Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/91ce48d5-00a5-45b2-8bf9-6c52632b7945/c4ac8151-0cdd-3785-aa58-aa9c0bf1cfa3.roa
File:                     c4ac8151-0cdd-3785-aa58-aa9c0bf1cfa3.roa (raw, json)
Hash identifier:          7b7rsKdU7Qh/2yFpMKrYiVbMykdSE4f4wUxfIlQb4gU=
Subject key identifier:   07:0A:F6:F5:2A:56:6D:34:20:4D:43:D4:15:27:0F:B6:89:6D:07:78
Certificate issuer:       /CN=91ce48d5-00a5-45b2-8bf9-6c52632b7945
Certificate serial:       010D0C9F4328584D7E3F3382BF0E8C6ED5C7A100
Authority key identifier: 56:1D:4D:D3:46:B2:AA:51:2F:93:36:F5:8D:8B:7C:D9:2B:11:8E:66
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/91ce48d5-00a5-45b2-8bf9-6c52632b7945.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/91ce48d5-00a5-45b2-8bf9-6c52632b7945/c4ac8151-0cdd-3785-aa58-aa9c0bf1cfa3.roa
Signing time:             Mon 13 Apr 2026 13:20:46 +0000
ROA not before:           Mon 13 Apr 2026 13:20:46 +0000
ROA not after:            Sun 12 Jul 2026 13:20:46 +0000
asID:                     395276
IP address blocks:        66.203.248.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/91ce48d5-00a5-45b2-8bf9-6c52632b7945/91ce48d5-00a5-45b2-8bf9-6c52632b7945.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/91ce48d5-00a5-45b2-8bf9-6c52632b7945/91ce48d5-00a5-45b2-8bf9-6c52632b7945.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/91ce48d5-00a5-45b2-8bf9-6c52632b7945.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:7e:3f:33:82:bf:0e:8c:6e:d5:c7:a1:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91ce48d5-00a5-45b2-8bf9-6c52632b7945
        Validity
            Not Before: Apr 13 13:20:46 2026 GMT
            Not After : Jul 12 13:20:46 2026 GMT
        Subject: CN=343d5494-b2e7-4a69-984b-c25711c941c8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:b3:9e:89:16:fe:d5:85:72:6b:f7:41:4d:22:
                    33:22:2e:6d:3c:24:e7:52:88:ea:0d:65:e1:4f:f6:
                    7b:aa:6e:01:b5:5d:14:4c:ea:bc:24:65:09:72:fa:
                    6d:5e:ed:63:0d:d8:d2:3b:bb:7c:fd:5f:b5:52:33:
                    11:08:16:38:b2:ea:24:17:0a:64:56:70:9b:30:e0:
                    15:fa:58:54:18:86:c5:f9:2e:b7:ad:44:91:36:b5:
                    83:7c:f7:39:b6:f9:53:e8:00:a3:c8:02:45:c4:25:
                    c1:b5:14:9f:73:f1:d2:51:33:0d:83:c8:61:7f:85:
                    2f:42:40:9c:3f:de:8b:c7:05:0e:6e:fb:97:9f:fb:
                    02:0b:23:64:88:85:9b:ba:0f:ba:73:b2:3a:d4:e6:
                    9d:36:db:e7:33:ca:94:7a:cf:19:a9:aa:af:74:55:
                    a6:07:57:ba:66:0b:2a:0b:a0:5b:d6:8c:2a:4a:70:
                    e9:26:06:35:c0:38:3b:09:f5:3a:69:a1:26:05:f9:
                    cd:57:70:87:0a:0d:5d:b5:d6:d7:30:fd:1b:ca:f9:
                    16:c8:e8:dd:4e:2a:7e:0a:92:da:47:8e:e9:de:e6:
                    65:ff:bb:43:67:25:8f:67:0f:30:17:c3:c4:94:e4:
                    f2:72:99:bf:75:3f:8e:74:e8:73:4e:ab:a3:c6:2e:
                    ac:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:0A:F6:F5:2A:56:6D:34:20:4D:43:D4:15:27:0F:B6:89:6D:07:78
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/91ce48d5-00a5-45b2-8bf9-6c52632b7945/c4ac8151-0cdd-3785-aa58-aa9c0bf1cfa3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/91ce48d5-00a5-45b2-8bf9-6c52632b7945/91ce48d5-00a5-45b2-8bf9-6c52632b7945.crl

            X509v3 Authority Key Identifier:
                keyid:56:1D:4D:D3:46:B2:AA:51:2F:93:36:F5:8D:8B:7C:D9:2B:11:8E:66

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/91ce48d5-00a5-45b2-8bf9-6c52632b7945.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.203.248.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         10:da:92:4b:71:47:a3:16:8f:ac:c2:78:5e:33:4a:75:29:77:
         0e:19:6e:0c:50:77:84:d7:2c:cf:50:92:0a:0b:db:79:e5:9d:
         3e:82:1c:5c:fe:9f:33:27:ba:52:68:1c:39:05:84:d4:df:46:
         d9:e0:95:c5:b0:a6:b6:00:3a:fa:c4:f0:50:71:72:f2:fc:5e:
         9e:9d:e9:25:a1:58:1b:43:bd:b0:5e:49:fb:10:0d:06:72:2a:
         fc:38:d6:cb:dc:67:53:12:10:71:2b:1f:32:20:ec:e8:c3:40:
         19:0f:fc:94:46:1a:fd:da:49:b0:c0:16:64:f2:51:67:2a:b3:
         7e:c7:30:ab:97:66:84:15:34:49:de:9e:c7:2e:66:36:4e:a8:
         85:79:e8:3a:95:3e:75:83:12:44:f0:92:e8:71:57:67:72:5e:
         ea:b2:52:55:f3:a5:f9:3d:c7:b7:ce:cc:14:cd:59:68:25:a9:
         98:34:bb:45:bd:8a:46:1a:f4:ad:28:ae:3b:80:1c:01:65:a0:
         e4:2c:0f:6d:6d:8c:64:bb:e6:6d:a0:4f:6e:b5:35:4e:fa:06:
         8c:43:b8:e8:6c:0b:02:23:4a:9a:8d:ec:4c:9c:b0:b3:77:eb:
         12:9f:b3:56:8e:d8:79:49:78:e2:0b:af:4f:30:bc:fd:01:5b:
         31:84:36:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 08:13:31 2026 by rpki-client