Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4931e717-c1d1-4dd8-863d-5c06fb76f47b/37fa54e5-9e49-3fce-bb60-284db3e8f830.roa
File:                     37fa54e5-9e49-3fce-bb60-284db3e8f830.roa (raw, json)
Hash identifier:          OVb16GiQdgvFTwpzxfWK3jsqjKlwcjNYg+t2RmLU8/M=
Subject key identifier:   B7:7B:28:74:41:70:56:CC:76:F1:92:93:1E:0D:CE:BA:FA:68:2D:1B
Certificate issuer:       /CN=4931e717-c1d1-4dd8-863d-5c06fb76f47b
Certificate serial:       010D0C9F4328584FAF58AE0168B1E7CC818BA980
Authority key identifier: CE:42:FE:71:11:71:C3:49:1B:8D:B6:7B:74:E4:1F:4F:E2:91:DE:8C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4931e717-c1d1-4dd8-863d-5c06fb76f47b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4931e717-c1d1-4dd8-863d-5c06fb76f47b/37fa54e5-9e49-3fce-bb60-284db3e8f830.roa
Signing time:             Sat 31 Oct 2026 13:00:13 +0000
ROA not before:           Sat 31 Oct 2026 13:00:13 +0000
ROA not after:            Fri 29 Jan 2027 14:00:13 +0000
asID:                     21713
IP address blocks:        216.14.66.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4931e717-c1d1-4dd8-863d-5c06fb76f47b/4931e717-c1d1-4dd8-863d-5c06fb76f47b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4931e717-c1d1-4dd8-863d-5c06fb76f47b/4931e717-c1d1-4dd8-863d-5c06fb76f47b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4931e717-c1d1-4dd8-863d-5c06fb76f47b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Nov 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:af:58:ae:01:68:b1:e7:cc:81:8b:a9:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4931e717-c1d1-4dd8-863d-5c06fb76f47b
        Validity
            Not Before: Oct 31 13:00:13 2026 GMT
            Not After : Jan 29 14:00:13 2027 GMT
        Subject: CN=022a160c-4d7e-401f-8be9-5f5a34634ad1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:49:27:0c:7f:6c:57:71:33:c7:21:f1:56:d0:
                    de:c1:31:c8:da:13:c7:2a:f0:f8:2f:0d:db:b2:dc:
                    07:22:39:b2:6e:8f:7b:0a:01:cc:0f:92:73:06:2d:
                    df:4a:08:17:58:ae:f3:6d:5c:bb:18:f6:a0:d9:e2:
                    18:d6:9f:bd:a2:73:4b:52:82:bb:15:c8:0d:e3:d9:
                    55:9d:2c:da:21:c2:a0:9b:ce:a8:75:00:90:32:b6:
                    54:5f:01:17:23:fe:10:26:b5:14:0a:1c:eb:99:c4:
                    06:49:8a:30:28:de:10:9f:04:66:86:5f:67:4b:fb:
                    4c:e8:49:d4:32:d2:e7:bf:fa:0b:ba:40:16:d8:b6:
                    8d:f0:2d:2f:de:5e:82:e8:89:26:a9:23:41:13:24:
                    d2:24:21:1e:5b:f1:57:68:46:25:c1:78:e8:ac:14:
                    71:9f:da:a8:9a:23:4d:32:94:5b:17:7d:2a:e0:63:
                    fe:29:f5:45:1d:66:2d:e4:66:33:2e:ae:31:0b:16:
                    89:ab:79:73:0a:c8:d8:8f:8b:ea:32:f0:3f:56:3f:
                    76:fb:42:29:d5:44:9c:c7:40:fd:49:10:c2:4d:15:
                    53:95:43:7b:f9:84:51:f1:8f:7a:c4:d1:27:85:fa:
                    56:46:5f:e3:ad:44:0d:1a:25:65:51:28:cf:4d:54:
                    7a:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:7B:28:74:41:70:56:CC:76:F1:92:93:1E:0D:CE:BA:FA:68:2D:1B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4931e717-c1d1-4dd8-863d-5c06fb76f47b/37fa54e5-9e49-3fce-bb60-284db3e8f830.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4931e717-c1d1-4dd8-863d-5c06fb76f47b/4931e717-c1d1-4dd8-863d-5c06fb76f47b.crl

            X509v3 Authority Key Identifier:
                keyid:CE:42:FE:71:11:71:C3:49:1B:8D:B6:7B:74:E4:1F:4F:E2:91:DE:8C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4931e717-c1d1-4dd8-863d-5c06fb76f47b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.14.66.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7d:4d:c4:2d:4f:97:fe:6f:f3:fe:66:83:2a:2c:4b:28:91:d3:
         a5:e1:a0:cf:57:a6:34:ae:8d:4e:ca:77:ce:8b:04:2d:5a:bb:
         63:68:19:e2:0f:45:a6:ce:93:5e:b7:42:a5:c6:09:79:6a:c7:
         9b:97:b0:74:33:d5:83:98:35:09:23:42:7a:99:85:42:a0:78:
         1e:33:fd:b8:af:52:f7:ca:41:4e:1d:7c:31:da:d3:c4:05:8b:
         5a:d8:10:be:8f:9a:36:d8:92:e7:d0:9c:b0:79:29:33:5f:40:
         20:18:80:59:30:e8:af:83:be:d4:c4:a7:12:87:ea:7e:6c:a8:
         62:e4:f0:e3:64:28:8b:cf:05:d3:5d:c7:eb:e6:03:e6:ab:f4:
         bf:01:7b:85:cc:1e:ba:7b:26:4d:6a:6c:82:1b:05:51:bd:85:
         75:e6:08:52:de:d8:23:af:77:c4:bb:6f:0d:04:a8:0a:11:56:
         7c:b6:d7:26:06:4e:16:89:d1:cd:4b:9d:1a:2e:98:d7:38:e0:
         36:51:2d:b7:e7:dc:8f:48:72:d1:c0:f8:dc:a9:b1:55:01:5c:
         4d:e8:e4:bd:a1:8a:9e:90:56:f4:28:c6:b8:b6:3c:09:93:84:
         3d:3e:46:d0:b6:59:15:c5:54:4b:07:9a:2c:b0:e4:da:a0:70:
         9f:46:46:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 21:25:35 2026 by rpki-client