Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/d9001677-9a9d-377f-824b-c7d025b9793b.roa
File:                     d9001677-9a9d-377f-824b-c7d025b9793b.roa (raw, json)
Hash identifier:          tiTEThJYrghpA6h5flm5F/xAg6R7nIY/+Y749UPVkos=
Subject key identifier:   DC:9C:BB:ED:68:DA:D1:AB:0D:D9:6D:02:D0:A4:CE:5C:F8:82:E1:ED
Certificate issuer:       /CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a
Certificate serial:       010D0C9F4328584D7CCFD279CE806CE7D011FFE0
Authority key identifier: 49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/d9001677-9a9d-377f-824b-c7d025b9793b.roa
Signing time:             Mon 13 Apr 2026 01:00:24 +0000
ROA not before:           Mon 13 Apr 2026 01:00:24 +0000
ROA not after:            Sun 12 Jul 2026 01:00:24 +0000
asID:                     23473
IP address blocks:        66.253.157.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:7c:cf:d2:79:ce:80:6c:e7:d0:11:ff:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a
        Validity
            Not Before: Apr 13 01:00:24 2026 GMT
            Not After : Jul 12 01:00:24 2026 GMT
        Subject: CN=99cd0802-0461-426b-a94a-74bc1e66b237
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:e6:00:2f:50:a2:82:52:0b:04:cd:b2:15:13:
                    0d:c1:5e:14:c4:3e:6c:dc:1e:7d:95:c5:6d:57:94:
                    6f:61:35:15:82:2b:11:13:8c:97:13:ca:34:e7:61:
                    10:ab:04:5a:1d:b2:fa:da:97:a6:67:7d:51:ad:02:
                    bf:15:2f:0a:63:23:a8:39:c9:e4:b9:94:df:d6:33:
                    92:41:96:31:2d:82:09:87:52:76:6d:11:ea:b3:81:
                    c7:e1:6f:2f:98:68:25:6c:bf:a8:d4:00:77:34:70:
                    25:bd:39:87:6e:c1:44:99:6b:85:f3:86:e8:ce:e7:
                    0a:ba:13:38:77:0c:d0:9d:99:74:8d:c2:b3:b0:95:
                    bb:93:5c:c3:4a:ba:c9:72:48:56:ec:2b:9c:db:41:
                    19:80:36:81:2a:37:68:2b:7d:5d:a1:20:13:36:f4:
                    d0:15:23:25:71:92:ac:1c:d0:24:c1:db:ff:63:4f:
                    27:c8:ee:e8:9c:41:cc:73:65:ff:6d:3b:1b:dd:ca:
                    d4:07:b5:7c:37:be:9f:cc:88:e7:63:d4:9e:14:b0:
                    79:ab:02:04:af:36:af:1b:d5:67:7d:25:66:83:11:
                    47:c4:9f:6d:b0:04:2e:7f:5d:ac:a9:6d:9a:d9:f0:
                    7b:a1:1b:af:56:fb:28:9d:e4:23:95:2e:d3:5d:2a:
                    d3:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:9C:BB:ED:68:DA:D1:AB:0D:D9:6D:02:D0:A4:CE:5C:F8:82:E1:ED
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/d9001677-9a9d-377f-824b-c7d025b9793b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl

            X509v3 Authority Key Identifier:
                keyid:49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.253.157.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2e:c0:33:a5:05:46:c8:34:97:9f:34:a5:26:41:af:64:32:bc:
         e8:55:5c:83:d0:5b:42:89:03:a7:bd:25:cc:1a:00:b8:60:b2:
         a6:b9:50:4f:ac:fb:73:f2:e4:20:7d:06:29:42:e8:07:35:e9:
         d9:54:ba:cb:17:4a:eb:6a:f4:88:6b:ed:7a:5b:9c:1e:2b:b1:
         e7:aa:df:5d:c8:f4:c7:3c:fb:dc:97:62:e4:ae:7f:51:d6:01:
         a8:d5:9e:4d:f8:2e:cf:11:3e:77:e4:87:ba:58:cb:7a:fb:35:
         98:08:f3:d5:b6:2f:4f:02:4d:7c:d0:f3:92:a1:52:b1:52:e9:
         46:ab:6c:6a:36:68:fa:7e:bf:f3:24:f9:81:c1:a6:c9:83:a9:
         d8:63:63:bb:ab:64:65:f1:5a:9a:66:d7:34:5f:be:1f:02:a6:
         6d:1d:b5:82:14:ba:d7:67:8e:fe:41:ec:dc:2c:99:07:69:85:
         6f:d0:99:3d:d3:7f:21:35:92:dc:cb:66:8a:ec:15:95:d1:55:
         2c:83:20:70:89:1d:08:4e:dc:3e:98:0b:50:82:dc:7e:c3:97:
         2f:b3:5b:01:08:ad:b4:e0:bb:5a:49:3e:84:b2:54:1c:da:a5:
         a6:e2:dc:55:ef:5e:46:3d:83:e2:ce:93:d5:bd:89:7e:97:49:
         cf:9f:5c:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 18:18:53 2026 by rpki-client