Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/89a397c2-4860-4547-8d71-faf2481535cf/254993fc-d3d4-358c-ae0c-3336b5eb4c1f.roa
File:                     254993fc-d3d4-358c-ae0c-3336b5eb4c1f.roa (raw, json)
Hash identifier:          yhlnBBo/PSQWcB51FY1J84LVuJ/l67emmqAZVNsghIE=
Subject key identifier:   67:37:E9:00:16:6C:A5:7B:15:AD:26:65:8D:8D:B9:15:9D:22:1E:22
Certificate issuer:       /CN=89a397c2-4860-4547-8d71-faf2481535cf
Certificate serial:       010D0C9F4328584CC07C9E45603830D1C6F53240
Authority key identifier: F0:75:EE:42:C9:D1:3F:04:0E:92:8B:C7:FC:5D:96:F7:0B:EB:BE:AF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/89a397c2-4860-4547-8d71-faf2481535cf.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/89a397c2-4860-4547-8d71-faf2481535cf/254993fc-d3d4-358c-ae0c-3336b5eb4c1f.roa
Signing time:             Wed 04 Feb 2026 14:00:39 +0000
ROA not before:           Wed 04 Feb 2026 14:00:39 +0000
ROA not after:            Tue 05 May 2026 13:00:39 +0000
asID:                     401164
IP address blocks:        66.45.117.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/89a397c2-4860-4547-8d71-faf2481535cf/89a397c2-4860-4547-8d71-faf2481535cf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/89a397c2-4860-4547-8d71-faf2481535cf/89a397c2-4860-4547-8d71-faf2481535cf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/89a397c2-4860-4547-8d71-faf2481535cf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:c0:7c:9e:45:60:38:30:d1:c6:f5:32:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=89a397c2-4860-4547-8d71-faf2481535cf
        Validity
            Not Before: Feb  4 14:00:39 2026 GMT
            Not After : May  5 13:00:39 2026 GMT
        Subject: CN=6e77c8d5-ff2d-416e-baed-9a45bfe3c11f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:cb:66:91:69:c7:34:40:58:45:0f:ea:8f:ba:
                    f8:bf:2f:47:44:04:b2:1b:8f:5d:46:c9:db:03:a4:
                    06:5a:91:84:d5:32:ee:4c:88:c1:88:e4:24:12:7d:
                    24:6a:05:21:f9:31:71:31:d0:4b:d7:9a:ba:3d:5b:
                    8d:8b:5f:5e:cf:23:13:da:a2:e8:52:2f:72:be:bd:
                    71:84:b6:55:12:d5:3e:07:e0:ac:b1:f3:d7:6a:61:
                    f8:43:a2:df:97:31:51:f2:3d:68:bd:8b:58:5a:51:
                    dd:df:8c:e6:0c:4f:01:c9:9e:f2:cc:e4:27:c0:24:
                    3e:d8:76:ad:ab:e8:c6:6c:97:d6:98:c9:e3:de:f0:
                    34:87:71:14:30:3d:d3:16:ce:f8:3a:2b:f5:ce:5c:
                    6e:52:55:18:ea:2b:e2:23:0d:26:62:97:d2:57:2a:
                    78:30:b8:4f:38:b7:b2:82:a2:ee:1f:a4:1a:f3:0b:
                    5d:92:5b:7a:34:df:36:12:ca:a3:83:49:25:64:c9:
                    d6:ac:90:23:8f:4d:18:c0:f1:a8:c0:f2:61:ac:3f:
                    f4:80:c9:da:84:81:3a:f0:03:73:03:6d:57:1f:bf:
                    e4:e9:56:3d:81:a5:3e:86:af:1f:f1:87:f2:e9:42:
                    ad:d6:23:c4:b4:c3:8d:f5:3c:1a:e7:55:a1:14:7d:
                    91:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:37:E9:00:16:6C:A5:7B:15:AD:26:65:8D:8D:B9:15:9D:22:1E:22
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/89a397c2-4860-4547-8d71-faf2481535cf/254993fc-d3d4-358c-ae0c-3336b5eb4c1f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/89a397c2-4860-4547-8d71-faf2481535cf/89a397c2-4860-4547-8d71-faf2481535cf.crl

            X509v3 Authority Key Identifier:
                keyid:F0:75:EE:42:C9:D1:3F:04:0E:92:8B:C7:FC:5D:96:F7:0B:EB:BE:AF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/89a397c2-4860-4547-8d71-faf2481535cf.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.45.117.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9a:04:ab:66:a8:8b:5f:f1:dc:3a:a0:1a:fe:5e:72:a0:25:ab:
         e8:0a:b8:66:7b:2f:54:de:c0:77:9d:67:98:a0:33:72:3c:7e:
         fb:87:bd:66:c5:6f:3c:f5:f0:b3:d9:71:17:eb:3a:57:fd:59:
         27:49:89:63:ed:4c:0d:e3:16:44:20:18:b6:9d:00:39:e1:08:
         1f:4b:98:f7:8c:41:70:cb:af:d5:93:74:e2:34:6e:99:bc:05:
         a1:6e:48:9b:59:ac:66:5a:fd:93:d2:3e:25:64:43:bf:2f:a3:
         ae:fe:6c:48:95:84:8c:a3:1c:54:0d:aa:1b:5e:a1:f2:71:56:
         a4:3b:d1:a0:7c:c7:76:69:ca:e2:cb:18:e5:80:2b:fe:16:f0:
         e4:cd:a2:7e:d1:8b:5a:95:2b:5b:10:4a:94:3d:d8:e6:3e:86:
         22:e9:86:ef:8b:fc:84:bb:d2:48:65:43:30:47:2c:54:77:f4:
         03:56:be:14:5e:dd:18:ad:c9:d7:bc:a3:2c:8a:b8:22:6e:65:
         95:e4:c1:30:71:85:ec:53:a1:19:6d:4d:67:d7:93:a1:2f:03:
         6b:26:1f:f8:70:f2:1f:42:34:ce:e7:91:fb:9c:ca:7b:88:ef:
         4c:c3:b9:79:90:5c:74:52:cf:aa:09:cc:f9:6f:05:5d:79:53:
         61:eb:9c:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 3 01:15:14 2026 by rpki-client