Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9eee3662-bee3-410a-9cb1-559a07ce6a9c/c18257f3-6355-317c-9bc9-ff216dcf5bc9.roa
File:                     c18257f3-6355-317c-9bc9-ff216dcf5bc9.roa (raw, json)
Hash identifier:          t8q9CIqETjmjz+HdsVZxbs87wJCVDgL+UTeHsScuuVY=
Subject key identifier:   75:2E:E4:6D:90:F4:0F:89:89:10:82:A8:70:B5:BA:BB:C7:CF:24:78
Certificate issuer:       /CN=9eee3662-bee3-410a-9cb1-559a07ce6a9c
Certificate serial:       010D0C9F4328584F2957D2846915867279F85A00
Authority key identifier: 62:5E:5D:D6:AA:8D:AD:0C:90:3F:B0:31:38:6D:1E:33:51:89:D1:FA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9eee3662-bee3-410a-9cb1-559a07ce6a9c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9eee3662-bee3-410a-9cb1-559a07ce6a9c/c18257f3-6355-317c-9bc9-ff216dcf5bc9.roa
Signing time:             Sun 13 Sep 2026 13:00:11 +0000
ROA not before:           Sun 13 Sep 2026 13:00:11 +0000
ROA not after:            Sat 12 Dec 2026 14:00:11 +0000
asID:                     29789
IP address blocks:        66.254.126.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9eee3662-bee3-410a-9cb1-559a07ce6a9c/9eee3662-bee3-410a-9cb1-559a07ce6a9c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9eee3662-bee3-410a-9cb1-559a07ce6a9c/9eee3662-bee3-410a-9cb1-559a07ce6a9c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9eee3662-bee3-410a-9cb1-559a07ce6a9c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 24 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:29:57:d2:84:69:15:86:72:79:f8:5a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9eee3662-bee3-410a-9cb1-559a07ce6a9c
        Validity
            Not Before: Sep 13 13:00:11 2026 GMT
            Not After : Dec 12 14:00:11 2026 GMT
        Subject: CN=8265b06b-f042-49df-92b2-d3358f914041
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:c8:65:43:2e:b0:3a:16:51:1c:73:46:22:b8:
                    9e:69:7f:7b:16:d9:29:29:ac:8a:ee:38:f7:41:6b:
                    e2:2f:f0:f6:ed:49:25:0f:74:11:f2:e6:86:f6:41:
                    3a:1e:c7:c3:96:d9:9c:21:ee:b7:ef:b5:e7:5d:6a:
                    92:d4:f5:7c:24:01:6c:50:63:52:d5:5d:ab:16:10:
                    96:5c:10:e5:99:40:33:0c:ff:8b:5d:b7:55:dc:8d:
                    16:9e:0c:f2:a1:53:c8:9d:aa:d2:6b:77:78:e0:36:
                    1a:26:30:24:df:bd:50:dc:67:fd:73:b7:ad:d9:d3:
                    50:f5:0f:ab:bd:58:44:ec:68:d6:4f:e9:8b:a1:1b:
                    b8:70:6c:1a:af:7c:41:d1:8b:42:6b:39:26:0c:ad:
                    41:55:3d:42:5c:a2:df:01:4c:e7:df:a8:96:26:e5:
                    67:cd:36:19:c4:a7:90:f9:69:23:f3:f8:fc:a9:42:
                    7b:c3:20:db:a9:4f:00:75:9f:a9:61:79:23:6a:8d:
                    53:ea:43:8f:47:9c:91:d5:79:6c:25:3d:63:8c:2e:
                    44:5c:99:53:e3:ef:02:16:58:dc:e1:51:76:84:15:
                    93:fd:89:b4:f7:38:85:2c:1c:60:e3:5f:83:ea:63:
                    17:1f:b6:67:a1:d4:33:2c:70:7f:f4:24:6c:d6:60:
                    e2:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:2E:E4:6D:90:F4:0F:89:89:10:82:A8:70:B5:BA:BB:C7:CF:24:78
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9eee3662-bee3-410a-9cb1-559a07ce6a9c/c18257f3-6355-317c-9bc9-ff216dcf5bc9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9eee3662-bee3-410a-9cb1-559a07ce6a9c/9eee3662-bee3-410a-9cb1-559a07ce6a9c.crl

            X509v3 Authority Key Identifier:
                keyid:62:5E:5D:D6:AA:8D:AD:0C:90:3F:B0:31:38:6D:1E:33:51:89:D1:FA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9eee3662-bee3-410a-9cb1-559a07ce6a9c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.254.126.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         86:2c:b6:e7:fd:cb:f8:63:0a:21:c3:b9:25:0d:81:9d:f8:0d:
         e4:2c:b0:fe:70:7e:aa:ce:c7:b5:12:cc:7b:99:46:a7:6c:ba:
         5d:3b:9c:98:78:84:b8:54:88:e8:66:06:56:23:4d:c2:9e:b4:
         6c:12:f7:0d:eb:cd:0d:ec:d1:c5:0d:a6:7d:8b:02:0a:61:ff:
         04:7e:32:d3:be:9a:7e:9a:41:23:6b:3b:74:84:a9:c4:3c:8b:
         0e:80:47:df:d3:9d:47:6c:0d:ff:6d:a2:38:87:0e:a8:f9:a8:
         7a:44:89:1c:1b:75:07:0c:94:ca:26:13:13:07:b1:af:bb:8d:
         5d:32:ba:63:82:5a:0c:52:d8:04:f8:43:e4:6d:9b:a8:57:62:
         a5:2f:76:61:5e:78:74:8c:67:d5:ba:8c:35:9b:ea:db:fb:60:
         cd:c2:99:15:b0:c8:77:50:7d:c8:77:a4:4f:50:17:4a:ad:49:
         6f:b1:08:f6:54:c8:48:ce:d7:90:84:1d:a7:6c:b7:c6:08:f0:
         21:95:3d:19:92:ea:eb:4a:32:46:12:44:97:6c:1a:f4:ac:d9:
         f0:79:05:7b:59:ab:67:ab:ad:f0:12:97:3f:a1:2d:8b:f2:a0:
         3e:8a:dc:ec:39:9e:19:09:75:06:41:be:e2:0e:01:7c:7a:62:
         17:12:5d:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 21:21:09 2026 by rpki-client