Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/169d877f-3a03-42b7-8bce-7109eddd1123/e2db0f68-a81a-3474-b673-40feb9b736f5.roa
File:                     e2db0f68-a81a-3474-b673-40feb9b736f5.roa (raw, json)
Hash identifier:          GwEY4T39fKICZ98CR8FTWbEGHx5K1ngwUfC3tnZEuAI=
Subject key identifier:   D8:20:E0:84:A0:BA:4B:CA:C0:AE:06:42:B9:DF:80:77:A1:E0:6A:73
Certificate issuer:       /CN=169d877f-3a03-42b7-8bce-7109eddd1123
Certificate serial:       010D0C9F4328584F0B96721B866B48408A04C780
Authority key identifier: 9B:C8:3F:A3:1D:0C:5A:99:2C:B5:04:5C:53:DB:BF:06:D2:99:E5:6E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/169d877f-3a03-42b7-8bce-7109eddd1123.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/169d877f-3a03-42b7-8bce-7109eddd1123/e2db0f68-a81a-3474-b673-40feb9b736f5.roa
Signing time:             Wed 02 Sep 2026 21:12:28 +0000
ROA not before:           Wed 02 Sep 2026 21:12:28 +0000
ROA not after:            Wed 18 Nov 2026 02:00:12 +0000
asID:                     23550
IP address blocks:        66.129.160.0/24 maxlen: 24
                          66.129.161.0/24 maxlen: 24
                          66.129.162.0/24 maxlen: 24
                          66.129.163.0/24 maxlen: 24
                          66.129.164.0/24 maxlen: 24
                          66.129.165.0/24 maxlen: 24
                          66.129.168.0/24 maxlen: 24
                          66.129.169.0/24 maxlen: 24
                          66.129.170.0/24 maxlen: 24
                          66.129.171.0/24 maxlen: 24
                          66.129.172.0/24 maxlen: 24
                          66.129.173.0/24 maxlen: 24
                          66.129.174.0/24 maxlen: 24
                          66.129.175.0/24 maxlen: 24
                          184.95.0.0/24 maxlen: 24
                          184.95.1.0/24 maxlen: 24
                          184.95.2.0/24 maxlen: 24
                          184.95.3.0/24 maxlen: 24
                          184.95.4.0/24 maxlen: 24
                          184.95.5.0/24 maxlen: 24
                          184.95.6.0/24 maxlen: 24
                          184.95.8.0/24 maxlen: 24
                          184.95.9.0/24 maxlen: 24
                          184.95.10.0/24 maxlen: 24
                          184.95.11.0/24 maxlen: 24
                          184.95.12.0/24 maxlen: 24
                          184.95.13.0/24 maxlen: 24
                          184.95.14.0/24 maxlen: 24
                          184.95.15.0/24 maxlen: 24
                          2605:b800::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/169d877f-3a03-42b7-8bce-7109eddd1123/169d877f-3a03-42b7-8bce-7109eddd1123.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/169d877f-3a03-42b7-8bce-7109eddd1123/169d877f-3a03-42b7-8bce-7109eddd1123.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/169d877f-3a03-42b7-8bce-7109eddd1123.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Sep 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:0b:96:72:1b:86:6b:48:40:8a:04:c7:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=169d877f-3a03-42b7-8bce-7109eddd1123
        Validity
