Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6/e8defdff-084f-3156-8c16-8cf8a39dfeba.roa
File:                     e8defdff-084f-3156-8c16-8cf8a39dfeba.roa (raw, json)
Hash identifier:          jk8kd2aslEO5t5QBKqhJ8fpvIKNEoU/jw1O5BHQMBQE=
Subject key identifier:   80:D7:9E:5F:69:08:86:CE:ED:6C:EB:92:7A:1C:80:2F:54:82:EC:DC
Certificate issuer:       /CN=6e9c5894-f794-4209-a00d-cf232363d7c6
Certificate serial:       010D0C9F4328584AECC11AA1F07B0B9C083D5080
Authority key identifier: EB:6D:3E:D4:C8:21:B9:96:11:9E:0C:09:FF:5D:B7:88:80:52:94:85
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6/e8defdff-084f-3156-8c16-8cf8a39dfeba.roa
Signing time:             Thu 21 Aug 2025 01:00:33 +0000
ROA not before:           Thu 21 Aug 2025 01:00:33 +0000
ROA not after:            Wed 19 Nov 2025 02:00:33 +0000
asID:                     14618
IP address blocks:        66.159.226.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6/6e9c5894-f794-4209-a00d-cf232363d7c6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6/6e9c5894-f794-4209-a00d-cf232363d7c6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:ec:c1:1a:a1:f0:7b:0b:9c:08:3d:50:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6e9c5894-f794-4209-a00d-cf232363d7c6
        Validity
            Not Before: Aug 21 01:00:33 2025 GMT
            Not After : Nov 19 02:00:33 2025 GMT
        Subject: CN=e5e16729-ce0c-4161-a655-d70150ec4c96
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:dc:b8:16:2d:34:05:29:da:02:51:a3:2c:eb:
                    f8:a8:97:9d:9d:fc:b7:69:f9:7a:0e:c8:3c:7d:83:
                    dd:19:bc:71:62:97:e2:16:0b:fd:9a:7e:cb:ac:22:
                    f1:0e:45:db:5d:b7:f2:93:46:c0:a6:48:61:c2:56:
                    f2:5a:81:97:e4:12:2d:43:b5:8f:42:1e:a4:3d:57:
                    9f:96:93:ac:c8:ce:da:7b:57:ac:82:f1:dd:dd:93:
                    94:ac:72:d3:85:ba:1d:d9:76:b9:b4:c8:60:93:66:
                    72:1c:f5:bc:63:f3:64:1a:a8:cc:78:2e:e1:97:03:
                    64:88:d0:9c:36:b3:de:b7:8a:f4:e0:48:a8:c7:93:
                    23:e4:d3:d5:47:07:ff:3e:6a:c2:ff:8f:d8:d3:6e:
                    02:a5:c5:ae:65:bb:88:14:0b:e2:6f:49:08:00:95:
                    40:18:48:12:8a:81:6f:0b:a0:85:d7:14:22:fa:e9:
                    07:5b:09:16:7b:5c:31:7f:5c:ab:fd:a8:50:a0:c0:
                    56:9a:8e:bb:9b:b9:31:b9:df:48:c1:1c:c8:d9:2b:
                    e1:fd:5b:32:d9:50:7c:71:61:7c:f2:ee:22:e8:4e:
                    2c:38:d5:f4:2a:6f:07:91:ae:99:a8:db:94:86:53:
                    ee:88:49:5c:a9:bb:19:18:cb:25:98:83:dc:a8:f3:
                    30:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:D7:9E:5F:69:08:86:CE:ED:6C:EB:92:7A:1C:80:2F:54:82:EC:DC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6/e8defdff-084f-3156-8c16-8cf8a39dfeba.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6/6e9c5894-f794-4209-a00d-cf232363d7c6.crl

            X509v3 Authority Key Identifier:
                keyid:EB:6D:3E:D4:C8:21:B9:96:11:9E:0C:09:FF:5D:B7:88:80:52:94:85

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.159.226.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ac:28:97:8e:f4:6f:49:0d:c0:f8:94:2f:b8:13:33:43:99:f8:
         7a:9c:f6:6e:76:dd:5a:1f:2c:06:bf:3a:1d:83:9d:fa:89:6d:
         c7:f4:c9:93:fc:5e:d7:b2:b9:5b:87:33:3e:39:1c:92:b1:a0:
         bb:f2:09:4f:58:2d:ac:fa:4a:c9:e4:69:1c:88:0c:f1:f9:cb:
         e8:0e:ee:55:f5:38:ff:12:4e:e1:af:c1:01:b4:25:d6:9f:2c:
         85:b2:69:29:f8:86:8d:43:c2:6e:79:8f:9c:93:94:2a:5d:2b:
         25:7a:0c:53:38:b5:70:80:5d:29:dd:2a:dd:7b:11:b7:e8:d4:
         44:20:ad:c3:cc:96:3d:c5:14:0c:87:48:4c:c3:0d:38:d3:1f:
         11:d0:9f:9e:eb:33:a7:44:2a:7c:5c:c9:cd:30:34:0e:49:1b:
         ad:fd:8e:99:de:c7:53:db:c7:33:89:99:68:e8:6b:26:b7:b0:
         52:94:6a:88:45:00:31:60:fc:b0:36:ba:c2:da:0a:5a:5f:d0:
         e2:6d:a0:c7:f1:1c:fa:e6:d4:e7:c5:1a:fc:8f:77:13:87:e1:
         2f:4c:d1:95:be:eb:50:ab:25:bd:8e:1e:93:52:e9:26:30:a4:
         11:7c:5a:d3:2d:3f:02:39:41:b0:b7:b2:b2:49:25:87:c9:66:
         ef:a7:e2:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:24:28 2025 by rpki-client