Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/35b4b3a4-a195-4325-8f07-9376a8ef2903/6e261569-380e-34de-a0a0-35a19e70cb49.roa
File:                     6e261569-380e-34de-a0a0-35a19e70cb49.roa (raw, json)
Hash identifier:          RG57wUoWEyRhxL8R8YPMJorhO1FOC7IZPgnoY02CMvo=
Subject key identifier:   77:0E:94:F2:49:E8:9F:CA:72:C2:3C:86:42:52:AF:C4:95:C0:22:29
Certificate issuer:       /CN=35b4b3a4-a195-4325-8f07-9376a8ef2903
Certificate serial:       010D0C9F4328584CBF1750CA532C8CA019091700
Authority key identifier: B9:A9:F4:73:94:60:F8:F9:C3:99:A8:3D:01:57:52:82:5F:7B:DC:66
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/35b4b3a4-a195-4325-8f07-9376a8ef2903.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/35b4b3a4-a195-4325-8f07-9376a8ef2903/6e261569-380e-34de-a0a0-35a19e70cb49.roa
Signing time:             Wed 04 Feb 2026 02:00:31 +0000
ROA not before:           Wed 04 Feb 2026 02:00:31 +0000
ROA not after:            Tue 05 May 2026 01:00:31 +0000
asID:                     8075
IP address blocks:        66.94.53.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/35b4b3a4-a195-4325-8f07-9376a8ef2903/35b4b3a4-a195-4325-8f07-9376a8ef2903.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/35b4b3a4-a195-4325-8f07-9376a8ef2903/35b4b3a4-a195-4325-8f07-9376a8ef2903.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/35b4b3a4-a195-4325-8f07-9376a8ef2903.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:bf:17:50:ca:53:2c:8c:a0:19:09:17:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=35b4b3a4-a195-4325-8f07-9376a8ef2903
        Validity
            Not Before: Feb  4 02:00:31 2026 GMT
            Not After : May  5 01:00:31 2026 GMT
        Subject: CN=1af16f6a-083c-4bff-94b1-7131b6ae91fe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:24:43:e3:78:20:df:93:83:c4:04:dd:ac:c7:
                    0e:d0:d2:fa:11:a9:98:db:c9:36:94:d7:f2:5c:83:
                    3d:8a:6b:e2:76:a7:bc:89:be:df:a9:3f:19:74:d6:
                    c5:dc:e6:2c:dd:a0:e0:43:b0:13:81:c2:9c:95:56:
                    89:82:3b:3c:cb:11:d9:10:83:a8:4b:3a:cd:2b:77:
                    f4:0a:4f:fa:02:52:31:59:af:43:4f:a3:6f:d4:06:
                    ce:8e:90:a1:99:91:cb:b7:f8:95:dd:f7:6c:8d:03:
                    85:13:19:d2:9f:9e:cf:8c:07:6a:65:72:41:77:8a:
                    c5:b5:e2:45:0d:f2:47:b6:8a:4d:d1:52:64:47:0b:
                    86:7d:94:43:a7:83:e8:ae:d5:14:40:b3:5f:7d:e3:
                    27:95:ce:01:41:a1:40:63:8e:da:4e:6a:19:52:ba:
                    88:de:54:67:c3:f5:2f:78:c9:2d:d0:8d:58:0a:6e:
                    ed:c3:be:f5:f7:3b:34:40:d5:fe:66:45:04:29:4f:
                    88:8e:58:d0:4d:a2:75:9f:3f:e4:48:23:0a:54:c3:
                    e6:40:ae:c5:65:25:19:f4:83:75:7c:a1:40:d3:3e:
                    8a:89:a1:26:3b:ea:3f:da:70:e1:a5:df:d3:03:82:
                    76:65:58:24:d6:b1:69:e7:71:04:c8:ef:ec:00:a5:
                    30:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:0E:94:F2:49:E8:9F:CA:72:C2:3C:86:42:52:AF:C4:95:C0:22:29
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/35b4b3a4-a195-4325-8f07-9376a8ef2903/6e261569-380e-34de-a0a0-35a19e70cb49.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/35b4b3a4-a195-4325-8f07-9376a8ef2903/35b4b3a4-a195-4325-8f07-9376a8ef2903.crl

            X509v3 Authority Key Identifier:
                keyid:B9:A9:F4:73:94:60:F8:F9:C3:99:A8:3D:01:57:52:82:5F:7B:DC:66

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/35b4b3a4-a195-4325-8f07-9376a8ef2903.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.94.53.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         66:7a:02:3c:0f:ca:fe:36:25:ff:06:57:22:f5:e4:01:90:c8:
         6d:18:f8:c4:67:dd:66:8c:4e:39:88:57:44:bf:74:fa:33:26:
         51:48:75:57:c7:d6:8f:2d:36:fd:94:ac:7f:b6:26:a9:02:d8:
         7e:23:87:8c:df:6b:60:b7:ff:73:dd:06:4a:d0:5a:49:77:b9:
         79:72:80:84:63:4d:fb:f8:20:c6:46:2e:4d:59:d2:cf:dc:48:
         b9:b8:8c:9a:94:00:1c:76:0d:66:5f:aa:24:ad:64:67:b8:85:
         c0:5d:9b:05:27:82:de:33:6c:11:b9:79:0c:36:26:57:df:90:
         78:96:4b:6a:fa:70:94:fc:1b:ad:95:21:25:19:05:48:c0:18:
         5a:3d:66:51:cb:7b:9c:fa:80:f6:3b:be:c7:4d:89:9d:a9:b9:
         fd:9f:59:65:f5:6c:33:44:c6:8e:29:24:77:df:ba:3c:ef:9c:
         e3:a7:d3:66:5e:0a:df:1b:09:0d:82:5f:29:bc:ff:ed:8d:2d:
         1f:f3:ac:2b:f7:0b:79:ff:c6:bd:44:98:29:ea:75:2d:30:86:
         22:5b:fc:bd:62:a0:28:2d:81:d9:35:e6:2f:0f:5a:a1:c1:59:
         b6:6e:6d:f5:58:a1:ae:96:2d:3f:6d:75:2b:6d:42:51:ab:1b:
         7b:5a:f9:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 18:33:41 2026 by rpki-client