Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/d0ff0748-49a0-3920-ad1b-a4de5796190f.roa
File:                     d0ff0748-49a0-3920-ad1b-a4de5796190f.roa (raw, json)
Hash identifier:          eaXgLm1W1Y/e0IgsoFnOhKRzKAdn1166rMAzmmxdwvA=
Subject key identifier:   E4:3C:F4:E4:93:67:F7:23:34:77:A1:A6:3C:0D:95:32:2B:8C:FD:D9
Certificate issuer:       /CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Certificate serial:       010D0C9F4328584EA798A9B7A8EC073D4DCB5B00
Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/d0ff0748-49a0-3920-ad1b-a4de5796190f.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     852
IP address blocks:        66.110.160.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:98:a9:b7:a8:ec:07:3d:4d:cb:5b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=69c1c899-f750-498b-bc20-2b37c5c89422
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:4e:61:8b:2b:6b:0d:76:fc:a1:3f:b3:22:de:
                    dc:b6:bd:a3:4d:46:7d:45:c5:19:e2:10:69:0d:30:
                    a4:ba:13:5b:b9:b8:c2:b1:10:91:08:ad:4e:74:7d:
                    ed:42:00:1d:8b:05:2b:21:4d:a2:8f:cc:27:23:85:
                    d6:fc:f6:dc:58:91:08:dc:c9:d6:9f:b5:cf:f1:2f:
                    0d:df:a2:b5:52:76:a3:31:28:3c:3b:c4:26:fc:97:
                    d1:97:d2:d3:c6:e6:b1:2c:d4:d7:a3:bf:c6:95:c1:
                    a3:e7:c3:8f:f5:5b:0a:24:0c:2f:b7:b7:f1:0a:17:
                    6c:79:a4:0b:a7:4b:92:bb:3d:5d:9c:b1:41:6a:05:
                    50:d6:95:6e:42:55:ae:94:be:33:ab:bb:ee:17:1a:
                    d0:9a:ec:c6:3b:9b:7c:cc:96:02:66:87:20:7d:d0:
                    42:da:14:b5:61:33:f1:33:1a:64:02:7a:0d:a8:6b:
                    ba:9f:cf:1f:03:0a:c4:cf:c8:60:53:91:0b:e0:5d:
                    0d:0c:50:6c:2f:82:02:5d:e7:c5:06:0f:57:bc:45:
                    37:50:1a:99:e2:7a:e9:76:de:4b:ed:55:14:b1:3b:
                    87:0c:71:92:88:4c:96:78:ba:da:8a:3c:19:cc:f4:
                    34:e7:58:57:f6:11:c4:1e:1d:b4:16:b8:c9:56:d2:
                    8e:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:3C:F4:E4:93:67:F7:23:34:77:A1:A6:3C:0D:95:32:2B:8C:FD:D9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/d0ff0748-49a0-3920-ad1b-a4de5796190f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl

            X509v3 Authority Key Identifier:
                keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.110.160.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0d:2d:e4:5a:0d:b7:c7:92:93:13:21:c7:67:86:4b:28:fc:31:
         23:13:e0:f2:e4:12:92:93:1a:f6:3e:da:79:81:9a:04:a4:41:
         6b:3a:8f:cb:c4:32:92:38:4d:c2:9b:27:d2:58:15:0e:8d:bb:
         21:5e:64:97:7f:0b:26:2d:43:fc:6d:6e:14:30:de:6c:17:0b:
         7e:7f:2c:29:49:27:36:93:9a:dd:d9:4e:6c:4d:42:28:e1:94:
         09:1d:ac:4b:fa:95:61:df:88:24:04:5b:04:78:00:5c:ec:cd:
         b2:ba:f1:e7:d0:8a:32:6d:f6:b0:98:da:65:a4:e8:65:08:0d:
         13:a3:80:00:79:ca:75:0b:09:7b:6e:10:ec:1f:be:74:f0:a5:
         2e:7e:f3:69:a7:cc:09:8a:65:96:ec:18:b2:a4:ce:eb:ee:7d:
         9a:1f:e4:30:35:bb:8a:4c:17:8e:14:65:5e:61:a5:97:e6:0a:
         a7:0f:1a:1c:63:80:be:3e:11:c3:e7:be:0b:95:59:03:7e:d6:
         36:02:77:e5:36:00:39:1d:0e:28:e1:ab:1b:54:22:3c:4a:08:
         fc:20:6b:a2:58:d7:4d:28:54:1d:3e:7b:f8:56:77:3e:cd:09:
         58:90:6b:7a:e8:fe:9b:f1:62:58:ec:69:b0:9d:10:1e:99:ab:
         38:49:ad:05
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nmKm3qOwHPU3LWwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2Y2Zjk2NTMtOWZkYS00ZDIwLTkyNWEtNTFkYjc3MmFl
YjI0MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk
NjljMWM4OTktZjc1MC00OThiLWJjMjAtMmIzN2M1Yzg5NDIyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA205hiytrDXb8oT+zIt7ctr2jTUZ9RcUZ4hBp
DTCkuhNbubjCsRCRCK1OdH3tQgAdiwUrIU2ij8wnI4XW/PbcWJEI3MnWn7XP8S8N
36K1UnajMSg8O8Qm/JfRl9LTxuaxLNTXo7/GlcGj58OP9VsKJAwvt7fxChdseaQL
p0uSuz1dnLFBagVQ1pVuQlWulL4zq7vuFxrQmuzGO5t8zJYCZocgfdBC2hS1YTPx
MxpkAnoNqGu6n88fAwrEz8hgU5EL4F0NDFBsL4ICXefFBg9XvEU3UBqZ4nrpdt5L
7VUUsTuHDHGSiEyWeLraijwZzPQ051hX9hHEHh20FrjJVtKOTQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFOQ89OSTZ/cjNHehpjwNlTIrjP3ZMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZm
OTY1My05ZmRhLTRkMjAtOTI1YS01MWRiNzcyYWViMjQvZDBmZjA3NDgtNDlhMC0z
OTIwLWFkMWItYTRkZTU3OTYxOTBmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2Y2Zjk2NTMtOWZkYS00ZDIwLTky
NWEtNTFkYjc3MmFlYjI0LzNmNmY5NjUzLTlmZGEtNGQyMC05MjVhLTUxZGI3NzJh
ZWIyNC5jcmwwHwYDVR0jBBgwFoAUcCZT7JXvtmEgR02aIusBdH6lEB8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZmOTY1My05ZmRhLTRkMjAtOTI1YS01MWRi
NzcyYWViMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEQm6gMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAA0t5FoNt8eSkxMhx2eGSyj8MSMT4PLkEpKTGvY+2nmBmgSkQWs6j8vE
MpI4TcKbJ9JYFQ6NuyFeZJd/CyYtQ/xtbhQw3mwXC35/LClJJzaTmt3ZTmxNQijh
lAkdrEv6lWHfiCQEWwR4AFzszbK68efQijJt9rCY2mWk6GUIDROjgAB5ynULCXtu
EOwfvnTwpS5+82mnzAmKZZbsGLKkzuvufZof5DA1u4pMF44UZV5hpZfmCqcPGhxj
gL4+EcPnvguVWQN+1jYCd+U2ADkdDijhqxtUIjxKCPwga6JY100oVB0+e/hWdz7N
CViQa3ro/pvxYljsabCdEB6ZqzhJrQU=
-----END CERTIFICATE-----
Generated at Wed Jul 29 06:14:44 2026 by rpki-client