Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e0f3775f-7a6b-4b92-b5df-82d81562b08e/44e09daa-552d-3cf2-ad0a-50de27465ac6.roa
File:                     44e09daa-552d-3cf2-ad0a-50de27465ac6.roa (raw, json)
Hash identifier:          I8JA1RMk+5Q19D52t9uxZ5hojbKnmAU/o2EanrXw2xs=
Subject key identifier:   60:6C:75:43:5E:F4:EF:4B:7E:CB:CA:A6:89:CE:98:E1:88:F5:A5:7C
Certificate issuer:       /CN=e0f3775f-7a6b-4b92-b5df-82d81562b08e
Certificate serial:       010D0C9F4328584F46A7D99194049CB4417B4680
Authority key identifier: 09:4B:57:92:E3:15:87:9E:56:A8:65:09:B9:67:DD:30:71:7A:17:59
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e0f3775f-7a6b-4b92-b5df-82d81562b08e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e0f3775f-7a6b-4b92-b5df-82d81562b08e/44e09daa-552d-3cf2-ad0a-50de27465ac6.roa
Signing time:             Thu 24 Sep 2026 01:00:12 +0000
ROA not before:           Thu 24 Sep 2026 01:00:12 +0000
ROA not after:            Wed 23 Dec 2026 02:00:12 +0000
asID:                     198949
IP address blocks:        66.96.128.0/18 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e0f3775f-7a6b-4b92-b5df-82d81562b08e/e0f3775f-7a6b-4b92-b5df-82d81562b08e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e0f3775f-7a6b-4b92-b5df-82d81562b08e/e0f3775f-7a6b-4b92-b5df-82d81562b08e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e0f3775f-7a6b-4b92-b5df-82d81562b08e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 26 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:46:a7:d9:91:94:04:9c:b4:41:7b:46:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e0f3775f-7a6b-4b92-b5df-82d81562b08e
        Validity
            Not Before: Sep 24 01:00:12 2026 GMT
            Not After : Dec 23 02:00:12 2026 GMT
        Subject: CN=c9466eb9-d7f7-47e0-a2a0-b67a32497f67
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:12:59:e5:0a:4a:8b:1e:f5:ad:1e:b0:0f:86:
                    44:10:08:3c:8e:20:a4:bc:02:ac:fa:46:61:1a:23:
                    d5:9a:cf:c7:65:d5:12:31:e2:18:9f:15:38:08:0a:
                    57:f6:7d:5e:8f:ba:2e:39:24:cb:40:85:a1:4f:c2:
                    59:53:5a:6b:b6:94:a7:96:47:b5:66:8e:e0:67:b7:
                    0f:93:18:cd:e4:d8:ed:98:04:d3:e3:e8:ec:b2:39:
                    06:ab:db:38:e9:89:12:bd:83:17:91:f4:62:90:23:
                    01:e8:59:71:34:78:47:34:81:3c:38:7d:cf:49:99:
                    87:43:b9:9b:67:c2:3a:a6:b6:7f:ef:d3:b1:44:3f:
                    0b:2f:a6:ae:7c:ff:c9:01:73:4e:3e:56:a3:b3:11:
                    00:74:66:46:c6:f4:1b:d6:fe:6d:18:19:bd:0d:d1:
                    ed:b4:80:bd:5c:28:49:15:70:0d:0e:13:f1:13:a7:
                    7d:aa:f1:20:d5:9f:ac:3d:e4:b4:6a:5f:ec:24:d7:
                    84:38:f4:f6:a5:dc:ab:2b:b4:33:d7:0c:ee:8f:58:
                    7e:99:ca:a9:7b:c7:c2:c6:0a:4c:7e:32:ee:6e:c5:
                    02:4f:2f:9e:83:24:9b:2c:0c:77:b1:0b:89:30:a8:
                    dc:65:7a:5d:df:6f:22:57:c1:d0:d5:ab:b7:73:d7:
                    a1:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:6C:75:43:5E:F4:EF:4B:7E:CB:CA:A6:89:CE:98:E1:88:F5:A5:7C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e0f3775f-7a6b-4b92-b5df-82d81562b08e/44e09daa-552d-3cf2-ad0a-50de27465ac6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e0f3775f-7a6b-4b92-b5df-82d81562b08e/e0f3775f-7a6b-4b92-b5df-82d81562b08e.crl

            X509v3 Authority Key Identifier:
                keyid:09:4B:57:92:E3:15:87:9E:56:A8:65:09:B9:67:DD:30:71:7A:17:59

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e0f3775f-7a6b-4b92-b5df-82d81562b08e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.96.128.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         46:25:22:86:ce:89:e8:5a:18:cc:a1:59:e8:4a:fd:d5:67:84:
         59:8e:54:b1:ee:fe:9d:0c:c0:2b:15:e6:49:48:eb:26:37:1b:
         9e:37:9c:67:a5:f9:bb:20:f0:8d:3d:13:ed:e1:f4:99:79:76:
         01:39:60:5d:f4:94:a8:ee:5a:d4:81:f3:88:17:33:e7:e0:6c:
         aa:97:31:c7:a4:2a:bb:6d:ce:8d:82:8e:86:70:78:97:af:6a:
         83:76:19:fd:12:47:5f:93:31:b8:57:8a:f8:75:97:33:81:41:
         56:d5:f4:0e:52:32:53:98:27:b7:9a:a0:96:54:5e:bf:78:1d:
         d6:e6:ca:16:52:7c:db:a8:3f:00:5c:ad:47:b6:77:c1:8b:6c:
         7c:19:47:40:64:e9:ee:77:c8:61:33:d2:97:c2:32:af:1a:5b:
         db:2e:ad:55:46:7d:09:4f:85:c2:b5:f2:b7:7b:45:29:d2:a8:
         65:4e:63:9b:24:82:57:d0:65:d8:0c:28:cf:cb:da:a9:85:e5:
         ce:de:df:a1:ba:2a:db:3c:7e:20:18:ff:24:96:c9:f5:e1:85:
         e4:a3:87:fd:05:e6:f6:b3:43:24:5e:98:84:0d:b0:73:93:d7:
         22:84:12:5c:c5:08:dd:08:ff:1f:9a:1c:61:e0:44:2b:52:33:
         37:86:12:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 09:56:26 2026 by rpki-client