Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b6f28d10-5739-4e40-a446-935c60d79169/6bf31b20-b8e4-30f1-be6c-95dceb745687.roa
File:                     6bf31b20-b8e4-30f1-be6c-95dceb745687.roa (raw, json)
Hash identifier:          85W0gzkADkrSFgtKbZGnXaad7VpqwYnOw7VNqfNJzaE=
Subject key identifier:   75:55:7A:98:D2:EC:F7:24:28:66:EE:87:F9:8F:32:85:87:E6:CE:C8
Certificate issuer:       /CN=b6f28d10-5739-4e40-a446-935c60d79169
Certificate serial:       010D0C9F4328584EF87CE0D88C44E218401306D4
Authority key identifier: E8:EA:CF:14:D1:FD:74:AB:31:C2:B1:A6:F0:7E:AF:A6:44:84:08:14
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b6f28d10-5739-4e40-a446-935c60d79169.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b6f28d10-5739-4e40-a446-935c60d79169/6bf31b20-b8e4-30f1-be6c-95dceb745687.roa
Signing time:             Thu 27 Aug 2026 01:00:12 +0000
ROA not before:           Thu 27 Aug 2026 01:00:12 +0000
ROA not after:            Wed 25 Nov 2026 02:00:12 +0000
asID:                     1403
IP address blocks:        66.158.145.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b6f28d10-5739-4e40-a446-935c60d79169/b6f28d10-5739-4e40-a446-935c60d79169.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b6f28d10-5739-4e40-a446-935c60d79169/b6f28d10-5739-4e40-a446-935c60d79169.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b6f28d10-5739-4e40-a446-935c60d79169.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 21 Sep 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:f8:7c:e0:d8:8c:44:e2:18:40:13:06:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b6f28d10-5739-4e40-a446-935c60d79169
        Validity
            Not Before: Aug 27 01:00:12 2026 GMT
            Not After : Nov 25 02:00:12 2026 GMT
        Subject: CN=1b50d35e-3d18-4e98-929b-7eca09d99deb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:c3:7b:35:65:48:99:39:f3:64:86:ad:fa:b8:
                    0b:ef:96:ba:36:42:73:52:5e:8c:93:0f:45:e4:17:
                    36:3b:53:af:90:df:28:69:b6:2b:2e:df:cc:11:75:
                    c1:55:4b:71:18:90:32:ec:c4:fb:b2:83:a5:b6:d2:
                    40:2c:20:dc:c4:9d:23:95:ed:3c:e9:27:d1:87:b8:
                    6a:16:d7:01:8b:bd:0a:82:5d:2f:02:a0:53:58:19:
                    a6:fb:12:fc:b2:38:21:80:29:97:cc:10:20:79:41:
                    aa:02:70:36:07:9c:30:d0:4c:61:95:d0:ae:2f:c0:
                    50:5c:23:9c:fe:41:72:51:e7:d3:5e:35:e5:97:74:
                    3b:70:a5:21:02:6b:11:25:e3:55:b4:4a:04:95:7c:
                    fd:4e:9b:15:f6:fc:9e:1c:f7:fb:39:ff:70:e5:2c:
                    b0:d4:f9:90:0d:44:25:9f:8c:41:f9:26:35:ab:9b:
                    64:d4:cd:1e:87:85:95:b4:65:0d:ff:1d:46:d1:33:
                    8e:3f:17:f9:a0:75:99:a8:23:3a:1d:5d:1d:36:27:
                    7c:65:21:49:ec:12:ee:c8:b1:fb:10:22:ff:7d:3c:
                    65:58:b6:0a:2b:c9:5b:8e:d4:41:be:93:ce:da:c7:
                    3d:b9:8c:4b:95:aa:6d:39:92:c7:21:17:12:e0:b4:
                    94:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:55:7A:98:D2:EC:F7:24:28:66:EE:87:F9:8F:32:85:87:E6:CE:C8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b6f28d10-5739-4e40-a446-935c60d79169/6bf31b20-b8e4-30f1-be6c-95dceb745687.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b6f28d10-5739-4e40-a446-935c60d79169/b6f28d10-5739-4e40-a446-935c60d79169.crl

            X509v3 Authority Key Identifier:
                keyid:E8:EA:CF:14:D1:FD:74:AB:31:C2:B1:A6:F0:7E:AF:A6:44:84:08:14

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b6f28d10-5739-4e40-a446-935c60d79169.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.158.145.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         05:9c:c6:4b:e0:00:e5:9d:50:24:6e:f5:b5:20:4e:6f:55:5c:
         77:fe:0d:1f:31:a6:70:f9:0c:3e:d8:9d:a2:ef:27:0f:f7:10:
         3e:e6:b9:2e:44:7c:36:42:6f:eb:b4:8d:e3:79:63:89:c8:f3:
         4f:00:41:e0:65:b8:95:2a:66:e9:5e:bc:4a:22:1c:22:d5:87:
         83:d1:e6:34:e0:99:8a:f8:fc:24:04:d3:9e:80:9a:d8:51:bd:
         12:f2:8b:25:23:f4:8a:7d:ec:04:d3:82:4d:86:55:27:20:4f:
         c8:01:49:84:78:65:ee:b3:cd:56:cb:d7:8d:11:d6:0f:21:43:
         fd:b9:93:fb:0e:0e:66:75:1d:71:a0:68:ae:3b:17:35:09:a5:
         ff:f8:e7:a1:49:24:75:7f:bf:43:6b:f5:e9:18:8a:2f:ae:5f:
         3b:ae:00:86:81:a4:17:dc:da:d3:b4:2d:7a:f8:21:90:c1:db:
         31:a6:a8:74:87:52:73:8e:e3:a0:d0:1f:12:4e:23:11:0d:b3:
         4a:69:b6:cb:48:94:c2:a7:cb:ff:a4:35:cb:3b:1d:0a:e1:0e:
         d6:ec:e5:4d:8e:4c:d6:0c:84:29:98:32:5a:43:4d:7a:24:f2:
         a3:10:94:bf:09:9f:f9:a3:8f:18:82:c0:5c:e3:67:07:21:22:
         4b:44:fa:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 12:57:32 2026 by rpki-client