Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a2d75f1-8f4b-49d3-9661-209643086151/2bd2aa2b-386d-3371-9575-5cff32c94aa5.roa
File:                     2bd2aa2b-386d-3371-9575-5cff32c94aa5.roa (raw, json)
Hash identifier:          58cJwBq8MKKTMXoWFmXPaD8V/LeRD/392W//c81TvY8=
Subject key identifier:   69:74:D6:BA:AF:D0:A3:75:29:BD:1A:CB:1A:77:15:50:46:33:A8:6D
Certificate issuer:       /CN=0a2d75f1-8f4b-49d3-9661-209643086151
Certificate serial:       010D0C9F4328584F4975558918352BD7910AD760
Authority key identifier: 0D:B3:3C:FC:9E:40:5D:1E:D0:4A:EE:B3:FA:F1:A8:B0:17:78:4C:7E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a2d75f1-8f4b-49d3-9661-209643086151.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a2d75f1-8f4b-49d3-9661-209643086151/2bd2aa2b-386d-3371-9575-5cff32c94aa5.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     397606
IP address blocks:        66.118.49.0/24 maxlen: 24
                          130.51.152.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a2d75f1-8f4b-49d3-9661-209643086151/0a2d75f1-8f4b-49d3-9661-209643086151.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a2d75f1-8f4b-49d3-9661-209643086151/0a2d75f1-8f4b-49d3-9661-209643086151.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a2d75f1-8f4b-49d3-9661-209643086151.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 08 Oct 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:75:55:89:18:35:2b:d7:91:0a:d7:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0a2d75f1-8f4b-49d3-9661-209643086151
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=fafc6f60-68e8-4c3f-9f87-77e80c5446fb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:59:02:4f:65:26:4e:6c:79:c2:ea:a1:66:1b:
                    03:6d:3e:d1:3a:68:75:ad:1e:4e:67:5e:6f:10:fa:
                    f1:a7:69:52:4a:fa:f9:0f:e0:11:3e:5e:84:71:f5:
                    b0:fa:f0:e1:51:54:66:97:6a:92:d2:e0:f8:0b:d7:
                    54:c9:d5:59:0c:03:51:dd:f2:f9:30:a9:9f:3c:7e:
                    27:0f:ad:3e:eb:9a:4d:9c:1b:8f:fc:21:96:89:c8:
                    a2:4a:c9:30:64:ff:bd:9b:a4:bc:d6:bf:01:2a:b3:
                    67:ed:c4:3c:1a:2c:e1:5f:e8:c4:3d:f5:41:a1:26:
                    93:28:14:20:72:e0:6c:3c:70:88:73:6c:4e:1b:5c:
                    4a:cb:8e:d5:b6:ee:d5:eb:5d:90:ae:91:83:db:31:
                    56:7f:a0:23:67:81:74:3a:ae:9e:47:b6:2e:0d:97:
                    22:91:9f:6c:dc:85:c1:aa:f6:d6:f5:c0:0c:76:c3:
                    f4:2c:f7:55:ea:59:c7:64:33:d2:c3:c5:f7:2b:4f:
                    29:67:87:81:f5:00:0d:d2:aa:fc:02:6a:42:cb:55:
                    ff:5f:22:fa:54:1e:c3:dd:c8:25:b9:02:18:48:70:
                    e2:9d:d7:99:02:76:bb:58:c1:5b:6e:8c:1e:90:d4:
                    f6:69:51:13:9a:15:b9:93:26:b8:c1:c9:ad:59:b2:
                    cc:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:74:D6:BA:AF:D0:A3:75:29:BD:1A:CB:1A:77:15:50:46:33:A8:6D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a2d75f1-8f4b-49d3-9661-209643086151/2bd2aa2b-386d-3371-9575-5cff32c94aa5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a2d75f1-8f4b-49d3-9661-209643086151/0a2d75f1-8f4b-49d3-9661-209643086151.crl

            X509v3 Authority Key Identifier:
                keyid:0D:B3:3C:FC:9E:40:5D:1E:D0:4A:EE:B3:FA:F1:A8:B0:17:78:4C:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a2d75f1-8f4b-49d3-9661-209643086151.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.118.49.0/24
                  130.51.152.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8e:85:96:8c:59:52:4a:69:95:1e:a1:f6:a3:b9:7e:16:6c:48:
         d7:e3:97:d1:5c:41:b7:96:f0:4e:90:df:34:61:be:99:0b:93:
         31:c5:8f:13:c0:ea:f5:03:00:93:07:2f:6d:a8:ed:59:5b:3c:
         a4:ed:59:c6:76:2f:f8:8f:c9:92:ba:72:5e:9a:f1:67:65:ea:
         37:59:cb:c8:e6:09:c3:bf:ce:bc:62:95:c1:ae:b0:f7:6e:e3:
         7f:b7:9a:8a:bc:89:a4:b3:3a:f7:0f:4d:cd:86:04:50:19:8b:
         82:e7:76:56:a5:63:73:1c:63:7c:e3:e2:b6:71:db:68:31:ca:
         7c:76:dd:9a:08:cc:82:89:4c:01:9d:70:89:c3:cd:a5:ad:26:
         49:ab:75:a9:f3:32:8d:ac:f2:8a:6f:73:d7:45:38:8a:c4:23:
         7f:29:f5:78:f7:0f:ac:1d:dd:7c:04:92:74:c9:aa:cd:40:21:
         2d:bd:5e:0e:85:dd:3a:cf:5c:88:04:b0:81:c1:5f:40:69:32:
         39:55:f6:74:23:01:ab:79:57:19:05:30:72:d8:fc:c9:8a:64:
         c5:51:68:c4:b0:13:dc:15:8b:d0:30:7c:60:dc:93:ef:55:3f:
         a3:82:cf:ce:50:60:16:91:71:42:a3:49:60:75:6d:53:bb:f4:
         9f:03:37:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 14:48:02 2026 by rpki-client