Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/58406468-89cd-381d-b1f8-5ffef3cc1aca.roa
File:                     58406468-89cd-381d-b1f8-5ffef3cc1aca.roa (raw, json)
Hash identifier:          DM6Bdn+UR4F5+oyhiONm7oyYBkCmz6QY4vmXWAfKGKs=
Subject key identifier:   74:DA:76:98:3B:BF:29:A1:A3:2C:EF:BB:47:F3:11:74:E0:EC:D3:64
Certificate issuer:       /CN=601de417-7cdc-45d3-8d80-7279489a39e0
Certificate serial:       010D0C9F4328584CFC822344B0BF3EA065D35980
Authority key identifier: BD:6E:8D:C2:3E:B9:DA:1D:07:C2:5B:76:67:C5:CC:10:35:41:EE:89
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/58406468-89cd-381d-b1f8-5ffef3cc1aca.roa
Signing time:             Thu 26 Feb 2026 02:00:32 +0000
ROA not before:           Thu 26 Feb 2026 02:00:32 +0000
ROA not after:            Wed 27 May 2026 01:00:32 +0000
asID:                     63023
IP address blocks:        66.163.117.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/601de417-7cdc-45d3-8d80-7279489a39e0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/601de417-7cdc-45d3-8d80-7279489a39e0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:fc:82:23:44:b0:bf:3e:a0:65:d3:59:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=601de417-7cdc-45d3-8d80-7279489a39e0
        Validity
            Not Before: Feb 26 02:00:32 2026 GMT
            Not After : May 27 01:00:32 2026 GMT
        Subject: CN=d82f0d43-0c7f-48fd-9135-eb79ce067bdb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:55:59:97:df:ff:24:32:55:86:98:f9:bc:b7:
                    e4:a0:51:34:07:3f:d2:8a:23:51:c1:cc:13:a6:cb:
                    a1:d0:2c:52:b3:6a:bf:c4:4a:8f:c5:0c:74:91:ec:
                    f9:a7:76:73:22:93:b2:98:f2:9b:d3:5c:03:52:bf:
                    ab:dc:ac:d0:1a:5d:f4:5f:8a:fe:0e:cc:7a:78:a7:
                    e8:a9:0d:85:91:e5:14:1c:c8:d5:c7:fd:d1:9b:7a:
                    b8:ae:e9:7a:39:ca:35:61:7a:3b:c6:ea:f9:5e:a5:
                    24:c1:c7:9a:6c:73:e3:17:7d:20:59:c3:de:db:3a:
                    a3:ad:f6:6b:de:23:28:cf:9d:93:09:9d:96:66:4a:
                    b3:62:de:f5:6f:c9:2c:58:d5:77:84:09:6a:70:55:
                    d3:85:29:be:0d:9f:f8:79:fa:c4:55:24:82:cf:5f:
                    94:ea:04:d9:7f:40:06:36:92:bc:07:bf:f7:ed:c0:
                    70:ae:b5:07:c9:d0:37:88:9d:03:e6:e0:d2:cd:f5:
                    35:90:07:10:3e:0e:b1:41:24:47:f0:a9:2b:e8:62:
                    a2:e6:a7:72:3d:25:82:e4:f7:61:61:25:de:c5:18:
                    d2:21:a0:1b:24:ac:88:9f:19:8f:3b:6b:0f:35:b7:
                    46:8b:79:02:a6:e9:75:45:1f:98:e6:80:1a:1a:12:
                    9d:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:DA:76:98:3B:BF:29:A1:A3:2C:EF:BB:47:F3:11:74:E0:EC:D3:64
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/58406468-89cd-381d-b1f8-5ffef3cc1aca.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/601de417-7cdc-45d3-8d80-7279489a39e0.crl

