Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d170fca2-5f74-4408-8dc9-597ba031cfe2/0cce90f8-17de-3f75-a158-a043c6cd85e1.roa
File:                     0cce90f8-17de-3f75-a158-a043c6cd85e1.roa (raw, json)
Hash identifier:          3jjHnwcUdtd7au2aHtsWvqVlW7pmQ79LawAIDX9T3Lk=
Subject key identifier:   4D:63:11:7D:77:74:96:BA:F4:DF:88:34:96:05:E8:99:8A:A8:A7:A2
Certificate issuer:       /CN=d170fca2-5f74-4408-8dc9-597ba031cfe2
Certificate serial:       010D0C9F4328584EEA8756CC1FA6227A5FA88480
Authority key identifier: FF:28:BA:9B:42:6B:7A:24:D9:A4:AB:B7:91:4D:BD:B3:6F:3F:62:9E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d170fca2-5f74-4408-8dc9-597ba031cfe2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d170fca2-5f74-4408-8dc9-597ba031cfe2/0cce90f8-17de-3f75-a158-a043c6cd85e1.roa
Signing time:             Sat 22 Aug 2026 01:00:12 +0000
ROA not before:           Sat 22 Aug 2026 01:00:12 +0000
ROA not after:            Fri 20 Nov 2026 02:00:12 +0000
asID:                     14618
IP address blocks:        66.178.130.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d170fca2-5f74-4408-8dc9-597ba031cfe2/d170fca2-5f74-4408-8dc9-597ba031cfe2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d170fca2-5f74-4408-8dc9-597ba031cfe2/d170fca2-5f74-4408-8dc9-597ba031cfe2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d170fca2-5f74-4408-8dc9-597ba031cfe2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:ea:87:56:cc:1f:a6:22:7a:5f:a8:84:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d170fca2-5f74-4408-8dc9-597ba031cfe2
        Validity
            Not Before: Aug 22 01:00:12 2026 GMT
            Not After : Nov 20 02:00:12 2026 GMT
        Subject: CN=acf19659-34a5-48f2-8d27-f2b72dcbcccd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:dc:49:a8:0f:c7:30:35:47:a1:1a:eb:f9:18:
                    b5:c5:e0:83:96:e8:89:62:cd:21:42:1f:20:46:c8:
                    e2:1d:26:78:2d:f6:39:3b:fe:b0:71:ed:03:52:7b:
                    eb:b1:41:01:3c:c3:05:6d:5c:2c:a7:51:ff:5c:7e:
                    71:77:68:5d:dc:27:89:c8:b5:d0:1d:2d:d3:98:95:
                    dc:8d:70:d1:34:be:46:b5:4a:5a:6e:82:eb:83:67:
                    4a:24:87:52:3e:ea:d7:50:d9:5d:16:2e:bb:ea:e5:
                    50:f2:bc:c5:ce:cb:c9:9a:6f:2f:ae:a6:3c:26:a3:
                    b8:b5:5d:ba:07:95:15:5e:43:06:10:b2:4a:a1:cb:
                    f9:e2:b1:58:ce:41:f9:e6:81:6c:73:7a:0d:45:dd:
                    c6:c9:1f:6a:ed:55:3c:47:bb:8f:06:92:a8:6c:bd:
                    c2:1c:a4:6f:ce:7d:f4:eb:7d:ba:cb:b6:d9:e8:73:
                    33:36:95:09:74:2a:f9:fc:1b:64:db:29:47:bb:f8:
                    64:8d:58:0c:13:c9:4c:f8:bf:8d:df:6b:8d:04:13:
                    20:b5:06:6f:6c:b0:0e:b7:1b:45:b7:e1:4b:7a:36:
                    f9:c3:03:5d:76:0a:a5:94:87:f1:3a:14:1f:0a:d6:
                    d7:18:f0:ff:fb:47:cb:1a:58:ab:27:38:a7:3f:7c:
                    ef:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:63:11:7D:77:74:96:BA:F4:DF:88:34:96:05:E8:99:8A:A8:A7:A2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d170fca2-5f74-4408-8dc9-597ba031cfe2/0cce90f8-17de-3f75-a158-a043c6cd85e1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d170fca2-5f74-4408-8dc9-597ba031cfe2/d170fca2-5f74-4408-8dc9-597ba031cfe2.crl

            X509v3 Authority Key Identifier:
                keyid:FF:28:BA:9B:42:6B:7A:24:D9:A4:AB:B7:91:4D:BD:B3:6F:3F:62:9E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d170fca2-5f74-4408-8dc9-597ba031cfe2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.178.130.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a4:3c:8f:41:63:bf:34:5e:5c:ea:ea:9d:f6:a9:8d:4c:a4:6d:
         8e:b7:62:c3:eb:b6:fc:73:64:6b:a7:64:69:d8:82:05:fe:e3:
         8d:d1:ae:06:63:32:9e:00:14:fe:eb:74:18:2d:a2:d8:7a:76:
         79:08:fb:45:8d:80:09:4d:a7:8d:c5:90:4f:0a:da:19:c0:bb:
         60:57:9e:35:ae:5d:98:6a:38:14:61:bb:31:d3:2a:f5:19:87:
         46:97:11:31:29:be:2d:c3:41:19:38:56:93:60:b7:6c:ed:53:
         ed:2d:ea:1a:d4:f8:75:47:8f:d5:95:16:11:5d:67:88:5a:52:
         bc:3d:0a:54:28:92:92:fb:11:b6:e8:e3:0a:a2:3c:92:b2:01:
         e0:14:d9:09:ea:af:6e:1a:a7:38:ea:53:3a:0e:e3:15:2f:11:
         2a:3e:1c:77:32:59:4e:90:b9:b9:0c:cb:63:d8:94:b4:27:2f:
         d0:e4:ce:8e:85:8b:2c:48:08:ff:f5:3b:16:7e:84:51:4f:12:
         11:48:55:16:02:3a:0f:4b:9b:0c:c1:f0:91:f6:97:28:10:65:
         99:70:73:23:7f:c0:7b:49:3d:92:c5:ec:1f:ce:14:e5:32:dd:
         8f:3b:ea:a3:f2:2b:cb:d7:6d:58:0d:5a:1b:71:01:53:47:6b:
         d1:c8:03:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 13:39:28 2026 by rpki-client