Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/dbee42cb-b293-3f48-9381-d385d82b8b59.roa
File:                     dbee42cb-b293-3f48-9381-d385d82b8b59.roa (raw, json)
Hash identifier:          07MvKvIAbEHUManIlq5imnXl8+hF12v5QiCmzQUzc/I=
Subject key identifier:   BD:72:D2:E1:EE:6A:8F:B4:A2:51:98:71:4E:65:19:AA:E0:0A:4D:D4
Certificate issuer:       /CN=da370214-1d61-48bf-84a0-a60096ccaae7
Certificate serial:       010D0C9F4328584D0217A47CF673559451B4F500
Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/dbee42cb-b293-3f48-9381-d385d82b8b59.roa
Signing time:             Sat 28 Feb 2026 02:00:32 +0000
ROA not before:           Sat 28 Feb 2026 02:00:32 +0000
ROA not after:            Fri 29 May 2026 01:00:32 +0000
asID:                     6079
IP address blocks:        66.227.96.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:02:17:a4:7c:f6:73:55:94:51:b4:f5:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7
        Validity
            Not Before: Feb 28 02:00:32 2026 GMT
            Not After : May 29 01:00:32 2026 GMT
        Subject: CN=d1ef485e-ff3a-4a75-8f40-06976a1b3618
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:dd:c7:fe:f3:07:2d:11:cb:dd:d7:96:93:8c:
                    d5:76:55:90:de:c4:2e:af:06:7d:3b:90:53:0b:87:
                    71:ad:92:bb:68:d8:af:bc:49:a9:a4:e4:8d:d6:90:
                    7c:3e:23:19:2d:73:69:ed:35:d0:d5:e2:f0:4b:84:
                    ca:3e:ef:5d:20:e0:b7:9c:e4:48:72:c6:2f:f6:3f:
                    02:d8:ea:c8:37:b4:07:d7:9c:60:ad:5a:6f:f8:09:
                    47:d4:ab:58:6e:19:55:f9:34:3c:92:40:e4:ae:cb:
                    68:01:12:1c:46:7d:46:d3:9c:9d:e7:bd:78:38:34:
                    70:4d:a0:90:f5:f8:fe:a1:6d:63:5a:28:de:53:45:
                    49:b3:ff:63:bc:db:39:f1:7d:45:6f:63:c6:16:7b:
                    5c:dd:6c:28:5b:47:2c:ad:f1:fe:cc:ad:87:41:b4:
                    9d:de:5a:40:5d:70:1e:4f:cd:7c:95:c6:12:9f:1b:
                    db:57:5f:47:52:ba:41:51:45:f3:8e:3b:67:07:39:
                    b3:3f:ab:00:a9:e0:50:b3:08:66:77:ea:89:ac:b3:
                    a5:ab:7f:6f:bc:d0:bf:77:00:c0:1c:65:b7:3c:ab:
                    fb:d5:bc:7d:40:53:a1:40:21:34:4b:76:a3:ca:5e:
                    78:24:41:84:9b:45:22:74:2f:ae:b4:74:19:ef:76:
                    a7:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:72:D2:E1:EE:6A:8F:B4:A2:51:98:71:4E:65:19:AA:E0:0A:4D:D4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/dbee42cb-b293-3f48-9381-d385d82b8b59.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl

            X509v3 Authority Key Identifier:
                keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.227.96.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c1:f8:fa:15:39:b1:00:73:86:66:f2:85:f8:e8:2c:f5:b4:26:
         f6:25:77:5f:17:24:75:df:07:d7:49:54:d6:84:48:45:d9:5a:
         b8:20:b6:f4:35:f8:ae:61:16:d6:92:36:e0:2f:3e:d2:6a:1c:
         01:1b:41:b0:ab:a5:d9:7f:8a:ed:2b:b6:6f:88:ad:ae:ed:af:
         d3:6b:63:c7:ed:1a:3d:7f:6b:96:72:78:3a:d0:3b:9a:c9:97:
         f5:cc:37:0e:b8:63:6a:bd:c9:42:02:50:f5:11:65:45:04:a9:
         f3:78:c8:2b:74:d2:34:5e:11:84:4b:2a:5a:f4:35:a6:e4:ed:
         c5:af:c9:71:25:c7:4f:bd:44:93:51:72:fc:1d:78:c3:a0:46:
         23:27:08:a6:7c:36:14:89:60:9d:a2:2b:fc:30:9a:3b:73:41:
         42:3b:ce:b8:da:2a:f8:f2:79:38:29:d3:d1:6c:36:7a:7f:8b:
         62:01:aa:0f:2f:c8:0d:71:06:81:91:4b:41:89:48:96:7b:c9:
         b6:ef:9d:f2:0d:8d:b2:10:b3:71:9a:04:7c:88:96:fd:d0:d8:
         8a:90:64:fe:1d:fe:02:95:7f:b8:4b:ab:8a:4a:e1:6c:96:43:
         f6:6c:4d:85:6c:c5:d1:62:c6:85:a8:6e:c8:3e:5e:28:3d:e2:
         89:23:91:60
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0CF6R89nNVlFG09QAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh
YWU3MB4XDTI2MDIyODAyMDAzMloXDTI2MDUyOTAxMDAzMlowLzEtMCsGA1UEAxMk
ZDFlZjQ4NWUtZmYzYS00YTc1LThmNDAtMDY5NzZhMWIzNjE4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAid3H/vMHLRHL3deWk4zVdlWQ3sQurwZ9O5BT
C4dxrZK7aNivvEmppOSN1pB8PiMZLXNp7TXQ1eLwS4TKPu9dIOC3nORIcsYv9j8C
2OrIN7QH15xgrVpv+AlH1KtYbhlV+TQ8kkDkrstoARIcRn1G05yd5714ODRwTaCQ
9fj+oW1jWijeU0VJs/9jvNs58X1Fb2PGFntc3WwoW0csrfH+zK2HQbSd3lpAXXAe
T818lcYSnxvbV19HUrpBUUXzjjtnBzmzP6sAqeBQswhmd+qJrLOlq39vvNC/dwDA
HGW3PKv71bx9QFOhQCE0S3ajyl54JEGEm0UidC+utHQZ73anWQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFL1y0uHuao+0olGYcU5lGargCk3UMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3
MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvZGJlZTQyY2ItYjI5My0z
ZjQ4LTkzODEtZDM4NWQ4MmI4YjU5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x
Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0
YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj
YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh
Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw
OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCQuNgMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAMH4+hU5sQBzhmbyhfjoLPW0JvYld18XJHXfB9dJVNaESEXZWrggtvQ1
+K5hFtaSNuAvPtJqHAEbQbCrpdl/iu0rtm+Ira7tr9NrY8ftGj1/a5ZyeDrQO5rJ
l/XMNw64Y2q9yUICUPURZUUEqfN4yCt00jReEYRLKlr0Nabk7cWvyXElx0+9RJNR
cvwdeMOgRiMnCKZ8NhSJYJ2iK/wwmjtzQUI7zrjaKvjyeTgp09FsNnp/i2IBqg8v
yA1xBoGRS0GJSJZ7ybbvnfINjbIQs3GaBHyIlv3Q2IqQZP4d/gKVf7hLq4pK4WyW
Q/ZsTYVsxdFixoWobsg+Xig94okjkWA=
-----END CERTIFICATE-----
Generated at Mon Mar 2 14:07:27 2026 by rpki-client