Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/bebad29c-c2e4-447d-a29e-20f329219ea9/37acec46-0de0-3fe4-a751-d81d4059f6a7.roa
File:                     37acec46-0de0-3fe4-a751-d81d4059f6a7.roa (raw, json)
Hash identifier:          drTHctXEzQhhXXlkT23I0bOnIVVR9J6ZEjmfhPw0SUg=
Subject key identifier:   FC:78:3A:25:32:EB:73:0C:BA:2E:F4:DA:AE:BE:98:19:28:ED:E6:5A
Certificate issuer:       /CN=bebad29c-c2e4-447d-a29e-20f329219ea9
Certificate serial:       010D0C9F4328584CEBC2321462F4F7A2562A5E80
Authority key identifier: 07:3C:51:6D:EA:85:18:32:66:CA:85:68:84:47:38:0F:36:B9:52:10
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/bebad29c-c2e4-447d-a29e-20f329219ea9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/bebad29c-c2e4-447d-a29e-20f329219ea9/37acec46-0de0-3fe4-a751-d81d4059f6a7.roa
Signing time:             Fri 20 Feb 2026 02:00:32 +0000
ROA not before:           Fri 20 Feb 2026 02:00:32 +0000
ROA not after:            Thu 21 May 2026 01:00:32 +0000
asID:                     14618
IP address blocks:        66.117.18.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/bebad29c-c2e4-447d-a29e-20f329219ea9/bebad29c-c2e4-447d-a29e-20f329219ea9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/bebad29c-c2e4-447d-a29e-20f329219ea9/bebad29c-c2e4-447d-a29e-20f329219ea9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/bebad29c-c2e4-447d-a29e-20f329219ea9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:eb:c2:32:14:62:f4:f7:a2:56:2a:5e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bebad29c-c2e4-447d-a29e-20f329219ea9
        Validity
            Not Before: Feb 20 02:00:32 2026 GMT
            Not After : May 21 01:00:32 2026 GMT
        Subject: CN=37e622e2-eaea-4c76-a2a9-82fe1b563071
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:3b:e5:de:5a:90:64:3b:50:b6:90:cd:03:b9:
                    5a:81:bb:ee:84:fd:b2:67:02:07:83:bb:b0:d6:13:
                    b2:5e:56:8c:19:ba:d1:b3:b6:f0:75:97:36:b0:b3:
                    36:23:d2:b0:ef:23:06:fa:b0:f4:83:fa:da:37:d7:
                    b3:12:62:c4:e1:6f:07:fd:b9:3c:c5:b9:6a:d8:98:
                    92:77:72:ec:e7:d9:54:97:bf:a0:0b:1a:1f:53:f0:
                    09:18:79:8e:e2:5b:1f:e4:25:38:a7:73:17:63:86:
                    6c:2f:69:d9:d8:b2:5b:0e:fb:05:7f:c1:f4:51:8f:
                    38:b5:1b:7b:b3:45:49:f3:45:6b:4e:0c:4e:b0:d2:
                    e1:36:ee:12:1e:3c:c0:b0:7b:13:ee:b4:2d:1a:dc:
                    e2:78:1b:57:e5:23:a0:4b:ea:3c:75:e6:9c:f8:c3:
                    a9:84:80:0a:10:fb:06:3f:47:ee:7e:89:fe:e9:79:
                    a0:5e:b7:77:aa:b0:c1:ec:3e:2e:15:4a:1b:0e:82:
                    99:b0:5e:b0:57:f9:b3:09:f4:38:2d:6e:84:e1:7c:
                    20:08:7f:1f:68:e6:72:4a:d0:19:5b:00:f3:f3:d9:
                    f1:90:0e:b9:f5:c8:8c:a4:ff:b8:a4:30:62:3c:4c:
                    5e:d6:a7:64:82:23:88:38:58:f4:e8:92:e8:87:c9:
                    b1:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:78:3A:25:32:EB:73:0C:BA:2E:F4:DA:AE:BE:98:19:28:ED:E6:5A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/bebad29c-c2e4-447d-a29e-20f329219ea9/37acec46-0de0-3fe4-a751-d81d4059f6a7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/bebad29c-c2e4-447d-a29e-20f329219ea9/bebad29c-c2e4-447d-a29e-20f329219ea9.crl

