Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/935c8d67-cbcb-3dba-8591-086e8785ac02.roa
File:                     935c8d67-cbcb-3dba-8591-086e8785ac02.roa (raw, json)
Hash identifier:          a/vbntOW5RwvNzwMb34lGrBHb5ny2HLFHnyX5ANEoPI=
Subject key identifier:   D1:43:7D:F2:F7:AD:B2:67:93:1D:68:AA:81:1C:2A:F6:F2:21:78:D2
Certificate issuer:       /CN=601de417-7cdc-45d3-8d80-7279489a39e0
Certificate serial:       010D0C9F4328584CFC8224BCDF54AEE2A3E8F5A0
Authority key identifier: BD:6E:8D:C2:3E:B9:DA:1D:07:C2:5B:76:67:C5:CC:10:35:41:EE:89
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/935c8d67-cbcb-3dba-8591-086e8785ac02.roa
Signing time:             Thu 26 Feb 2026 02:00:32 +0000
ROA not before:           Thu 26 Feb 2026 02:00:32 +0000
ROA not after:            Wed 27 May 2026 01:00:32 +0000
asID:                     63023
IP address blocks:        66.163.125.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/601de417-7cdc-45d3-8d80-7279489a39e0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/601de417-7cdc-45d3-8d80-7279489a39e0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:fc:82:24:bc:df:54:ae:e2:a3:e8:f5:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=601de417-7cdc-45d3-8d80-7279489a39e0
        Validity
            Not Before: Feb 26 02:00:32 2026 GMT
            Not After : May 27 01:00:32 2026 GMT
        Subject: CN=d4819724-04b8-4868-be16-2cb1c2701dcd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:bc:3c:3d:14:5d:00:24:a0:80:3a:2f:1e:d2:
                    f8:8a:2b:32:2e:5f:b9:60:b2:c5:07:0f:6d:62:1a:
                    fa:cc:b5:d6:b2:fa:a4:6c:ce:f1:0a:ed:f3:53:cb:
                    8d:5a:10:57:c0:2b:58:87:88:d7:62:60:ac:36:ad:
                    14:f0:36:1d:cc:b2:69:54:3c:a8:95:44:d9:52:f1:
                    a8:f9:1a:95:31:d4:25:64:be:a8:40:e2:08:75:02:
                    54:18:7f:b6:d6:72:57:b1:dc:85:1f:8f:98:27:c3:
                    65:d0:b8:91:1a:b4:d0:b4:82:b2:b0:1f:ef:fc:f4:
                    e4:dd:e2:a2:84:81:62:24:d4:0e:31:bf:c5:b3:6c:
                    a0:5b:b2:ed:d3:aa:02:ce:82:9d:b5:f8:d2:d8:1f:
                    2a:59:06:60:e1:81:da:f9:99:b2:1d:64:d9:a9:73:
                    ee:69:c7:e2:26:fc:65:e3:be:7b:31:24:b3:d4:08:
                    f2:1c:fe:e6:4a:c2:11:17:a9:3d:fc:2d:c0:92:e9:
                    b7:c2:e7:9a:c1:39:b6:8b:a0:ac:06:9e:7f:80:80:
                    8c:0d:77:48:b0:44:38:a8:c7:8f:b4:8d:82:d5:dc:
                    be:4a:87:57:0c:7c:ed:1d:ae:a3:90:80:24:21:82:
                    cc:45:32:29:12:3f:2c:4d:ae:34:b7:c0:24:65:12:
                    b1:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:43:7D:F2:F7:AD:B2:67:93:1D:68:AA:81:1C:2A:F6:F2:21:78:D2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/935c8d67-cbcb-3dba-8591-086e8785ac02.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/601de417-7cdc-45d3-8d80-7279489a39e0.crl

            X509v3 Authority Key Identifier:
                keyid:BD:6E:8D:C2:3E:B9:DA:1D:07:C2:5B:76:67:C5:CC:10:35:41:EE:89

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.163.125.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4d:32:67:c8:c1:f7:a8:4b:08:a0:3d:34:ee:b6:cb:8e:98:1f:
         f6:bf:00:e6:c3:14:a8:4a:4e:85:5d:76:3c:6f:5e:0b:e4:85:
         34:ed:7a:cb:5a:d9:b5:a1:e8:be:15:3a:f4:d7:86:f7:7c:d3:
         38:9a:7e:98:25:7f:a4:a3:db:23:7b:28:25:03:00:0a:54:ab:
         50:fb:14:df:06:ff:93:ad:79:35:1c:8d:96:c8:6f:70:62:8b:
         16:b1:c7:ad:dc:0b:c9:bf:b9:27:cf:6b:d2:35:22:22:c0:8f:
         fa:8f:13:b7:19:55:08:29:b1:ac:f6:79:f1:80:bb:84:b8:7c:
         84:f3:77:52:aa:82:31:88:10:a6:5f:2b:b6:fc:b3:65:42:13:
         01:da:ab:a9:e6:5d:b0:8d:fd:d5:c7:bf:87:dc:35:26:d2:86:
         e8:e7:8c:93:1f:fe:7b:53:47:e7:41:0e:be:75:d0:5e:86:6b:
         03:6a:80:04:38:af:67:ce:fc:f8:6d:39:2f:03:f6:a9:41:81:
         ee:bb:c5:f8:1d:1a:3f:c8:5e:9c:5c:17:3f:9d:82:bb:fa:5d:
         b6:ac:8f:c4:dd:04:2c:da:df:06:80:29:91:0f:f6:d3:30:a3:
         eb:f7:1a:56:f8:14:a3:4a:04:7b:65:23:c0:4f:a6:fc:58:67:
         58:4e:60:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:37:59 2026 by rpki-client