            X509v3 Authority Key Identifier:
                keyid:BD:6E:8D:C2:3E:B9:DA:1D:07:C2:5B:76:67:C5:CC:10:35:41:EE:89

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.163.117.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5a:5d:7c:60:78:5b:85:16:a7:8d:64:2f:6e:19:a0:61:83:38:
         33:29:59:64:a9:36:d6:1b:fb:69:08:14:7d:49:99:47:7a:3b:
         01:78:78:fa:de:a2:76:08:06:03:cf:b9:fe:1d:80:19:86:36:
         57:f6:25:19:a5:c0:f8:46:54:47:20:f2:1d:c5:78:d5:40:35:
         2e:87:6a:9c:e3:0e:40:ef:b6:af:94:34:92:89:c0:d1:00:b2:
         41:fc:d7:fd:33:d9:96:4c:dd:ff:53:6f:1e:01:2e:bb:a7:b2:
         18:34:e9:da:38:38:ca:10:cb:f9:50:25:29:a8:22:19:08:46:
         18:68:ad:f9:e2:6e:4f:f2:8b:ff:51:30:88:ca:46:48:b9:ff:
         b4:84:7b:65:c7:11:76:2e:a5:54:9b:97:38:41:63:57:e4:40:
         7f:e0:eb:40:2f:78:4f:23:81:b7:02:5c:6f:88:66:64:53:c8:
         ed:e1:0d:03:c4:0d:12:08:cc:a7:48:c0:d1:d4:bf:54:35:0d:
         34:9d:c4:be:09:58:88:97:a4:5a:24:83:c5:8e:cf:f1:d0:b9:
         3b:b1:8b:5a:ab:db:1e:4e:a4:0b:53:63:66:57:e4:e9:ef:d6:
         88:ee:0f:8d:e3:9a:8c:64:ea:af:93:28:8f:5f:12:48:44:17:
         cb:bd:de:96
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEz8giNEsL8+oGXTWYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjAxZGU0MTctN2NkYy00NWQzLThkODAtNzI3OTQ4OWEz
OWUwMB4XDTI2MDIyNjAyMDAzMloXDTI2MDUyNzAxMDAzMlowLzEtMCsGA1UEAxMk
ZDgyZjBkNDMtMGM3Zi00OGZkLTkxMzUtZWI3OWNlMDY3YmRiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiFVZl9//JDJVhpj5vLfkoFE0Bz/SiiNRwcwT
psuh0CxSs2q/xEqPxQx0kez5p3ZzIpOymPKb01wDUr+r3KzQGl30X4r+Dsx6eKfo
qQ2FkeUUHMjVx/3Rm3q4rul6Oco1YXo7xur5XqUkwceabHPjF30gWcPe2zqjrfZr
3iMoz52TCZ2WZkqzYt71b8ksWNV3hAlqcFXThSm+DZ/4efrEVSSCz1+U6gTZf0AG
NpK8B7/37cBwrrUHydA3iJ0D5uDSzfU1kAcQPg6xQSRH8Kkr6GKi5qdyPSWC5Pdh
YSXexRjSIaAbJKyInxmPO2sPNbdGi3kCpul1RR+Y5oAaGhKdzwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFHTadpg7vymhoyzvu0fzEXTg7NNkMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS82MDFk
ZTQxNy03Y2RjLTQ1ZDMtOGQ4MC03Mjc5NDg5YTM5ZTAvNTg0MDY0NjgtODljZC0z
ODFkLWIxZjgtNWZmZWYzY2MxYWNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNjAxZGU0MTctN2NkYy00NWQzLThk
ODAtNzI3OTQ4OWEzOWUwLzYwMWRlNDE3LTdjZGMtNDVkMy04ZDgwLTcyNzk0ODlh
MzllMC5jcmwwHwYDVR0jBBgwFoAUvW6Nwj652h0Hwlt2Z8XMEDVB7okwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS82MDFkZTQxNy03Y2RjLTQ1ZDMtOGQ4MC03Mjc5
NDg5YTM5ZTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQqN1MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFpdfGB4W4UWp41kL24ZoGGDODMpWWSpNtYb+2kIFH1JmUd6OwF4ePre
onYIBgPPuf4dgBmGNlf2JRmlwPhGVEcg8h3FeNVANS6HapzjDkDvtq+UNJKJwNEA
skH81/0z2ZZM3f9Tbx4BLrunshg06do4OMoQy/lQJSmoIhkIRhhorfnibk/yi/9R
MIjKRki5/7SEe2XHEXYupVSblzhBY1fkQH/g60AveE8jgbcCXG+IZmRTyO3hDQPE
DRIIzKdIwNHUv1Q1DTSdxL4JWIiXpFokg8WOz/HQuTuxi1qr2x5OpAtTY2ZX5Onv
1ojuD43jmoxk6q+TKI9fEkhEF8u93pY=
-----END CERTIFICATE-----
Generated at Mon Mar 2 01:11:34 2026 by rpki-client