Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d2fd9126-b2ee-4caf-bbe5-3387bc901c15/f3510160-200f-3fa3-b03e-dda98d50f761.roa
File:                     f3510160-200f-3fa3-b03e-dda98d50f761.roa (raw, json)
Hash identifier:          FCcbDOFgRurOM03azzowDzmHs6c3a+9HycBjP74R89o=
Subject key identifier:   D5:86:53:C4:AB:1A:43:1A:1F:45:7F:99:DA:A7:0D:1E:5B:7C:7A:04
Certificate issuer:       /CN=d2fd9126-b2ee-4caf-bbe5-3387bc901c15
Certificate serial:       010D0C9F4328584D67DFFCEF210DC1B27D68B700
Authority key identifier: D8:C8:1A:E7:4B:D6:96:34:5E:04:AC:C6:5E:28:99:2C:A2:8F:2D:1E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d2fd9126-b2ee-4caf-bbe5-3387bc901c15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d2fd9126-b2ee-4caf-bbe5-3387bc901c15/f3510160-200f-3fa3-b03e-dda98d50f761.roa
Signing time:             Sun 05 Apr 2026 13:00:31 +0000
ROA not before:           Sun 05 Apr 2026 13:00:31 +0000
ROA not after:            Sat 04 Jul 2026 13:00:31 +0000
asID:                     22779
IP address blocks:        148.66.39.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d2fd9126-b2ee-4caf-bbe5-3387bc901c15/d2fd9126-b2ee-4caf-bbe5-3387bc901c15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d2fd9126-b2ee-4caf-bbe5-3387bc901c15/d2fd9126-b2ee-4caf-bbe5-3387bc901c15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d2fd9126-b2ee-4caf-bbe5-3387bc901c15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:67:df:fc:ef:21:0d:c1:b2:7d:68:b7:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d2fd9126-b2ee-4caf-bbe5-3387bc901c15
        Validity
            Not Before: Apr  5 13:00:31 2026 GMT
            Not After : Jul  4 13:00:31 2026 GMT
        Subject: CN=28aaeefb-0aa6-4516-925f-52bcce411e43
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:9b:78:3b:1b:bd:e2:10:a4:ef:a4:f6:b9:ff:
                    a2:37:4a:5a:a5:de:1c:a4:8b:a4:2a:3e:42:cd:e6:
                    45:42:67:71:3a:d9:a5:00:28:81:8c:1b:89:a6:ae:
                    69:e1:30:19:e0:b4:74:f0:f2:7f:d3:e7:31:34:20:
                    d8:46:d2:61:d5:7c:c4:1c:17:27:13:32:42:b0:25:
                    6c:b7:88:2e:44:4b:07:e1:5e:b4:87:1a:c2:fe:be:
                    87:4e:7a:a7:ef:cf:28:0d:2c:7a:5b:0a:ae:57:81:
                    cf:cc:a3:0f:83:84:e4:bb:06:19:36:e4:c5:e8:65:
                    85:06:ae:03:aa:da:4c:5d:e8:45:b5:72:df:08:1e:
                    b9:25:95:82:e9:74:a4:3a:40:72:31:f4:af:40:d6:
                    99:de:95:97:70:0a:fe:33:b4:11:08:45:a4:18:79:
                    53:be:d6:d5:9d:bb:02:54:66:93:96:a0:4c:ad:d2:
                    ae:8b:09:e9:ab:ae:8b:44:c6:14:85:3c:cb:2b:09:
                    0b:86:5c:1d:13:ba:3a:d2:df:d7:91:3c:10:46:44:
                    a5:ed:c8:93:55:be:be:35:8a:c9:db:21:00:5e:c8:
                    af:33:c0:a6:53:93:42:74:f9:f4:65:fc:65:e6:1f:
                    b8:97:56:80:9c:e8:3d:c5:57:9f:48:8b:e4:91:f5:
                    3d:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:86:53:C4:AB:1A:43:1A:1F:45:7F:99:DA:A7:0D:1E:5B:7C:7A:04
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d2fd9126-b2ee-4caf-bbe5-3387bc901c15/f3510160-200f-3fa3-b03e-dda98d50f761.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d2fd9126-b2ee-4caf-bbe5-3387bc901c15/d2fd9126-b2ee-4caf-bbe5-3387bc901c15.crl

            X509v3 Authority Key Identifier:
                keyid:D8:C8:1A:E7:4B:D6:96:34:5E:04:AC:C6:5E:28:99:2C:A2:8F:2D:1E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d2fd9126-b2ee-4caf-bbe5-3387bc901c15.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  148.66.39.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         82:27:99:47:8a:c0:a3:c5:3a:6b:44:9d:f3:ab:a8:3d:a3:07:
         69:9b:1f:c3:e7:ab:36:b4:39:cf:d4:17:15:4f:30:e2:7d:be:
         5e:13:c9:47:08:03:92:5f:5e:cb:91:87:1f:1e:2a:09:91:ae:
         f3:24:17:a8:76:69:90:9c:8d:d0:de:40:4f:f6:0b:8c:12:c3:
         27:41:47:2a:90:49:be:b1:62:52:d5:0e:2b:40:82:e8:df:27:
         1e:43:72:aa:e7:16:0f:8e:8d:7f:6f:22:6e:65:e6:51:71:c9:
         8a:ab:88:9a:19:ab:8e:a6:f2:e2:51:76:26:ab:c5:1e:33:9e:
         07:b0:eb:5c:f8:cb:39:ad:11:b8:3f:58:44:c4:55:2e:61:65:
         71:de:93:ef:10:f8:47:9d:71:46:b8:01:b7:72:f5:36:86:1f:
         ff:67:9d:c4:ca:26:2f:41:89:e9:d6:42:20:af:0b:e8:fc:1d:
         e2:f3:9b:82:26:64:58:9c:9c:01:b2:29:05:8e:6b:a0:19:8c:
         b3:55:bb:4a:61:89:68:1b:bf:c5:11:5a:06:f1:f7:4a:81:cf:
         f0:db:2e:61:a5:e7:09:81:e0:f2:f0:79:af:6a:bc:9c:10:d4:
         2d:75:1a:58:8a:60:e4:b2:b0:a1:0c:e4:93:b5:c3:13:9a:a9:
         cd:c3:0e:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 03:58:39 2026 by rpki-client