Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/5d6ffd5a-9377-3d09-9ce6-0a36500f8016.roa
File:                     5d6ffd5a-9377-3d09-9ce6-0a36500f8016.roa (raw, json)
Hash identifier:          ajI5JdjdBbnJW8DzzJtOi1cD9ayC7UDbApWkl3gKJlE=
Subject key identifier:   18:E7:DC:E2:BA:BB:7B:83:C4:13:C0:D1:AE:5A:DA:ED:F6:24:0B:59
Certificate issuer:       /CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a
Certificate serial:       010D0C9F4328584F43DD6A5D6F5AA40702304880
Authority key identifier: 49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/5d6ffd5a-9377-3d09-9ce6-0a36500f8016.roa
Signing time:             Wed 23 Sep 2026 01:00:12 +0000
ROA not before:           Wed 23 Sep 2026 01:00:12 +0000
ROA not after:            Tue 22 Dec 2026 02:00:12 +0000
asID:                     23473
IP address blocks:        66.253.244.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:43:dd:6a:5d:6f:5a:a4:07:02:30:48:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a
        Validity
            Not Before: Sep 23 01:00:12 2026 GMT
            Not After : Dec 22 02:00:12 2026 GMT
        Subject: CN=6223e5b3-ceb3-45ab-b897-7560646bc878
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:0a:1c:04:1e:99:8b:a5:58:a9:af:23:5c:a7:
                    69:31:59:20:da:97:f2:4e:e4:49:4b:fd:33:8a:79:
                    02:b2:23:a1:9f:08:4d:ac:2e:00:26:52:21:b6:59:
                    2e:a1:e2:08:0b:93:fb:70:0d:b2:88:0d:90:52:d2:
                    aa:4a:85:ad:6f:3b:38:fb:ba:a9:7a:c5:90:1a:1d:
                    8e:58:2e:7b:17:ec:72:ae:aa:ad:da:78:7a:d1:3b:
                    55:6b:bd:ec:81:dd:81:47:d4:a3:7d:8a:23:c2:a4:
                    e7:02:97:d1:a2:47:13:73:23:39:41:44:e4:1a:9b:
                    47:2f:0e:0f:33:d3:d6:33:5b:e3:fb:11:01:2f:44:
                    ca:15:18:9a:55:8e:cb:fb:af:c8:09:b2:18:91:43:
                    3a:90:98:bc:77:2f:df:3a:ad:a6:30:62:68:9a:f1:
                    66:42:e7:b3:81:c8:88:2a:e3:68:3f:fd:6c:c2:b8:
                    9c:4a:d4:ab:49:62:7a:64:23:9e:09:56:78:4d:aa:
                    58:4e:f9:8f:12:49:05:93:9c:e5:d7:9a:87:43:17:
                    67:bb:89:d5:57:03:03:a6:83:bb:9f:17:31:a7:50:
                    8e:fc:8d:f2:3f:a1:c9:39:a8:7d:8e:5f:49:93:c5:
                    7d:e7:b6:ae:a8:53:e7:91:3a:97:a0:59:21:13:eb:
                    51:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:E7:DC:E2:BA:BB:7B:83:C4:13:C0:D1:AE:5A:DA:ED:F6:24:0B:59
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/5d6ffd5a-9377-3d09-9ce6-0a36500f8016.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl

            X509v3 Authority Key Identifier:
                keyid:49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.253.244.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7b:46:6a:89:a7:80:c2:d9:23:18:4d:68:3c:9d:cd:9a:7b:5d:
         1c:15:dc:df:2c:3d:57:f4:92:88:25:72:d7:b7:c8:2d:2a:44:
         62:5b:87:8c:ae:1e:2a:3d:3a:c3:c6:48:72:45:75:83:a9:57:
         f8:69:7c:e1:44:34:2c:b1:75:ec:e2:fc:94:17:ff:2f:d0:16:
         f9:5a:a3:d0:5e:0d:b8:f2:a5:64:0a:8e:68:6b:46:cd:c4:21:
         cd:1f:34:35:64:9e:2e:5e:66:9b:5f:1b:d5:37:00:00:8d:b0:
         f9:4f:f1:ae:d5:aa:64:78:e0:17:b3:80:81:22:9c:bc:41:9c:
         59:05:70:11:3b:2c:1c:7d:99:53:4c:4b:05:9c:60:87:5b:ec:
         32:82:5d:eb:9e:14:5b:08:20:aa:94:ad:75:bd:c9:2a:f9:0f:
         71:58:ac:a2:c2:cb:72:86:41:4f:66:5c:96:0f:ca:25:2a:4d:
         67:a0:72:00:32:c0:5b:48:c5:04:99:e5:d2:d0:84:fc:b9:2e:
         13:76:ac:2b:a1:23:fe:9a:35:d2:0f:51:32:9b:9d:d8:7a:4a:
         3e:75:ef:59:b7:2c:f0:b1:7e:52:d1:2b:ca:10:f2:12:bf:02:
         ea:ac:6b:32:9f:12:ed:d8:f9:6d:ff:18:06:0c:d3:47:6e:a0:
         9c:db:b4:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 10:53:26 2026 by rpki-client