            X509v3 Authority Key Identifier:
                keyid:07:3C:51:6D:EA:85:18:32:66:CA:85:68:84:47:38:0F:36:B9:52:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/bebad29c-c2e4-447d-a29e-20f329219ea9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.117.18.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7a:63:80:eb:3e:56:58:f0:9f:e6:db:fa:27:53:d8:0a:07:e0:
         d4:06:fc:60:61:e3:87:59:0f:06:bd:fb:17:11:50:98:53:24:
         43:1d:9c:99:d9:f9:f6:30:19:26:58:08:9f:15:92:19:f6:a2:
         9e:a1:2e:d1:b6:94:0b:70:c6:09:2a:36:2b:97:d8:9d:66:58:
         22:3c:da:aa:35:95:de:b5:d1:11:9b:18:b9:6d:ad:d4:9d:cd:
         9c:c5:34:74:5e:24:9a:3c:62:b3:8f:ed:37:05:ce:4b:4b:fa:
         7f:12:36:54:19:21:fe:3a:21:1e:4d:6f:f6:28:d1:6b:14:c1:
         d7:e8:24:38:65:6e:a3:ba:14:0e:2f:09:55:31:5c:a9:da:a6:
         e9:f3:31:cf:6a:d2:62:79:16:b4:d2:0d:59:cc:12:68:40:16:
         b3:d7:13:e6:61:72:9a:c6:53:7b:c7:31:bc:ce:09:a3:fd:59:
         cd:8a:8c:c3:1d:a9:a7:04:e0:6d:6b:3d:1c:b2:a7:67:14:bb:
         4e:14:e8:db:00:83:7b:52:de:a8:16:c1:6c:ea:65:13:ea:d5:
         83:22:ae:e5:e4:ff:03:1a:74:06:3b:2e:49:7a:84:4f:15:1f:
         ba:55:e2:8f:9a:06:9c:dd:a6:00:75:43:1c:18:6c:6a:ef:50:
         bb:11:38:97
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEzrwjIUYvT3olYqXoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYmViYWQyOWMtYzJlNC00NDdkLWEyOWUtMjBmMzI5MjE5
ZWE5MB4XDTI2MDIyMDAyMDAzMloXDTI2MDUyMTAxMDAzMlowLzEtMCsGA1UEAxMk
MzdlNjIyZTItZWFlYS00Yzc2LWEyYTktODJmZTFiNTYzMDcxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyjvl3lqQZDtQtpDNA7lagbvuhP2yZwIHg7uw
1hOyXlaMGbrRs7bwdZc2sLM2I9Kw7yMG+rD0g/raN9ezEmLE4W8H/bk8xblq2JiS
d3Ls59lUl7+gCxofU/AJGHmO4lsf5CU4p3MXY4ZsL2nZ2LJbDvsFf8H0UY84tRt7
s0VJ80VrTgxOsNLhNu4SHjzAsHsT7rQtGtzieBtX5SOgS+o8deac+MOphIAKEPsG
P0fufon+6XmgXrd3qrDB7D4uFUobDoKZsF6wV/mzCfQ4LW6E4XwgCH8faOZyStAZ
WwDz89nxkA659ciMpP+4pDBiPExe1qdkgiOIOFj06JLoh8mx4QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPx4OiUy63MMui702q6+mBko7eZaMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9iZWJh
ZDI5Yy1jMmU0LTQ0N2QtYTI5ZS0yMGYzMjkyMTllYTkvMzdhY2VjNDYtMGRlMC0z
ZmU0LWE3NTEtZDgxZDQwNTlmNmE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYmViYWQyOWMtYzJlNC00NDdkLWEy
OWUtMjBmMzI5MjE5ZWE5L2JlYmFkMjljLWMyZTQtNDQ3ZC1hMjllLTIwZjMyOTIx
OWVhOS5jcmwwHwYDVR0jBBgwFoAUBzxRbeqFGDJmyoVohEc4Dza5UhAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS9iZWJhZDI5Yy1jMmU0LTQ0N2QtYTI5ZS0yMGYz
MjkyMTllYTkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBQnUSMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHpjgOs+Vljwn+bb+idT2AoH4NQG/GBh44dZDwa9+xcRUJhTJEMdnJnZ
+fYwGSZYCJ8Vkhn2op6hLtG2lAtwxgkqNiuX2J1mWCI82qo1ld610RGbGLltrdSd
zZzFNHReJJo8YrOP7TcFzktL+n8SNlQZIf46IR5Nb/Yo0WsUwdfoJDhlbqO6FA4v
CVUxXKnapunzMc9q0mJ5FrTSDVnMEmhAFrPXE+ZhcprGU3vHMbzOCaP9Wc2KjMMd
qacE4G1rPRyyp2cUu04U6NsAg3tS3qgWwWzqZRPq1YMiruXk/wMadAY7Lkl6hE8V
H7pV4o+aBpzdpgB1QxwYbGrvULsROJc=
-----END CERTIFICATE-----
Generated at Mon Mar 2 02:56:33 2026 by rpki-client