Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9eee3662-bee3-410a-9cb1-559a07ce6a9c/c66f8dab-484a-3cbe-8820-e423a3150bdf.roa
File:                     c66f8dab-484a-3cbe-8820-e423a3150bdf.roa (raw, json)
Hash identifier:          8A+W+uyVAkdCO1r6QkSdfGk0XUzVAIE7OtJNRdOfRJE=
Subject key identifier:   53:77:0E:80:2A:6B:E2:5F:09:C5:10:56:3D:93:E8:25:98:8D:E7:81
Certificate issuer:       /CN=9eee3662-bee3-410a-9cb1-559a07ce6a9c
Certificate serial:       010D0C9F4328584CC1E1CAF71490384CFA2572C0
Authority key identifier: 62:5E:5D:D6:AA:8D:AD:0C:90:3F:B0:31:38:6D:1E:33:51:89:D1:FA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9eee3662-bee3-410a-9cb1-559a07ce6a9c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9eee3662-bee3-410a-9cb1-559a07ce6a9c/c66f8dab-484a-3cbe-8820-e423a3150bdf.roa
Signing time:             Thu 05 Feb 2026 02:00:31 +0000
ROA not before:           Thu 05 Feb 2026 02:00:31 +0000
ROA not after:            Wed 06 May 2026 01:00:31 +0000
asID:                     29789
IP address blocks:        66.254.114.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9eee3662-bee3-410a-9cb1-559a07ce6a9c/9eee3662-bee3-410a-9cb1-559a07ce6a9c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9eee3662-bee3-410a-9cb1-559a07ce6a9c/9eee3662-bee3-410a-9cb1-559a07ce6a9c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9eee3662-bee3-410a-9cb1-559a07ce6a9c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:c1:e1:ca:f7:14:90:38:4c:fa:25:72:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9eee3662-bee3-410a-9cb1-559a07ce6a9c
        Validity
            Not Before: Feb  5 02:00:31 2026 GMT
            Not After : May  6 01:00:31 2026 GMT
        Subject: CN=48e3204e-13ab-41c5-bd93-a55b2fba3ed1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:14:3c:2c:63:c8:fe:89:ce:c7:99:e3:e6:67:
                    9c:67:4e:93:f9:3e:17:d5:b0:58:bd:d4:33:1c:b3:
                    ae:5f:8b:eb:05:4e:c5:35:a9:33:45:b3:72:88:81:
                    af:26:8f:63:dd:b9:3a:71:ee:ab:3a:a2:a7:b0:f1:
                    95:f0:2a:ce:40:c6:57:7a:72:55:fc:1a:0d:fa:c0:
                    66:66:8d:aa:33:4f:a1:28:3f:68:10:6c:b5:3b:53:
                    b2:8b:e0:31:95:ad:58:72:f9:b8:ce:ae:d8:01:c2:
                    76:64:eb:3b:78:d0:39:04:05:7e:1c:7c:24:c0:5f:
                    ba:c5:5f:ab:c0:87:d7:40:66:c1:55:f0:fb:d3:bd:
                    e2:17:49:82:70:69:6f:88:ab:0d:d7:55:32:79:03:
                    9f:ad:d0:00:cf:77:ca:90:28:75:ae:e1:c8:1a:58:
                    40:57:44:ae:e0:30:00:ee:af:b3:cf:fe:ec:bb:28:
                    ba:69:c0:36:f3:cc:17:b7:db:f0:da:7d:1b:74:c9:
                    84:67:e9:77:8b:c6:49:8c:45:64:dc:f4:2d:9e:1a:
                    29:74:54:5e:34:b9:24:82:b5:71:cd:95:14:e1:c3:
                    8a:65:40:7c:8d:60:dc:8d:20:25:12:85:44:36:2d:
                    e6:ec:2a:8c:db:c5:93:0a:33:07:cf:a8:db:74:ba:
                    7f:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:77:0E:80:2A:6B:E2:5F:09:C5:10:56:3D:93:E8:25:98:8D:E7:81
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9eee3662-bee3-410a-9cb1-559a07ce6a9c/c66f8dab-484a-3cbe-8820-e423a3150bdf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9eee3662-bee3-410a-9cb1-559a07ce6a9c/9eee3662-bee3-410a-9cb1-559a07ce6a9c.crl

            X509v3 Authority Key Identifier:
                keyid:62:5E:5D:D6:AA:8D:AD:0C:90:3F:B0:31:38:6D:1E:33:51:89:D1:FA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9eee3662-bee3-410a-9cb1-559a07ce6a9c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.254.114.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         22:8e:42:84:1b:be:b3:47:58:a7:ec:e7:b9:20:de:6c:1c:03:
         ec:07:d1:6e:f8:fc:5a:4c:ea:27:d2:6e:20:34:c5:f1:3b:fe:
         45:da:33:36:ee:b1:82:d5:cb:f1:c3:72:2f:ca:4f:6a:ec:50:
         4d:ed:3d:ca:78:fc:59:cb:83:c8:b8:85:8d:c6:59:59:38:53:
         b0:42:fa:44:7c:8a:30:0b:a8:e6:52:af:f2:6a:b7:39:4b:9d:
         49:89:4e:79:a2:6a:80:59:e6:93:c2:a8:ed:f7:57:46:f1:8b:
         4c:82:61:97:32:79:db:82:e2:ea:14:c5:a0:44:75:5f:d5:fe:
         be:ae:f6:b4:07:aa:be:dc:1a:01:1c:e3:13:66:4e:f6:7b:2c:
         76:d4:97:71:0d:26:7d:0d:98:1d:82:b3:4a:fc:7a:eb:dd:7e:
         13:32:4c:f4:81:d6:de:ce:d2:c9:b8:d5:ec:f4:27:9a:91:f2:
         52:e9:60:ad:03:fa:8b:2a:8d:fd:ca:9d:ae:a3:6c:1f:77:5a:
         03:c3:48:a5:5b:7e:81:71:20:b6:4b:1c:83:70:2d:c6:f4:e8:
         39:44:4e:b7:1c:80:07:2e:47:67:78:a7:30:88:df:cd:1e:6f:
         b5:5f:74:3b:f7:a7:f5:15:4a:2c:d0:2d:a7:b4:4f:04:fa:37:
         36:43:52:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 14:22:19 2026 by rpki-client