:0d:92:c3:09:b7:dd:df:23:33:c1:00:19:12:a2:6d:
         3d:8d:84:40:fc:96:85:2f:6e:99:27:ff:c3:00:0d:49:17:11:
         8d:a4:da:5a:38:4c:a1:3a:64:da:e1:a6:37:55:36:d6:77:f4:
         86:7f:e9:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 21:57:57 2026 by rpki-client