Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/677759b4-a247-47ea-badb-bb809bc80a31/8c5f9f51-8962-362d-874a-85ed24b7ab32.roa
File:                     8c5f9f51-8962-362d-874a-85ed24b7ab32.roa (raw, json)
Hash identifier:          f5N0npqULPI46zzyTLl/gQPrcFldjrB/Z9izEhmNco0=
Subject key identifier:   0E:09:86:93:57:29:81:B0:C4:F1:FE:9F:60:C8:E2:39:F5:DC:64:B3
Certificate issuer:       /CN=677759b4-a247-47ea-badb-bb809bc80a31
Certificate serial:       010D0C9F4328584D7E87926A22FD522581BF9860
Authority key identifier: 49:80:EC:5F:15:BA:62:65:1C:20:86:3E:26:3C:53:9A:71:C9:3A:2C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/677759b4-a247-47ea-badb-bb809bc80a31.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/677759b4-a247-47ea-badb-bb809bc80a31/8c5f9f51-8962-362d-874a-85ed24b7ab32.roa
Signing time:             Mon 13 Apr 2026 15:46:35 +0000
ROA not before:           Mon 13 Apr 2026 15:46:35 +0000
ROA not after:            Sun 12 Jul 2026 15:46:35 +0000
asID:                     14955
IP address blocks:        66.35.106.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/677759b4-a247-47ea-badb-bb809bc80a31/677759b4-a247-47ea-badb-bb809bc80a31.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/677759b4-a247-47ea-badb-bb809bc80a31/677759b4-a247-47ea-badb-bb809bc80a31.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/677759b4-a247-47ea-badb-bb809bc80a31.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 20 Apr 2026 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:7e:87:92:6a:22:fd:52:25:81:bf:98:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=677759b4-a247-47ea-badb-bb809bc80a31
        Validity
            Not Before: Apr 13 15:46:35 2026 GMT
            Not After : Jul 12 15:46:35 2026 GMT
        Subject: CN=b5dfaf10-959e-4bbd-b4ed-c48667f3ba42
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:2a:a8:b0:1f:47:d6:74:fc:9b:82:4e:08:2f:
                    aa:3e:5b:63:b0:0b:f7:7e:d0:2e:a1:aa:c5:7a:77:
                    7a:34:ef:1f:6e:54:dd:48:47:57:b6:f2:34:d4:3e:
                    e4:91:d9:4e:e1:9e:14:b4:d7:39:ef:0c:46:a5:44:
                    2f:8f:fc:fd:c6:c5:7b:f3:18:10:92:52:f1:33:60:
                    5a:96:f3:b4:46:02:e5:ca:2e:c9:4e:67:0d:8e:38:
                    c8:2f:2c:50:ae:bd:fd:78:8e:a9:6a:05:1e:32:c2:
                    b2:0d:12:13:db:99:50:32:a5:21:0b:ef:4b:0d:2f:
                    97:78:7c:87:30:77:2c:f9:4d:19:2e:b1:7e:6b:2c:
                    7d:2f:b5:f7:ed:ed:49:e9:a0:9b:07:a5:ff:85:f8:
                    33:94:43:48:df:3a:f1:dc:d4:8c:0d:f9:91:47:ad:
                    a0:e8:42:ad:c3:b1:0b:13:b1:9f:a8:87:ab:fe:d5:
                    a3:be:69:65:4a:15:19:03:a0:af:9f:6d:45:07:ae:
                    68:12:cf:ef:d2:f6:af:b2:4b:8a:a9:b4:d0:46:72:
                    0b:aa:a9:1d:31:05:10:91:9c:5f:7d:ce:81:da:bf:
                    ba:49:5b:a8:cb:5a:42:28:09:c1:39:a0:4b:c1:d1:
                    7d:09:75:c9:7f:ab:25:66:5d:e8:1d:0c:b1:09:ec:
                    2e:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:09:86:93:57:29:81:B0:C4:F1:FE:9F:60:C8:E2:39:F5:DC:64:B3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/677759b4-a247-47ea-badb-bb809bc80a31/8c5f9f51-8962-362d-874a-85ed24b7ab32.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/677759b4-a247-47ea-badb-bb809bc80a31/677759b4-a247-47ea-badb-bb809bc80a31.crl

            X509v3 Authority Key Identifier:
                keyid:49:80:EC:5F:15:BA:62:65:1C:20:86:3E:26:3C:53:9A:71:C9:3A:2C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/677759b4-a247-47ea-badb-bb809bc80a31.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.35.106.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         58:c8:5f:91:c7:12:62:58:66:db:b7:a8:c3:69:49:52:bf:2c:
         63:74:ed:0b:d6:ab:4b:f7:81:b3:c7:3f:88:48:b3:53:6d:c2:
         20:48:50:bb:ed:f8:45:bc:29:3e:93:5d:1b:00:61:22:d5:3a:
         f3:b8:9e:df:71:1a:25:ca:fc:a1:45:21:f8:25:1f:a0:b3:d6:
         05:dc:ca:13:06:4f:73:3e:4a:ca:e0:ca:96:de:36:7d:d0:0c:
         01:9c:42:7f:59:25:13:fb:51:e9:1f:2f:14:7d:5f:4f:75:65:
         a4:c3:e7:98:9b:56:e3:d1:a9:fc:96:3d:3d:78:03:51:45:1b:
         92:44:25:b7:6e:71:24:b6:61:cd:a0:15:be:62:d8:2d:bd:3b:
         f8:a9:31:11:bf:b0:c1:ec:36:a4:44:67:a7:96:10:a7:63:5d:
         14:46:a3:c9:0d:a9:02:17:34:db:73:7a:66:ef:3a:12:c3:93:
         ae:76:92:c4:79:f6:7d:1d:98:7b:5e:37:2b:6b:3e:af:88:80:
         da:85:b2:38:89:77:75:0f:37:d2:43:05:3f:70:77:eb:16:d5:
         b6:46:ba:40:7e:5e:3e:67:39:5d:f1:47:64:c7:5a:ac:f6:15:
         b1:8f:46:5f:23:a4:91:f7:50:5b:f3:72:c5:2a:f8:ba:95:73:
         39:f0:13:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 11:25:02 2026 by rpki-client