Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bf8147cb-8b3f-4540-bca2-54d1889c2c38/c0835dea-69af-310b-88d8-d53e14010fd6.roa
File:                     c0835dea-69af-310b-88d8-d53e14010fd6.roa (raw, json)
Hash identifier:          YvYoNlknSiG24PaWOrYW1RDXIp+F7i5xks2wX7ekxD8=
Subject key identifier:   07:C3:B5:D4:67:5A:E4:29:8D:0D:43:29:06:F3:47:B9:99:D4:44:42
Certificate issuer:       /CN=bf8147cb-8b3f-4540-bca2-54d1889c2c38
Certificate serial:       010D0C9F4328584F4277FBAAF098B81E2959EF40
Authority key identifier: CC:83:65:53:A9:A2:26:FA:C4:00:D5:2C:E1:EB:51:1B:77:39:CE:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bf8147cb-8b3f-4540-bca2-54d1889c2c38.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bf8147cb-8b3f-4540-bca2-54d1889c2c38/c0835dea-69af-310b-88d8-d53e14010fd6.roa
Signing time:             Tue 22 Sep 2026 13:00:12 +0000
ROA not before:           Tue 22 Sep 2026 13:00:12 +0000
ROA not after:            Mon 21 Dec 2026 14:00:12 +0000
asID:                     19864
IP address blocks:        66.81.36.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bf8147cb-8b3f-4540-bca2-54d1889c2c38/bf8147cb-8b3f-4540-bca2-54d1889c2c38.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bf8147cb-8b3f-4540-bca2-54d1889c2c38/bf8147cb-8b3f-4540-bca2-54d1889c2c38.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bf8147cb-8b3f-4540-bca2-54d1889c2c38.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 09 Oct 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:42:77:fb:aa:f0:98:b8:1e:29:59:ef:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bf8147cb-8b3f-4540-bca2-54d1889c2c38
        Validity
            Not Before: Sep 22 13:00:12 2026 GMT
            Not After : Dec 21 14:00:12 2026 GMT
        Subject: CN=f4e7391b-e1b9-499b-a4ec-7e5df3d3c9e4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:4d:36:f4:2b:f8:2e:d8:fc:29:fb:2d:a5:80:
                    19:27:ce:9f:a9:b9:05:92:59:f6:18:c7:53:b3:dc:
                    b8:77:f4:a6:06:51:f4:89:ea:ab:3f:d4:ed:56:fd:
                    64:5f:39:a5:3c:31:25:ab:09:ea:4c:8a:e9:e4:7f:
                    ac:e4:94:f8:ac:e9:45:a9:17:83:43:cb:68:c3:18:
                    2c:97:2d:91:2d:91:f1:77:7a:31:d5:d9:3a:f9:a8:
                    19:69:3f:1c:3a:56:40:25:00:01:19:4c:2a:58:1e:
                    62:f7:c1:25:ae:70:93:bc:71:34:50:29:f9:3f:5d:
                    35:de:f7:41:3a:f8:22:79:b8:19:6b:a2:86:d3:e0:
                    38:81:b5:b5:9d:b0:14:bf:a3:22:79:25:0d:40:5f:
                    79:21:a3:d3:05:86:64:ef:3d:f5:a1:8b:67:37:36:
                    b5:ca:3e:a1:4b:4e:6a:27:0a:db:df:11:23:ce:99:
                    73:3b:6a:8c:0c:d9:cd:10:22:1b:4a:09:31:ab:5b:
                    2b:92:e3:3f:03:75:a2:42:66:84:57:bb:3c:d7:d0:
                    a2:bc:02:51:cf:f9:b4:c5:db:60:4a:14:e3:2f:e6:
                    bb:10:19:f1:55:68:68:02:0c:93:37:e2:01:eb:d6:
                    58:ed:d7:15:8d:81:32:3e:67:74:df:94:7f:98:c2:
                    1d:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:C3:B5:D4:67:5A:E4:29:8D:0D:43:29:06:F3:47:B9:99:D4:44:42
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bf8147cb-8b3f-4540-bca2-54d1889c2c38/c0835dea-69af-310b-88d8-d53e14010fd6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bf8147cb-8b3f-4540-bca2-54d1889c2c38/bf8147cb-8b3f-4540-bca2-54d1889c2c38.crl

            X509v3 Authority Key Identifier:
                keyid:CC:83:65:53:A9:A2:26:FA:C4:00:D5:2C:E1:EB:51:1B:77:39:CE:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bf8147cb-8b3f-4540-bca2-54d1889c2c38.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.81.36.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         55:00:ed:ab:68:c7:08:98:14:23:88:cc:88:11:4f:06:94:82:
         0f:98:d0:ea:81:b2:a1:65:b4:7b:34:cf:6e:25:59:e4:30:63:
         e2:b5:c6:bd:8a:6f:bd:34:6a:e8:02:df:70:af:05:54:86:f5:
         e0:e5:eb:03:5b:d4:1e:06:ef:3a:58:dd:a7:a5:dc:ac:a9:7b:
         14:24:17:2e:18:4d:1c:4d:c3:5e:e1:fb:a3:93:4c:15:61:fb:
         d9:c1:e0:32:71:fb:b5:9e:f0:46:c7:8f:c2:c7:4f:69:1f:b6:
         67:ed:c5:3b:a6:8a:e9:f5:3c:4e:1c:75:f0:cd:fb:45:4f:08:
         e0:ba:78:47:e9:3d:c5:34:6b:ef:74:66:8f:87:d3:59:a9:4d:
         1a:fd:9e:18:9c:0d:08:da:7e:a1:ee:0c:77:dd:61:47:84:69:
         08:3c:ef:54:52:bf:c8:54:02:13:96:54:af:11:ee:40:74:8a:
         01:45:6d:c6:23:18:82:1e:49:d8:8f:20:be:39:ce:f6:21:ca:
         f1:a8:50:79:8e:99:3d:5e:51:f0:e7:36:0b:cd:cf:ca:0f:34:
         7c:1e:71:b6:99:5e:20:32:bf:e6:b9:c3:22:59:10:b1:5d:ac:
         4a:dc:9e:05:89:8d:f1:4e:67:f1:43:eb:0a:10:f7:a0:3e:fc:
         cc:65:8d:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 15:43:52 2026 by rpki-client