Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6957121d-8962-482d-982c-d123ff337caa/a6a0a7ba-ff5a-382a-8136-fd7f903bc0c4.roa
File:                     a6a0a7ba-ff5a-382a-8136-fd7f903bc0c4.roa (raw, json)
Hash identifier:          zF8xB9TDxU2W5Jvx+lBt9CiFGpvFY0dD9NlF6RYChyw=
Subject key identifier:   74:44:5C:7B:E1:B9:6C:22:2B:99:8F:70:F4:92:6D:40:59:AA:18:E3
Certificate issuer:       /CN=6957121d-8962-482d-982c-d123ff337caa
Certificate serial:       010D0C9F4328584F4973E698C4B688CE93957F00
Authority key identifier: ED:0E:1A:64:1D:03:68:5E:2B:34:E3:53:24:1E:E2:92:82:E3:E5:6C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6957121d-8962-482d-982c-d123ff337caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6957121d-8962-482d-982c-d123ff337caa/a6a0a7ba-ff5a-382a-8136-fd7f903bc0c4.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     14618
IP address blocks:        66.54.73.0/24 maxlen: 24
                          66.54.74.0/24 maxlen: 24
                          66.54.75.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6957121d-8962-482d-982c-d123ff337caa/6957121d-8962-482d-982c-d123ff337caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6957121d-8962-482d-982c-d123ff337caa/6957121d-8962-482d-982c-d123ff337caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6957121d-8962-482d-982c-d123ff337caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 30 Sep 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:73:e6:98:c4:b6:88:ce:93:95:7f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6957121d-8962-482d-982c-d123ff337caa
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=cad320bd-66ea-468f-ac33-90a9b31ad234
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:e7:48:87:04:bf:60:24:3b:09:3a:b3:dc:dc:
                    1e:e8:a4:ab:42:2d:f3:58:62:d4:c9:eb:6a:f7:d2:
                    f6:ce:f0:e5:b5:5b:48:3f:64:e6:d9:ba:b3:41:9f:
                    7b:30:68:66:04:fe:77:d2:bc:d3:38:2e:07:0b:a9:
                    05:55:92:87:28:4a:10:70:94:18:f2:ab:f4:5d:6b:
                    d8:9a:34:99:0c:26:1b:56:3a:38:e8:d2:47:c8:e8:
                    71:9b:f7:f4:8a:0d:d7:2f:51:df:44:d5:aa:ae:d7:
                    e3:ef:a8:57:e9:c5:71:da:97:47:70:a6:89:70:f3:
                    28:ba:47:16:3e:34:a0:a1:a2:0b:25:8d:3e:f1:e7:
                    7b:61:47:a8:4e:48:d9:19:99:c1:03:de:4a:81:e1:
                    fd:a4:45:86:11:c3:7b:bb:1f:d6:df:6a:1c:48:cb:
                    91:37:ba:2e:d6:cf:f3:81:7f:98:ee:99:2d:f2:bd:
                    ac:a0:7a:a2:9c:95:4a:7a:8f:d5:bf:78:c8:0a:54:
                    38:32:12:b6:52:b0:a2:22:71:85:b6:0b:45:d4:27:
                    b0:46:f3:5c:7d:f2:81:c6:bb:68:46:92:80:d0:d3:
                    a6:83:bc:6d:ba:11:6c:11:df:a1:0b:d1:c2:df:74:
                    ff:21:4a:e6:b4:4a:df:fc:54:e6:23:e1:91:b4:2b:
                    44:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:44:5C:7B:E1:B9:6C:22:2B:99:8F:70:F4:92:6D:40:59:AA:18:E3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6957121d-8962-482d-982c-d123ff337caa/a6a0a7ba-ff5a-382a-8136-fd7f903bc0c4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6957121d-8962-482d-982c-d123ff337caa/6957121d-8962-482d-982c-d123ff337caa.crl

            X509v3 Authority Key Identifier:
                keyid:ED:0E:1A:64:1D:03:68:5E:2B:34:E3:53:24:1E:E2:92:82:E3:E5:6C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6957121d-8962-482d-982c-d123ff337caa.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.54.73.0-66.54.75.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         41:38:f6:0c:9e:e3:2f:2d:4f:cd:17:61:0f:2a:1d:ea:a1:f7:
         1d:5f:92:ca:85:e6:d3:9e:c0:9a:07:78:66:bd:bf:6f:1c:97:
         5a:46:ca:78:06:48:53:48:8a:64:96:1c:fc:d4:64:7e:24:b9:
         06:a0:f3:11:c0:2c:86:ea:09:25:0a:42:b0:f4:bb:76:2b:11:
         56:61:19:58:78:6f:7f:81:59:46:7f:24:34:4b:30:f6:5c:76:
         46:19:f1:1c:cf:e7:03:ae:d8:7a:0e:f5:25:8c:4c:27:5b:31:
         8b:32:8b:1b:0c:3e:1f:94:f6:83:e9:90:b4:be:18:db:88:ef:
         95:9b:58:67:2e:23:9d:db:4a:a4:7a:04:96:c3:21:d7:0c:58:
         a7:dc:34:dc:a2:ba:4d:3f:8a:72:28:27:a7:8e:bf:db:98:ac:
         60:b2:34:2e:57:50:b5:53:a5:84:04:65:25:a1:89:48:6f:0d:
         a7:20:cf:37:3d:9d:c2:f7:a5:bd:aa:df:10:42:f9:59:d9:f2:
         bd:35:12:eb:70:c0:b6:46:d8:38:b2:82:79:91:dd:3b:1b:69:
         8c:bc:b7:cd:6f:1e:68:bc:63:07:56:b5:13:85:5b:ce:e2:5a:
         37:97:a6:f9:ee:54:d9:38:9e:f0:13:36:f4:37:d7:c9:85:22:
         fd:fd:67:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 06:50:45 2026 by rpki-client