Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c99fde48-586e-4055-af69-8a7e56152de9/ac8d8dd6-c5a9-3540-8bcf-e50c9ee3e07c.roa
File:                     ac8d8dd6-c5a9-3540-8bcf-e50c9ee3e07c.roa (raw, json)
Hash identifier:          ByP7ntGKU5EsoKGFSo8FXdd9w6Jh5bDsTd7NDud8L2I=
Subject key identifier:   05:7B:DC:0E:DA:D7:32:1D:11:C4:AA:9A:79:B9:69:F3:32:21:0D:B8
Certificate issuer:       /CN=c99fde48-586e-4055-af69-8a7e56152de9
Certificate serial:       010D0C9F4328584EA795A12FF28DA9DD54FB3C80
Authority key identifier: AE:AD:EF:91:C3:99:E1:29:0D:BF:84:9E:76:9B:36:6C:74:7F:21:47
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c99fde48-586e-4055-af69-8a7e56152de9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c99fde48-586e-4055-af69-8a7e56152de9/ac8d8dd6-c5a9-3540-8bcf-e50c9ee3e07c.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     30447
IP address blocks:        66.175.0.0/18 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c99fde48-586e-4055-af69-8a7e56152de9/c99fde48-586e-4055-af69-8a7e56152de9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c99fde48-586e-4055-af69-8a7e56152de9/c99fde48-586e-4055-af69-8a7e56152de9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c99fde48-586e-4055-af69-8a7e56152de9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Sep 2026 09:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:95:a1:2f:f2:8d:a9:dd:54:fb:3c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c99fde48-586e-4055-af69-8a7e56152de9
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=b44e5dcd-9dd6-4f73-a2fb-d2f94959f95b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:59:df:4e:2b:4c:d6:b5:89:11:5b:12:88:23:
                    d4:38:be:5d:af:83:3e:ef:55:da:f6:df:93:20:3f:
                    dd:b9:6b:a7:b0:eb:14:3e:37:4a:ba:65:fd:19:20:
                    28:42:42:a6:b9:87:44:fb:f7:e7:e9:94:09:df:c5:
                    a4:6e:bf:85:26:be:07:b7:95:51:31:b6:f6:40:3c:
                    8f:67:fa:44:25:fc:f6:a4:31:60:cf:da:e3:c7:e5:
                    13:5e:7d:99:fd:fb:60:a3:0b:9e:21:01:1a:aa:08:
                    35:ba:eb:c2:45:2c:c6:1c:fb:0a:25:6f:2f:63:e5:
                    9d:00:47:68:08:c4:a9:60:29:a6:29:1b:5e:7a:98:
                    c6:bc:80:6a:11:a6:26:77:f2:f0:dd:45:14:d6:8f:
                    3d:ef:51:c9:31:a4:44:42:10:c1:d0:b5:53:98:50:
                    53:bc:ed:46:8a:00:ab:9b:0e:b8:0b:85:ef:c7:e1:
                    6f:58:6a:29:da:77:f6:78:f0:77:ed:21:00:5c:66:
                    a7:2e:6d:28:3d:5b:77:40:f5:d5:61:f6:fe:40:de:
                    d8:60:70:26:b4:c1:74:eb:61:f3:c7:9a:67:59:f0:
                    97:4f:21:85:c0:f6:f7:b9:3b:ef:a6:e2:37:79:67:
                    80:b3:c7:c4:05:6d:62:1e:38:a3:c7:01:60:69:b9:
                    64:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:7B:DC:0E:DA:D7:32:1D:11:C4:AA:9A:79:B9:69:F3:32:21:0D:B8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c99fde48-586e-4055-af69-8a7e56152de9/ac8d8dd6-c5a9-3540-8bcf-e50c9ee3e07c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c99fde48-586e-4055-af69-8a7e56152de9/c99fde48-586e-4055-af69-8a7e56152de9.crl

            X509v3 Authority Key Identifier:
                keyid:AE:AD:EF:91:C3:99:E1:29:0D:BF:84:9E:76:9B:36:6C:74:7F:21:47

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c99fde48-586e-4055-af69-8a7e56152de9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.175.0.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         80:87:cc:5d:9d:30:e0:83:e8:66:2e:0a:a9:6d:1e:ee:e3:1c:
         3e:4d:cc:b5:1d:47:5f:09:b1:99:9c:e4:01:ec:9f:6f:ab:dc:
         b9:d0:b2:0b:24:66:e2:b3:4e:d8:2f:17:b4:d1:a5:8d:c2:95:
         cb:cd:4f:10:0a:5c:bb:d1:c3:b1:6b:5b:91:ba:b5:31:29:fb:
         73:d0:93:b8:33:7e:00:fb:28:4f:63:80:eb:6a:a3:23:da:d7:
         6a:9b:57:cf:c4:89:f1:49:99:a0:1f:55:a9:a1:8c:e7:a3:31:
         5f:98:af:b5:ba:e9:14:1a:ac:14:fa:ef:bd:bd:db:98:54:f6:
         67:a9:1a:d0:4e:b3:ce:fe:97:c1:b9:e8:69:f6:ac:53:0d:b6:
         a5:a6:1b:b9:86:34:40:d5:86:b4:47:ac:df:f6:02:98:fa:53:
         ee:d4:f0:c4:3d:f4:bd:11:ea:a9:36:ac:d6:bb:8a:b2:ee:14:
         df:41:d0:1e:53:3f:fd:72:19:b4:32:75:d9:3f:b9:ae:40:e4:
         b2:5d:ef:b4:c7:45:e4:3c:7f:75:49:61:18:48:66:3b:f7:85:
         f9:3a:57:f7:61:f8:02:54:d6:fd:dd:c1:01:cc:20:91:02:d1:
         a1:0f:5a:99:c3:76:7b:77:76:55:5d:27:cc:6d:64:76:66:e9:
         95:c6:dc:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 03:18:55 2026 by rpki-client