Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ecbe2caf-afd0-4edf-a743-b350c23e307d/fd5dce4c-7a3f-31f9-bc18-f99a17c964e7.roa
File:                     fd5dce4c-7a3f-31f9-bc18-f99a17c964e7.roa (raw, json)
Hash identifier:          sTjmnwCPVQJRmm50eJfYm7KppGUMYglJkxAmJMNxprY=
Subject key identifier:   08:F3:E7:37:70:57:CC:40:FC:07:ED:52:9E:F2:39:9E:58:E6:3D:54
Certificate issuer:       /CN=ecbe2caf-afd0-4edf-a743-b350c23e307d
Certificate serial:       010D0C9F4328584D3F65011DB589996F1442F400
Authority key identifier: C2:76:72:F8:A3:BA:3C:3B:04:3F:5B:E1:5B:0D:90:5C:D9:3A:58:58
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ecbe2caf-afd0-4edf-a743-b350c23e307d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ecbe2caf-afd0-4edf-a743-b350c23e307d/fd5dce4c-7a3f-31f9-bc18-f99a17c964e7.roa
Signing time:             Sun 22 Mar 2026 01:00:32 +0000
ROA not before:           Sun 22 Mar 2026 01:00:32 +0000
ROA not after:            Sat 20 Jun 2026 01:00:32 +0000
asID:                     36734
IP address blocks:        66.54.100.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ecbe2caf-afd0-4edf-a743-b350c23e307d/ecbe2caf-afd0-4edf-a743-b350c23e307d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ecbe2caf-afd0-4edf-a743-b350c23e307d/ecbe2caf-afd0-4edf-a743-b350c23e307d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ecbe2caf-afd0-4edf-a743-b350c23e307d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:3f:65:01:1d:b5:89:99:6f:14:42:f4:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ecbe2caf-afd0-4edf-a743-b350c23e307d
        Validity
            Not Before: Mar 22 01:00:32 2026 GMT
            Not After : Jun 20 01:00:32 2026 GMT
        Subject: CN=e9d63b49-71fc-4526-ae4c-fe6e180ed15d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:47:ed:ee:14:d8:70:9d:7d:2b:df:46:df:09:
                    03:46:74:10:00:9c:04:e8:eb:7a:2b:c3:09:19:be:
                    5e:ff:aa:b2:51:13:f9:b4:b2:f2:e3:45:1d:d4:ec:
                    bf:5c:dd:ba:e1:fb:36:df:b7:e8:31:67:fe:5f:85:
                    51:f0:7e:7b:54:b9:5d:14:2c:e0:5a:f3:1b:31:ad:
                    10:4a:b0:5e:85:a2:d7:33:8a:4c:39:f4:dc:d7:18:
                    d5:cf:84:41:0a:b5:91:da:d9:28:c7:f9:22:b1:54:
                    fb:9f:a2:73:40:c2:b6:ad:56:aa:99:cf:fd:6d:b1:
                    2b:62:19:b6:48:2d:f6:ff:89:ae:dc:f6:3b:f0:38:
                    ad:c8:01:08:39:3b:43:74:92:0e:b7:f8:61:49:47:
                    4f:a9:8b:d0:ff:ac:1f:12:98:d3:e7:b5:20:3a:fb:
                    32:93:5a:2d:f8:a3:84:91:77:b0:77:fe:20:1c:df:
                    3c:84:29:ce:01:9e:19:db:a4:88:d3:b2:ac:10:48:
                    46:94:73:b9:14:30:28:26:5e:21:11:a0:29:6a:f0:
                    8d:79:11:f1:bb:2a:72:97:e6:67:9a:ad:b0:f4:9f:
                    f4:49:4f:ba:54:83:3a:b5:3d:68:2b:a3:df:f5:56:
                    aa:b8:43:83:4d:8d:51:86:da:e1:d0:3c:81:82:0d:
                    f5:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:F3:E7:37:70:57:CC:40:FC:07:ED:52:9E:F2:39:9E:58:E6:3D:54
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ecbe2caf-afd0-4edf-a743-b350c23e307d/fd5dce4c-7a3f-31f9-bc18-f99a17c964e7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ecbe2caf-afd0-4edf-a743-b350c23e307d/ecbe2caf-afd0-4edf-a743-b350c23e307d.crl

            X509v3 Authority Key Identifier:
                keyid:C2:76:72:F8:A3:BA:3C:3B:04:3F:5B:E1:5B:0D:90:5C:D9:3A:58:58

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ecbe2caf-afd0-4edf-a743-b350c23e307d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.54.100.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         35:7d:88:c2:41:c9:ba:0c:98:c3:6f:a7:65:ff:46:04:1d:ed:
         89:98:94:ff:5f:31:42:e3:c8:62:c2:69:94:bb:17:5a:dc:46:
         c2:c1:c9:72:80:c3:3c:20:d1:d2:6f:ea:fb:45:df:bd:f5:4f:
         97:a8:ad:24:85:a2:c3:2f:81:17:90:d7:df:b2:ef:d1:9e:25:
         ca:ad:15:c2:5e:9b:3c:55:94:8c:be:da:8c:f0:e2:11:46:41:
         28:7d:b9:9c:bc:6c:b7:96:12:af:41:4d:69:14:14:24:49:8c:
         49:93:d8:be:83:2f:91:85:c2:6f:ba:45:74:dd:60:59:70:fb:
         1c:02:44:ef:ed:36:d6:ad:88:c6:2a:a2:09:75:10:08:f9:02:
         5b:dc:96:11:0f:ab:93:6d:ef:ed:6d:be:e6:83:b3:c7:86:d8:
         14:d8:65:b0:f1:81:4c:c6:11:bd:0c:fa:3d:fc:a5:48:69:74:
         29:d1:53:75:aa:de:8e:6f:20:4e:82:a0:7f:6e:16:6c:95:d2:
         39:85:25:97:ac:c8:c1:25:98:6c:bd:cb:5a:03:d9:8e:02:58:
         ea:2c:ab:50:80:bb:07:50:7d:47:4c:a4:64:85:c1:0f:1b:5e:
         2e:15:13:6a:e9:78:46:48:ef:08:8e:ee:e4:6b:b4:f3:91:02:
         df:f6:14:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:30:19 2026 by rpki-client