Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/4550770a-2981-4fa9-bb7d-de9c7306d120/1d5938ac-6b37-3f29-915e-9caaa856f3ff.roa
File:                     1d5938ac-6b37-3f29-915e-9caaa856f3ff.roa (raw, json)
Hash identifier:          STDGMpgA77UQy42bQA5njsV1l/0iGLaiB+F9rSnpZnM=
Subject key identifier:   A5:F7:CA:9B:A6:69:10:03:E5:11:16:B6:8F:6C:B1:5E:CF:C7:52:86
Certificate issuer:       /CN=4550770a-2981-4fa9-bb7d-de9c7306d120
Certificate serial:       010D0C9F4328584F3E47CA7AEFBA8773944DCCA0
Authority key identifier: 70:EB:7A:F3:32:C8:A8:D7:7D:BA:C5:54:24:81:B9:3C:18:48:A7:B4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/4550770a-2981-4fa9-bb7d-de9c7306d120.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/4550770a-2981-4fa9-bb7d-de9c7306d120/1d5938ac-6b37-3f29-915e-9caaa856f3ff.roa
Signing time:             Mon 21 Sep 2026 01:00:11 +0000
ROA not before:           Mon 21 Sep 2026 01:00:11 +0000
ROA not after:            Sun 20 Dec 2026 02:00:11 +0000
asID:                     18602
IP address blocks:        66.179.116.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/4550770a-2981-4fa9-bb7d-de9c7306d120/4550770a-2981-4fa9-bb7d-de9c7306d120.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/4550770a-2981-4fa9-bb7d-de9c7306d120/4550770a-2981-4fa9-bb7d-de9c7306d120.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/4550770a-2981-4fa9-bb7d-de9c7306d120.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 25 Sep 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:3e:47:ca:7a:ef:ba:87:73:94:4d:cc:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4550770a-2981-4fa9-bb7d-de9c7306d120
        Validity
            Not Before: Sep 21 01:00:11 2026 GMT
            Not After : Dec 20 02:00:11 2026 GMT
        Subject: CN=b994536d-3cf7-4766-a22d-f25edd6eb363
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:81:3b:10:53:65:9b:d3:2c:19:73:7e:5e:f5:
                    3e:35:67:18:19:7e:b9:57:2a:8f:d7:42:96:56:b7:
                    58:e2:3c:02:a9:e1:9a:cb:f4:a2:33:a1:ec:33:d7:
                    5f:0c:46:49:4c:da:4f:2d:95:b6:04:94:db:80:13:
                    b9:de:3b:fb:c9:87:24:b1:83:aa:1a:ef:5c:61:df:
                    68:f9:68:2b:a5:fd:76:62:27:9d:71:85:21:23:1b:
                    6e:02:cf:7a:05:ac:72:5e:a5:0f:fc:16:0d:0d:3d:
                    49:92:c4:df:3f:67:6f:54:ae:ec:20:8b:a7:60:02:
                    40:e0:b1:45:45:fe:fb:a3:80:0e:75:b3:2e:97:cd:
                    eb:d2:69:0b:af:f7:62:f4:dd:3c:71:e5:a1:17:61:
                    dc:00:de:dd:59:ed:55:06:73:be:9c:e4:e5:eb:b7:
                    71:c1:53:a0:b0:c5:43:f6:f5:08:28:42:65:20:44:
                    ae:8a:d8:69:7f:71:42:c0:44:1e:82:c0:5a:69:0c:
                    e1:ed:10:35:61:96:56:ee:5b:b1:b4:78:51:8c:54:
                    fa:77:c3:56:ef:68:8e:8e:c9:80:4e:aa:9a:27:64:
                    75:69:f3:2f:ea:35:07:63:24:aa:0c:d2:b9:bf:a9:
                    d9:36:b1:0b:d6:40:2d:d3:c5:41:86:89:60:55:9b:
                    cd:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:F7:CA:9B:A6:69:10:03:E5:11:16:B6:8F:6C:B1:5E:CF:C7:52:86
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/4550770a-2981-4fa9-bb7d-de9c7306d120/1d5938ac-6b37-3f29-915e-9caaa856f3ff.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/4550770a-2981-4fa9-bb7d-de9c7306d120/4550770a-2981-4fa9-bb7d-de9c7306d120.crl

            X509v3 Authority Key Identifier:
                keyid:70:EB:7A:F3:32:C8:A8:D7:7D:BA:C5:54:24:81:B9:3C:18:48:A7:B4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/4550770a-2981-4fa9-bb7d-de9c7306d120.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.179.116.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         82:b8:e1:80:59:9a:5d:1c:e3:e1:f9:fc:a6:ea:84:e4:16:2d:
         ec:eb:d4:ec:df:93:cb:17:83:7b:28:0b:63:ef:1b:b3:aa:c7:
         cf:26:bd:cd:e9:c7:41:e1:e7:a9:c2:dc:e3:dd:f3:66:62:b8:
         df:d5:95:82:91:b2:c5:8f:b6:84:e4:5b:56:4d:b8:6b:0f:52:
         07:3a:fb:8b:db:24:13:03:dc:62:9d:fa:f1:d7:72:ec:f0:5f:
         b2:1a:d4:73:df:fa:1a:a3:dd:d7:ce:56:04:26:93:65:1a:11:
         4b:5d:82:43:1f:21:bd:0d:59:11:e4:b2:b8:ca:4d:95:31:f4:
         77:b6:bd:33:4a:1d:86:c2:20:dd:44:ca:0d:7e:f1:6e:29:1b:
         0a:1d:97:ec:a1:7a:60:28:f7:55:fb:16:70:4a:fa:36:4c:33:
         3c:8e:b8:c0:2b:ae:85:e6:a4:de:4e:60:44:ec:f5:7a:56:12:
         3b:4a:57:6f:b1:23:9c:c7:de:f2:14:eb:ef:e9:4c:b6:fa:21:
         f7:7a:cb:de:76:fe:f8:d0:c5:58:61:f1:3b:67:ae:b0:51:97:
         60:6f:21:03:88:36:dd:8b:80:19:86:81:8f:f6:9a:69:5a:a8:
         a9:fe:dd:00:68:bb:f4:b5:36:59:4a:98:32:93:ed:df:1a:e6:
         7c:d1:25:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 20:04:48 2026 by rpki-client