Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/4d5de1d3-a084-3890-8cd7-86a465b55fe3.roa
File:                     4d5de1d3-a084-3890-8cd7-86a465b55fe3.roa (raw, json)
Hash identifier:          KX87AIO0D/moM2Kh4aQURslANWTsGFkmBcADs9+y3oM=
Subject key identifier:   01:B0:B1:A0:49:F5:A5:25:63:2C:45:BC:8B:87:F0:09:DD:59:93:0E
Certificate issuer:       /CN=da370214-1d61-48bf-84a0-a60096ccaae7
Certificate serial:       010D0C9F4328584D7E35AD4464C9B23AC8FB0380
Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/4d5de1d3-a084-3890-8cd7-86a465b55fe3.roa
Signing time:             Mon 13 Apr 2026 13:01:35 +0000
ROA not before:           Mon 13 Apr 2026 13:01:35 +0000
ROA not after:            Sun 12 Jul 2026 13:01:35 +0000
asID:                     153671
IP address blocks:        66.253.121.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:7e:35:ad:44:64:c9:b2:3a:c8:fb:03:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7
        Validity
            Not Before: Apr 13 13:01:35 2026 GMT
            Not After : Jul 12 13:01:35 2026 GMT
        Subject: CN=ec2f0b54-28ce-4d97-b0b3-11725b4ec54b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:34:3f:6a:9d:a6:2c:a3:b1:8c:c6:b4:9f:dd:
                    60:4b:64:49:60:7f:4b:e7:ee:fa:13:66:35:e3:0d:
                    5a:10:3b:e0:95:fd:95:9d:95:70:ed:63:a3:d2:9a:
                    ec:e7:57:80:3c:e6:a9:8b:7e:1f:f7:bc:00:21:8d:
                    33:9b:1d:88:a0:a7:a7:2f:38:69:28:76:f3:df:53:
                    a7:4e:4b:8b:66:6f:21:26:03:cc:27:66:5d:fb:30:
                    0a:b4:dd:51:f7:48:ab:dd:07:05:b7:e0:fd:ef:8e:
                    65:d1:69:89:94:d8:b7:37:99:89:12:57:6f:2c:fc:
                    32:31:b0:24:68:ec:ba:a1:bb:8a:76:cf:0b:9e:13:
                    e8:50:3b:bf:4e:78:52:ba:6a:ea:b1:48:a5:f5:cd:
                    42:da:a2:ea:91:08:f3:f4:3b:ef:92:e7:45:b7:de:
                    0d:d5:3c:53:3a:78:3d:e2:92:5d:dc:87:4d:2e:bb:
                    df:87:48:4f:36:c3:b2:45:72:5f:93:4c:2d:0b:be:
                    47:78:7c:ee:f3:27:fa:08:9b:7d:10:c2:d5:ae:a4:
                    6d:4b:7a:09:38:28:97:0a:18:e9:67:d4:d6:61:fe:
                    4e:9f:d9:36:ec:78:e7:c2:4d:48:32:07:2e:4c:d8:
                    1d:4c:3a:c7:cf:e8:1b:66:a8:e5:47:dd:95:f9:15:
                    8a:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:B0:B1:A0:49:F5:A5:25:63:2C:45:BC:8B:87:F0:09:DD:59:93:0E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/4d5de1d3-a084-3890-8cd7-86a465b55fe3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl

            X509v3 Authority Key Identifier:
                keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.253.121.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         bc:0b:4a:af:f8:bc:ee:ab:8d:06:b8:51:df:9a:05:57:67:bf:
         d5:20:df:68:b6:a9:26:76:a4:07:69:57:e6:44:7a:78:22:c5:
         50:da:13:2c:98:ab:7f:02:e9:cd:5d:6a:19:d2:e7:04:87:50:
         79:9f:4c:bf:96:ab:99:dc:a5:c1:86:52:b2:9a:09:53:26:bc:
         8f:f7:48:fb:c9:4c:5c:28:91:2f:24:bc:fd:c4:2c:2e:67:c2:
         e5:7e:a5:2c:ea:0b:0e:b4:76:33:d9:0b:d2:85:42:ea:8c:55:
         c6:b9:29:ba:47:8c:c5:f3:6a:41:dd:ff:3d:06:ab:dd:0e:a0:
         d8:68:6e:fe:18:f5:18:59:b2:1d:02:88:0a:61:e2:df:e9:70:
         cf:fc:00:7d:cb:c2:a1:2a:0a:23:f7:10:e9:12:38:5a:c6:d6:
         db:37:dc:f0:21:b5:b8:ea:1b:7f:de:e9:68:1e:c4:d8:fc:7e:
         26:54:a9:9b:c4:a4:86:11:f7:0d:e5:77:cb:91:36:7f:a4:b9:
         d9:40:53:1b:e9:d1:7c:03:89:c7:e0:eb:28:3b:b2:f9:95:13:
         c7:d5:fb:ce:65:81:3f:fa:fb:c6:9e:cf:50:27:62:64:af:55:
         9c:a4:a8:02:8f:81:9f:92:c9:d8:37:60:3b:9a:44:46:c6:e0:
         8f:66:29:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 17:20:12 2026 by rpki-client