Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/00e4a49c-611c-4e83-b76d-40efcd29fa53/83a60dfc-0d06-3932-b354-5d43f888c73d.roa
File:                     83a60dfc-0d06-3932-b354-5d43f888c73d.roa (raw, json)
Hash identifier:          CtPrJbwiCrm363sl1w18VgUUfCeU/7sur8a0+kjuW24=
Subject key identifier:   16:38:95:48:E6:1E:B5:55:5B:F9:82:C6:F4:D1:2F:47:ED:90:6F:1E
Certificate issuer:       /CN=00e4a49c-611c-4e83-b76d-40efcd29fa53
Certificate serial:       010D0C9F4328584D97555F1F24660D751083D100
Authority key identifier: F2:C9:A5:C3:24:56:69:C6:EE:14:90:90:DF:28:F4:58:30:CB:92:26
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/00e4a49c-611c-4e83-b76d-40efcd29fa53.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/00e4a49c-611c-4e83-b76d-40efcd29fa53/83a60dfc-0d06-3932-b354-5d43f888c73d.roa
Signing time:             Wed 22 Apr 2026 13:00:32 +0000
ROA not before:           Wed 22 Apr 2026 13:00:32 +0000
ROA not after:            Tue 21 Jul 2026 13:00:32 +0000
asID:                     22351
IP address blocks:        66.36.195.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/00e4a49c-611c-4e83-b76d-40efcd29fa53/00e4a49c-611c-4e83-b76d-40efcd29fa53.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/00e4a49c-611c-4e83-b76d-40efcd29fa53/00e4a49c-611c-4e83-b76d-40efcd29fa53.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/00e4a49c-611c-4e83-b76d-40efcd29fa53.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:97:55:5f:1f:24:66:0d:75:10:83:d1:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=00e4a49c-611c-4e83-b76d-40efcd29fa53
        Validity
            Not Before: Apr 22 13:00:32 2026 GMT
            Not After : Jul 21 13:00:32 2026 GMT
        Subject: CN=d35613da-d2c6-4e51-9399-eb1ada4df6ef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:71:6a:77:92:db:86:3d:41:9a:61:e2:b2:6d:
                    99:f5:fd:24:66:04:b5:a0:ec:03:1c:2e:73:22:88:
                    a1:99:17:c6:b9:71:16:69:e2:bb:08:f1:44:d2:ef:
                    1f:e6:0a:92:a1:f8:1b:7e:d6:06:ac:05:ce:df:29:
                    9a:d5:82:b2:6b:2e:12:75:fa:38:6d:37:82:f3:cc:
                    08:e0:c6:07:58:e6:c5:69:ae:e6:b4:c9:08:63:b1:
                    38:43:a7:82:0c:d1:7e:55:a8:60:d3:5b:f1:96:cb:
                    45:e1:cb:5f:3e:50:6a:b0:4c:c4:af:bb:d8:9f:7a:
                    a0:9b:63:25:8c:2b:d8:76:06:0a:ad:a8:d4:0b:80:
                    d7:2d:fc:99:e0:44:fd:20:79:ea:5b:fb:0d:70:9c:
                    c9:a1:84:e7:f9:33:1c:82:03:3e:02:6a:5e:de:43:
                    c0:1d:e7:7b:89:3b:27:cd:25:7d:17:46:1c:ce:d4:
                    e0:4d:18:bc:49:0c:06:69:b0:cc:44:e5:05:c5:fd:
                    a9:b1:d6:6a:70:88:16:a0:ef:b7:2b:a1:ce:78:c7:
                    d9:e0:cc:89:7c:de:ee:fe:97:b1:23:58:4d:13:b7:
                    e9:09:39:06:e0:50:e8:ef:67:25:22:d3:b0:3d:e3:
                    f2:de:37:f4:82:fa:32:9b:b7:25:6b:f1:11:7a:90:
                    57:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:38:95:48:E6:1E:B5:55:5B:F9:82:C6:F4:D1:2F:47:ED:90:6F:1E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/00e4a49c-611c-4e83-b76d-40efcd29fa53/83a60dfc-0d06-3932-b354-5d43f888c73d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/00e4a49c-611c-4e83-b76d-40efcd29fa53/00e4a49c-611c-4e83-b76d-40efcd29fa53.crl

            X509v3 Authority Key Identifier:
                keyid:F2:C9:A5:C3:24:56:69:C6:EE:14:90:90:DF:28:F4:58:30:CB:92:26

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/00e4a49c-611c-4e83-b76d-40efcd29fa53.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.36.195.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         48:83:51:68:53:39:aa:e6:35:22:78:06:6e:1e:36:50:4d:d0:
         81:2a:ab:b8:8e:19:e4:f8:4c:b9:f1:eb:1a:36:83:10:e5:fe:
         e1:d4:27:1e:ed:bf:59:da:3c:35:7f:f4:7c:b2:6c:10:fd:2d:
         b0:69:ab:75:4b:7d:d2:d5:e8:de:dc:71:f4:49:68:69:55:9b:
         7e:70:c4:03:6e:3e:21:9d:11:60:aa:4a:28:b6:e5:2b:f9:eb:
         c5:a2:bf:4e:f0:22:47:7f:61:3f:84:69:1b:db:27:8e:af:48:
         1c:ac:20:8f:7b:15:0b:81:03:04:83:60:bc:0a:3e:87:c2:9f:
         a3:a4:63:4c:71:66:94:25:2d:f0:49:89:f6:61:63:3c:97:9d:
         81:f5:f2:cb:32:02:4f:bd:75:90:c5:06:1c:d2:cd:96:bb:9b:
         8c:cf:6b:4e:3f:aa:30:f6:43:64:21:19:fc:3c:0b:ca:46:13:
         8f:d3:c0:cb:54:25:7c:a0:3c:a6:11:35:f3:41:c1:3c:da:e2:
         e7:1c:17:05:7c:0f:07:40:f8:1e:63:32:77:3f:04:7c:74:c7:
         0b:18:f6:44:36:4a:d0:f1:d2:b0:e9:66:a8:68:af:a4:2f:3b:
         e9:f0:5e:b1:8f:16:80:ae:97:7f:f0:fa:18:14:c9:b1:c6:25:
         03:44:48:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:08:56 2026 by rpki-client