Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1d639366-c044-456e-b8c8-0de04a543a0c/d13f9f99-e597-3904-ba20-da0c91f2c353.roa
File:                     d13f9f99-e597-3904-ba20-da0c91f2c353.roa (raw, json)
Hash identifier:          RAqSAFBcHRG4DHtdZL8yRwGonxCb6GVFrHrex59tr44=
Subject key identifier:   CE:76:74:9F:27:05:3D:13:EE:39:80:76:6C:B7:3E:A0:AC:73:71:1E
Certificate issuer:       /CN=1d639366-c044-456e-b8c8-0de04a543a0c
Certificate serial:       010D0C9F4328584D83CAAD1D024B324A9F267480
Authority key identifier: FC:35:57:C9:0E:3D:B5:19:05:85:A4:A7:E7:10:E9:65:6A:04:67:87
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1d639366-c044-456e-b8c8-0de04a543a0c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1d639366-c044-456e-b8c8-0de04a543a0c/d13f9f99-e597-3904-ba20-da0c91f2c353.roa
Signing time:             Wed 15 Apr 2026 13:00:30 +0000
ROA not before:           Wed 15 Apr 2026 13:00:30 +0000
ROA not after:            Tue 14 Jul 2026 13:00:30 +0000
asID:                     27608
IP address blocks:        66.161.237.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1d639366-c044-456e-b8c8-0de04a543a0c/1d639366-c044-456e-b8c8-0de04a543a0c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1d639366-c044-456e-b8c8-0de04a543a0c/1d639366-c044-456e-b8c8-0de04a543a0c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1d639366-c044-456e-b8c8-0de04a543a0c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:83:ca:ad:1d:02:4b:32:4a:9f:26:74:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1d639366-c044-456e-b8c8-0de04a543a0c
        Validity
            Not Before: Apr 15 13:00:30 2026 GMT
            Not After : Jul 14 13:00:30 2026 GMT
        Subject: CN=4622c26d-8cb6-4234-b82f-0282f4b261fd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:2f:f3:4f:c2:9d:58:cf:d3:67:cc:07:12:9f:
                    f4:88:5e:ef:c2:bb:e8:22:20:eb:f3:d3:c1:82:6a:
                    93:a7:bf:ed:bf:a1:1e:96:66:31:d7:3d:21:61:e4:
                    9b:72:79:81:c3:21:96:c4:37:38:4c:85:9d:7b:5c:
                    51:e4:47:8a:d2:f4:57:39:72:2f:5a:b4:04:af:b9:
                    3e:50:d1:51:33:66:0b:1b:d1:45:ed:0b:f7:ec:02:
                    61:37:2b:6f:da:10:fe:85:30:b5:37:39:8f:d9:7f:
                    ec:1d:21:5d:de:4c:38:b3:73:a2:5b:95:3c:6e:87:
                    53:c5:5d:12:9f:10:5f:4a:8e:8f:53:7d:26:54:af:
                    f1:7d:2d:5c:d5:bc:ae:ad:a8:71:cf:96:55:68:ff:
                    f5:75:70:2e:fa:36:38:69:7c:53:d7:6e:4b:80:76:
                    dc:95:e5:a3:3e:5e:66:24:e0:ec:77:14:44:0e:e0:
                    68:f1:35:ee:05:d6:f9:39:a7:e4:a6:44:6c:43:ab:
                    fd:df:9d:d6:aa:7d:8d:2b:e3:63:cd:a4:d0:85:9f:
                    2f:55:d6:80:26:bd:84:7b:8d:2d:fa:f3:fe:66:81:
                    3d:de:0f:ef:60:47:76:58:6e:f6:93:55:4b:33:64:
                    0c:21:ef:1a:9e:8d:c7:6a:1d:d1:55:fa:46:f4:45:
                    c9:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:76:74:9F:27:05:3D:13:EE:39:80:76:6C:B7:3E:A0:AC:73:71:1E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1d639366-c044-456e-b8c8-0de04a543a0c/d13f9f99-e597-3904-ba20-da0c91f2c353.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1d639366-c044-456e-b8c8-0de04a543a0c/1d639366-c044-456e-b8c8-0de04a543a0c.crl

            X509v3 Authority Key Identifier:
                keyid:FC:35:57:C9:0E:3D:B5:19:05:85:A4:A7:E7:10:E9:65:6A:04:67:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1d639366-c044-456e-b8c8-0de04a543a0c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.161.237.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         48:3e:6b:e7:0b:73:68:1a:5d:67:3c:cf:24:5e:33:c9:04:06:
         cb:01:75:17:51:28:7e:cf:96:e2:d7:dd:51:6d:eb:fb:92:46:
         74:c9:1a:b0:65:b0:7c:58:6a:02:ff:95:68:cd:c1:2e:b2:09:
         a9:4a:d5:96:26:a5:3e:0b:02:5c:c5:fa:1f:79:51:1e:79:61:
         59:e2:ca:0f:51:7a:39:7e:38:11:8b:a2:10:a8:1d:df:a4:54:
         6a:2a:85:69:b9:77:54:a7:ee:4d:2f:7b:af:dd:03:c1:b8:d5:
         1e:e4:c2:6d:44:f5:c3:07:c9:c2:b0:5a:3c:3f:29:6f:53:64:
         64:b1:aa:bf:b6:db:e8:e3:5b:a5:b3:27:e7:57:dd:7b:2f:d2:
         7e:41:77:9d:21:3c:2b:9b:ba:44:76:21:c0:7d:ea:8a:c8:0a:
         c2:22:9e:d5:c3:2a:84:62:5d:80:5d:c7:c3:4e:e2:b1:84:2d:
         00:09:19:0b:f9:df:73:af:7e:88:49:88:f3:f7:26:e6:67:17:
         1e:ac:d1:9f:7a:f7:dc:40:90:ee:1a:d9:d0:8f:a8:a0:ae:47:
         df:ab:81:26:35:01:97:cb:25:70:13:ac:74:ef:18:14:d3:53:
         18:1e:c3:86:65:be:22:b1:c8:57:40:cc:38:4b:83:53:42:c4:
         8f:d9:c3:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 09:56:13 2026 by rpki-client