Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/429c38be-db51-4d91-a361-94ba3bfd9e9a/5d3fac03-4def-3ee8-976b-46cd6ddac03c.roa
File:                     5d3fac03-4def-3ee8-976b-46cd6ddac03c.roa (raw, json)
Hash identifier:          YwqNsFx/4kfT+P1WIY+mRy+MrT1bQ4pfqN6Uvj7uIus=
Subject key identifier:   EE:09:9D:B4:03:49:73:55:AD:14:6A:CD:74:78:71:CA:8A:24:C4:1F
Certificate issuer:       /CN=429c38be-db51-4d91-a361-94ba3bfd9e9a
Certificate serial:       010D0C9F4328584D7F9A82D783224F6BE3139700
Authority key identifier: 3B:0A:DE:00:75:72:22:68:DA:FD:27:00:F1:C8:1F:8B:CA:05:97:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/429c38be-db51-4d91-a361-94ba3bfd9e9a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/429c38be-db51-4d91-a361-94ba3bfd9e9a/5d3fac03-4def-3ee8-976b-46cd6ddac03c.roa
Signing time:             Tue 14 Apr 2026 01:00:24 +0000
ROA not before:           Tue 14 Apr 2026 01:00:24 +0000
ROA not after:            Mon 13 Jul 2026 01:00:24 +0000
asID:                     16509
IP address blocks:        66.179.16.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/429c38be-db51-4d91-a361-94ba3bfd9e9a/429c38be-db51-4d91-a361-94ba3bfd9e9a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/429c38be-db51-4d91-a361-94ba3bfd9e9a/429c38be-db51-4d91-a361-94ba3bfd9e9a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/429c38be-db51-4d91-a361-94ba3bfd9e9a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:7f:9a:82:d7:83:22:4f:6b:e3:13:97:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=429c38be-db51-4d91-a361-94ba3bfd9e9a
        Validity
            Not Before: Apr 14 01:00:24 2026 GMT
            Not After : Jul 13 01:00:24 2026 GMT
        Subject: CN=2643273b-c3a0-4a7b-afef-f89d4bed22ab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:e3:7f:fd:5f:e0:99:b9:ce:17:12:75:21:95:
                    55:50:23:90:03:6f:ce:18:9e:14:6f:2c:c6:b2:cd:
                    be:bc:c9:4f:97:2c:42:46:18:8a:36:ca:da:5a:d2:
                    21:96:cc:fa:98:af:9d:78:8d:cf:d9:f6:ad:3b:24:
                    fc:af:e9:19:7d:23:93:d0:c7:7e:8f:80:01:27:cc:
                    ba:a3:1f:d5:4f:bb:16:97:06:1b:9c:bd:36:50:76:
                    95:56:6b:b1:2e:96:25:76:ef:6f:87:70:09:e5:bc:
                    d2:c2:1b:74:53:c6:00:5e:68:88:38:c1:58:78:6a:
                    93:a9:7f:6a:35:29:cf:c2:76:6c:f8:b3:75:35:50:
                    6e:6f:10:47:d9:73:5e:7d:91:c1:7a:6f:b8:43:27:
                    2f:e1:77:1e:f6:64:55:ea:ac:8e:43:fa:f6:81:49:
                    14:d5:d3:cc:00:46:b4:ab:83:85:4c:a1:66:22:a4:
                    ac:26:f7:82:c1:14:c7:f1:6c:3b:07:7c:55:d0:08:
                    5d:c8:3b:c4:b2:97:0b:f5:3d:fc:95:b0:b4:be:58:
                    f6:60:0d:02:fc:fc:6d:e9:a3:f1:fe:88:0b:b4:5f:
                    d0:5a:e7:37:33:4b:c1:aa:fe:d9:f5:9c:f1:01:4f:
                    92:04:7b:fc:b1:15:68:32:bf:d5:f7:9b:df:e4:50:
                    ed:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:09:9D:B4:03:49:73:55:AD:14:6A:CD:74:78:71:CA:8A:24:C4:1F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/429c38be-db51-4d91-a361-94ba3bfd9e9a/5d3fac03-4def-3ee8-976b-46cd6ddac03c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/429c38be-db51-4d91-a361-94ba3bfd9e9a/429c38be-db51-4d91-a361-94ba3bfd9e9a.crl

            X509v3 Authority Key Identifier:
                keyid:3B:0A:DE:00:75:72:22:68:DA:FD:27:00:F1:C8:1F:8B:CA:05:97:3C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/429c38be-db51-4d91-a361-94ba3bfd9e9a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.179.16.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         98:92:52:5f:05:0c:f0:23:83:81:4e:93:7f:2b:4f:6e:a1:6a:
         3a:50:6b:ce:70:84:ea:80:b4:24:c2:a2:dc:78:b7:3e:3a:6e:
         4b:e4:08:48:08:92:55:cc:01:3b:6c:ce:f9:0e:7f:01:97:1d:
         34:87:d6:60:15:ba:8a:0e:af:54:04:77:df:2a:7a:41:ff:ce:
         2b:9e:5b:13:ab:32:8d:61:8b:db:51:4d:74:20:ac:47:09:a0:
         44:a5:7c:a0:7e:c2:97:da:59:f0:c9:2d:f0:c5:ca:66:22:3e:
         a1:86:57:47:c5:92:16:6e:21:b4:ed:ab:d9:e8:7d:ab:01:d9:
         0c:a4:2d:8d:65:e7:81:b5:99:0c:8d:e4:91:f9:3b:1e:e9:a5:
         f0:fe:9a:3b:02:72:e0:60:00:8d:3f:7e:89:1c:aa:7c:0e:a5:
         2d:c8:48:49:e4:2d:3e:91:66:42:4e:58:e8:1f:6e:95:38:15:
         10:8c:bb:77:56:70:a8:64:e3:ac:37:f1:7b:cc:0c:c5:de:ad:
         b6:a8:22:eb:e5:cc:a2:a5:81:ec:e4:a4:54:94:9d:dd:83:6b:
         73:cc:80:c9:40:af:ff:4b:ab:88:e9:d2:4b:91:c3:a9:5b:82:
         8d:75:e9:78:cc:d8:42:85:c1:74:93:1d:e8:1c:b7:9a:ce:99:
         b9:a2:d6:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 19:37:45 2026 by rpki-client