Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/190a907f-bde1-4ae9-a43b-80d0b516600a/66a7cafc-52e8-37ff-be50-8baddc2ec6aa.roa
File:                     66a7cafc-52e8-37ff-be50-8baddc2ec6aa.roa (raw, json)
Hash identifier:          AkXTlzNVeBVNzBA9QBUAeddq+ONYxh0QbqKGHG3/h3o=
Subject key identifier:   DD:69:CD:F1:D6:6F:C5:78:01:4F:54:51:F1:21:D4:24:F7:9D:66:EB
Certificate issuer:       /CN=190a907f-bde1-4ae9-a43b-80d0b516600a
Certificate serial:       010D0C9F4328584EA7974AF2C1DD532035C587A0
Authority key identifier: 08:3A:AF:31:B7:C0:61:09:23:30:1E:39:8E:9C:75:6E:E8:81:CC:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/190a907f-bde1-4ae9-a43b-80d0b516600a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/190a907f-bde1-4ae9-a43b-80d0b516600a/66a7cafc-52e8-37ff-be50-8baddc2ec6aa.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     398846
IP address blocks:        156.142.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/190a907f-bde1-4ae9-a43b-80d0b516600a/190a907f-bde1-4ae9-a43b-80d0b516600a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/190a907f-bde1-4ae9-a43b-80d0b516600a/190a907f-bde1-4ae9-a43b-80d0b516600a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/190a907f-bde1-4ae9-a43b-80d0b516600a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:97:4a:f2:c1:dd:53:20:35:c5:87:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=190a907f-bde1-4ae9-a43b-80d0b516600a
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=7080ae4f-de81-4c40-81a7-135ba143fc2a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:ae:d7:7d:7f:a2:f5:df:aa:59:31:df:b3:48:
                    37:e9:ea:e5:8c:ed:eb:a1:eb:22:4b:0f:6e:72:65:
                    39:68:e8:3b:24:0b:7f:02:36:eb:18:ac:7d:85:f2:
                    ff:68:2d:9d:eb:9c:5e:3a:43:db:ee:97:e2:5c:40:
                    77:5f:78:db:fc:ba:17:a4:9a:20:35:c9:53:ef:7a:
                    0d:82:b0:9e:a7:c4:47:a9:d7:45:b5:83:25:d6:df:
                    8b:41:ec:36:92:46:b2:7e:0f:a9:2d:9a:4d:49:fb:
                    d6:18:a3:8a:1e:01:e6:11:73:c3:ff:bb:5a:22:75:
                    90:8d:13:fb:4c:22:32:b8:e4:69:6b:6d:89:3f:e2:
                    8d:69:80:b3:39:7f:11:65:27:12:5b:70:b2:ab:6a:
                    c5:e3:a5:b1:34:24:75:27:52:bf:bc:a7:71:88:88:
                    8f:ee:3f:85:2a:ab:88:3b:ff:03:48:2c:19:7a:b5:
                    bc:75:1f:20:02:9c:f6:a8:c3:91:79:62:21:c2:fd:
                    65:8c:0f:66:2e:ed:c0:e5:45:95:37:c9:c6:20:52:
                    85:2e:8e:96:0a:64:ec:e8:c3:28:3e:28:91:2e:28:
                    42:94:e6:ef:9c:24:0c:44:8a:5a:a2:06:4f:be:08:
                    a4:f0:9b:6a:c7:b2:8e:23:8a:f7:a9:cb:0a:f6:b7:
                    69:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:69:CD:F1:D6:6F:C5:78:01:4F:54:51:F1:21:D4:24:F7:9D:66:EB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/190a907f-bde1-4ae9-a43b-80d0b516600a/66a7cafc-52e8-37ff-be50-8baddc2ec6aa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/190a907f-bde1-4ae9-a43b-80d0b516600a/190a907f-bde1-4ae9-a43b-80d0b516600a.crl

            X509v3 Authority Key Identifier:
                keyid:08:3A:AF:31:B7:C0:61:09:23:30:1E:39:8E:9C:75:6E:E8:81:CC:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/190a907f-bde1-4ae9-a43b-80d0b516600a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.142.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         89:9e:08:ec:53:f2:2f:e9:f1:d4:e7:ae:76:cc:41:de:fa:45:
         08:6d:11:f1:33:5c:2b:62:fc:7f:25:53:89:21:ed:95:48:75:
         dc:5c:c9:4e:dc:9f:5d:bb:93:e3:e2:c5:0d:72:8a:c8:85:1f:
         36:9a:81:23:24:9a:24:9f:29:ac:1f:a0:34:6f:c4:61:e3:14:
         58:5f:ac:32:26:f0:0c:4a:db:2a:f4:c2:27:e3:dd:a7:6f:3a:
         47:55:9b:8a:84:e6:57:c7:8b:fd:44:d8:e3:89:ea:0b:f9:ff:
         71:00:9f:2d:91:75:40:ef:e1:bd:ce:1a:9f:9e:03:ad:9d:77:
         5b:a5:0c:4f:1b:4c:01:a6:61:d4:af:0c:ab:4a:5b:eb:b5:6b:
         2d:88:91:30:5b:1e:35:f2:21:f5:7a:4d:08:ce:7b:68:b4:a1:
         ae:4e:4e:0d:df:02:ee:eb:e6:bc:b0:34:72:3b:46:e7:e8:8b:
         26:6e:04:49:39:d3:95:e7:8f:42:36:dc:71:27:75:7a:53:01:
         ee:3f:60:10:c5:fb:2c:e8:1b:26:48:4e:60:25:62:91:93:44:
         46:0e:64:d7:80:1f:34:dd:1c:b6:71:fe:6d:d6:f7:be:d1:c8:
         9d:9c:56:41:21:2d:4b:67:75:e3:87:78:e1:c5:5f:64:03:c1:
         39:28:51:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 13:31:14 2026 by rpki-client