Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/be483f2f-cbaa-4c2b-a9e4-8af3c0f86907/8d7929c6-072b-3b3c-8f4f-ad1a026a59ef.roa
File:                     8d7929c6-072b-3b3c-8f4f-ad1a026a59ef.roa (raw, json)
Hash identifier:          k7o2TflZIy/fpsVBj+8FMhVb50Pn+GX2JaQ8+6jyMZk=
Subject key identifier:   EE:FD:AA:8D:6D:50:9A:EB:18:29:AE:E4:BC:8A:A3:F5:BC:7D:3A:62
Certificate issuer:       /CN=be483f2f-cbaa-4c2b-a9e4-8af3c0f86907
Certificate serial:       010D0C9F4328584CCE71F8FB29A00E21983D8C80
Authority key identifier: 4E:6A:B5:94:3B:FD:05:66:C6:1B:3E:96:4C:95:80:1A:48:1D:DE:C1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/be483f2f-cbaa-4c2b-a9e4-8af3c0f86907.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/be483f2f-cbaa-4c2b-a9e4-8af3c0f86907/8d7929c6-072b-3b3c-8f4f-ad1a026a59ef.roa
Signing time:             Mon 09 Feb 2026 14:00:39 +0000
ROA not before:           Mon 09 Feb 2026 14:00:39 +0000
ROA not after:            Sun 10 May 2026 13:00:39 +0000
asID:                     36175
IP address blocks:        66.43.24.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/be483f2f-cbaa-4c2b-a9e4-8af3c0f86907/be483f2f-cbaa-4c2b-a9e4-8af3c0f86907.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/be483f2f-cbaa-4c2b-a9e4-8af3c0f86907/be483f2f-cbaa-4c2b-a9e4-8af3c0f86907.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/be483f2f-cbaa-4c2b-a9e4-8af3c0f86907.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:ce:71:f8:fb:29:a0:0e:21:98:3d:8c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=be483f2f-cbaa-4c2b-a9e4-8af3c0f86907
        Validity
            Not Before: Feb  9 14:00:39 2026 GMT
            Not After : May 10 13:00:39 2026 GMT
        Subject: CN=a03d9eb2-4dea-4a6d-b31e-12f488dd6b25
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:df:d8:f3:fa:4e:8d:3b:4e:65:37:df:ca:0d:
                    b3:ab:a4:36:7e:6c:81:27:52:7f:d4:b5:05:c7:76:
                    6e:89:22:e8:d0:0b:81:56:5c:aa:3d:f2:e4:37:ca:
                    80:95:ae:0a:81:7c:1b:46:e1:17:0d:8d:ba:60:7c:
                    07:cd:fd:0f:b9:7a:35:61:fa:93:96:9d:0a:91:20:
                    e9:a9:88:9a:48:41:e1:14:65:b9:4b:f0:7f:2b:23:
                    b6:cd:fd:35:db:9b:46:f8:4c:2f:c5:7f:4f:13:31:
                    6d:d3:e7:f1:d5:5d:bd:b9:ea:76:08:1f:c7:67:b7:
                    64:d5:43:64:c1:ba:5c:9f:50:c4:9f:ac:71:3d:f9:
                    eb:2e:c5:f3:aa:7e:1a:49:47:2c:d9:28:d2:83:42:
                    93:15:21:35:04:f5:09:3f:43:4b:f6:dc:41:30:e6:
                    81:b6:b2:a3:58:7f:03:ba:b1:c9:b0:e2:e4:68:6d:
                    2a:32:c8:32:f9:c6:f4:33:cb:0f:fb:f7:f1:ae:60:
                    29:83:bc:5e:47:9f:44:02:4d:51:4a:96:bf:fe:00:
                    f7:ed:4e:b2:48:64:6d:64:d4:4e:c9:10:10:ba:34:
                    91:f3:be:11:58:12:58:5f:c8:f7:49:07:5c:5e:5a:
                    5e:4e:06:eb:fc:be:d1:41:80:2c:76:fb:5b:74:80:
                    7c:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:FD:AA:8D:6D:50:9A:EB:18:29:AE:E4:BC:8A:A3:F5:BC:7D:3A:62
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/be483f2f-cbaa-4c2b-a9e4-8af3c0f86907/8d7929c6-072b-3b3c-8f4f-ad1a026a59ef.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/be483f2f-cbaa-4c2b-a9e4-8af3c0f86907/be483f2f-cbaa-4c2b-a9e4-8af3c0f86907.crl

            X509v3 Authority Key Identifier:
                keyid:4E:6A:B5:94:3B:FD:05:66:C6:1B:3E:96:4C:95:80:1A:48:1D:DE:C1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/be483f2f-cbaa-4c2b-a9e4-8af3c0f86907.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.43.24.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         76:41:14:9f:d8:39:31:a6:eb:d6:da:01:9a:96:15:59:00:6d:
         c8:fa:a5:d6:01:2d:19:e0:72:bd:03:da:6b:18:00:fb:71:5d:
         7a:56:b8:60:5e:81:36:6e:e2:b7:87:1f:9c:18:cd:2a:53:5f:
         35:2a:ea:77:fe:af:5d:cf:ed:7c:1c:62:77:22:b1:e9:e9:70:
         e1:80:47:19:70:0b:e8:e3:c6:5b:b8:1c:83:bb:f6:a8:c5:f6:
         fd:76:13:d2:f1:66:10:54:6c:13:98:10:a5:62:b6:fe:a9:6d:
         6a:af:89:5f:15:7e:3c:13:52:78:66:df:67:5c:ad:13:77:03:
         50:67:ab:c8:d6:0e:06:ba:b0:25:75:8b:8f:07:f1:bf:c3:ea:
         21:67:6e:43:6b:99:e1:dd:87:0f:c6:8c:a2:b8:81:bc:aa:51:
         2c:30:fe:9c:6c:68:d7:a8:1a:42:8d:c6:fc:c3:dd:0a:70:69:
         15:e0:e1:9b:39:4a:46:c1:f6:7c:be:bb:8f:f3:b2:e6:97:41:
         01:65:e5:2d:ea:7b:43:26:8a:88:1c:2d:a3:74:31:02:1f:35:
         8a:2c:8d:40:57:ae:2f:94:f8:5b:47:08:24:44:df:da:9a:bd:
         2e:39:ae:e0:a9:b7:ba:26:cd:64:64:eb:3a:0e:9f:d0:ab:ce:
         53:e8:ae:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:16:01 2026 by rpki-client