            Not Before: Sep  2 21:12:28 2026 GMT
            Not After : Nov 18 02:00:12 2026 GMT
        Subject: CN=d03b8b30-c609-4363-af52-b905e0d7a6e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:fc:0b:58:90:38:90:71:7f:75:9e:0b:ee:8a:
                    3e:60:92:6b:5d:28:84:41:ce:7c:7d:35:30:7e:13:
                    17:0b:e6:f1:a7:e0:c1:99:9e:ae:b3:57:ed:1b:c3:
                    3a:e7:49:10:fc:ee:af:70:99:9c:eb:e8:67:65:59:
                    02:ec:dd:27:a5:74:3d:f5:70:1a:03:7f:81:b6:4f:
                    7f:9c:35:49:65:5c:ee:f5:6d:89:dd:b6:91:ec:0e:
                    28:68:e3:c3:1a:9b:ed:58:b1:a6:9e:37:98:8c:79:
                    d1:74:ef:fa:b4:73:8f:ff:34:13:00:5d:57:be:07:
                    03:db:63:32:83:a2:89:36:f5:69:97:94:ea:65:b7:
                    ac:60:6e:71:de:02:08:84:ed:23:a0:29:d4:55:9e:
                    a1:b2:b1:a5:9a:f9:6d:3b:4a:0a:e5:69:f9:1d:12:
                    16:ba:28:a2:02:f4:d7:32:5d:92:d1:f5:a3:dd:32:
                    21:f3:17:33:ec:2f:37:f2:80:1d:25:1b:6a:79:b8:
                    a7:a9:fb:d0:b1:a1:53:fd:9c:12:1d:e3:44:34:80:
                    e7:a1:8a:44:98:bc:72:d8:9a:df:80:d6:25:30:63:
                    d6:4e:63:6a:47:79:24:7c:d9:29:98:2a:86:16:d6:
                    67:41:0e:8b:7d:28:4b:36:1f:20:9a:9b:fb:e5:69:
                    d0:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:20:E0:84:A0:BA:4B:CA:C0:AE:06:42:B9:DF:80:77:A1:E0:6A:73
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/169d877f-3a03-42b7-8bce-7109eddd1123/e2db0f68-a81a-3474-b673-40feb9b736f5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/169d877f-3a03-42b7-8bce-7109eddd1123/169d877f-3a03-42b7-8bce-7109eddd1123.crl

            X509v3 Authority Key Identifier:
                keyid:9B:C8:3F:A3:1D:0C:5A:99:2C:B5:04:5C:53:DB:BF:06:D2:99:E5:6E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/169d877f-3a03-42b7-8bce-7109eddd1123.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.129.160.0-66.129.165.255
                  66.129.168.0/21
                  184.95.0.0-184.95.6.255
                  184.95.8.0/21
                IPv6:
                  2605:b800::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         28:aa:a7:65:de:2d:fc:a0:a0:92:8b:7f:b0:ae:56:54:c2:94:
         44:3c:2d:3b:03:70:9c:ce:b7:8f:22:02:81:cf:40:17:fd:dc:
         1e:9a:08:d6:85:3b:56:e1:82:32:df:79:90:42:e3:2a:78:88:
         94:d6:7c:e6:4c:ea:32:8e:5b:fe:15:88:92:77:b5:ca:5a:19:
         78:3c:76:37:4b:82:56:47:8b:70:81:41:89:03:a7:11:cf:0f:
         fd:41:f3:3b:4e:85:6c:21:f4:e8:c8:1d:5c:23:92:0a:47:e8:
         ef:78:7b:8f:08:e0:38:a5:a4:04:a3:e6:ef:89:d4:b4:3a:3e:
         83:93:bc:86:13:16:c3:cd:59:90:4f:47:ee:3e:b5:b4:02:80:
         7a:3e:9c:e5:7c:62:7f:0a:62:d1:ce:7d:6c:e1:b3:9b:3f:88:
         85:c7:72:14:54:25:77:d7:10:ea:7a:4e:61:77:ca:fa:09:68:
         55:b2:90:62:4c:31:27:ce:6e:ca:85:bf:41:e2:d2:5b:1d:ea:
         23:b3:6f:18:bf:a9:6c:6a:88:60:00:fc:dc:ad:86:d3:f4:a5:
         19:e3:64:1f:23:8f:6e:55:38:bc:f9:21:9c:50:50:99:dd:e2:
         c7:43:46:72:0b:df:f3:99:09:4a:f4:8b:53:78:6b:19:bf:2e:
         7d:6e:80:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 05:50:45 2026 by rpki-client