Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/a71a6b1c-dd84-33b2-898c-4f69915afa83.roa
File:                     a71a6b1c-dd84-33b2-898c-4f69915afa83.roa (raw, json)
Hash identifier:          cw04Z/SK2aH4eVC+vmX8WDIzEhwTag1TVS4CdVmhfxQ=
Subject key identifier:   E8:A7:4F:59:DF:CE:6D:78:79:62:3F:BF:49:5D:4E:C5:75:4E:5D:0F
Certificate issuer:       /CN=cb444bd8-be6d-4853-a460-b577b6f84b65
Certificate serial:       010D0C9F4328584E043609CDE42BFB4517912400
Authority key identifier: 2D:A1:B0:8C:36:6A:A7:0F:6E:A9:91:B2:BB:47:5E:CD:7E:D7:58:09
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/a71a6b1c-dd84-33b2-898c-4f69915afa83.roa
Signing time:             Sun 31 May 2026 13:00:10 +0000
ROA not before:           Sun 31 May 2026 13:00:10 +0000
ROA not after:            Sat 29 Aug 2026 13:00:10 +0000
asID:                     399114
IP address blocks:        66.118.236.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/cb444bd8-be6d-4853-a460-b577b6f84b65.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/cb444bd8-be6d-4853-a460-b577b6f84b65.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 15 Jun 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:04:36:09:cd:e4:2b:fb:45:17:91:24:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cb444bd8-be6d-4853-a460-b577b6f84b65
        Validity
            Not Before: May 31 13:00:10 2026 GMT
            Not After : Aug 29 13:00:10 2026 GMT
        Subject: CN=e66dbca4-db6c-43bb-a436-79f79d60a929
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f8:08:02:11:6a:20:38:b0:d9:77:7a:c1:b3:a5:
                    8a:06:cb:3c:02:20:aa:3c:a8:59:42:d1:f6:56:b5:
                    6d:02:2e:1f:0b:1f:41:0a:2e:2f:91:22:8a:4a:44:
                    1e:f0:b2:61:97:b0:6f:de:51:f0:e7:9e:07:e4:03:
                    f5:11:3d:62:1b:a8:2a:0d:ec:c4:de:1a:80:00:7c:
                    7c:9c:99:87:82:85:98:66:5a:06:f2:c4:95:e2:a0:
                    4a:14:6d:a2:e3:2d:2b:d8:ca:65:9f:2c:ac:6b:79:
                    1b:af:ed:13:5d:c7:f3:75:db:5c:1f:31:82:b6:22:
                    72:a9:1f:f2:9c:a3:f0:05:10:ce:35:c6:cf:50:92:
                    f1:89:14:bc:25:66:7c:14:ac:57:80:ba:d7:d9:37:
                    44:df:c5:40:1d:2e:c6:aa:67:b9:6e:cc:ed:39:00:
                    f9:e1:ad:e1:a4:4c:65:b8:38:6a:56:9f:2a:5c:42:
                    dc:1c:ae:79:4f:ff:85:d0:d7:d1:7d:b2:f3:76:39:
                    13:63:d8:d5:7b:8a:56:a1:09:bc:60:dd:a7:f5:86:
                    e3:a7:83:2e:c8:c3:60:c2:40:f6:f8:97:f3:78:51:
                    60:9c:6e:ad:a8:60:ab:41:bc:52:cf:af:57:d3:1f:
                    66:a8:7a:e1:78:29:ac:10:12:28:ed:33:57:48:e4:
                    32:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:A7:4F:59:DF:CE:6D:78:79:62:3F:BF:49:5D:4E:C5:75:4E:5D:0F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/a71a6b1c-dd84-33b2-898c-4f69915afa83.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/cb444bd8-be6d-4853-a460-b577b6f84b65.crl

            X509v3 Authority Key Identifier:
                keyid:2D:A1:B0:8C:36:6A:A7:0F:6E:A9:91:B2:BB:47:5E:CD:7E:D7:58:09

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.118.236.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1d:8a:65:59:af:7c:0b:cb:cb:30:3b:60:ee:ad:37:9c:87:b2:
         4b:bf:ac:b0:e6:70:43:33:7d:94:e1:46:1c:56:fd:62:04:be:
         0c:fb:9c:e6:c5:5e:ba:37:fa:18:13:25:d2:19:e3:c8:31:f4:
         83:28:17:35:8f:f1:b8:f7:80:fd:00:d3:f8:1e:a9:5f:55:6b:
         47:f6:b7:e0:da:66:a7:a2:51:73:8b:46:14:0f:1b:57:54:71:
         07:dd:32:f8:54:3e:4c:bc:e6:c2:c8:83:be:21:3f:dc:51:72:
         f4:e2:d7:e1:a2:a1:24:53:21:72:ff:43:a4:61:63:87:d9:04:
         ba:38:82:5f:27:bb:a3:ca:25:07:09:fa:69:5c:3b:29:ae:7c:
         5d:19:b6:15:8d:05:da:7f:6d:31:af:04:68:d4:5b:74:79:bb:
         5e:cc:bf:26:99:8b:af:f2:f4:8e:4e:5c:1a:62:ce:cd:6c:fd:
         28:3c:3f:f0:76:49:b6:de:bb:21:8f:43:0b:32:33:e4:69:6c:
         b3:01:84:4e:2d:51:bf:77:4a:d3:4f:30:a9:88:fc:3d:24:64:
         a0:d9:7c:ee:12:93:32:ff:f4:e5:8d:12:b0:1e:25:5b:c1:33:
         fb:74:38:94:88:fc:91:06:07:ee:bf:44:bd:15:ee:10:d5:c1:
         18:c6:64:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 18:49:43 2026 by rpki-client