Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/45172e0b-02b7-43fc-843c-98c0f87cafa4/e9bb7b7c-8b52-3bd4-a1c6-a0888160ba13.roa
File:                     e9bb7b7c-8b52-3bd4-a1c6-a0888160ba13.roa (raw, json)
Hash identifier:          o/e597FYnHtd8UrMZzZm0L96nkMoIeh5J32zUeKvTw0=
Subject key identifier:   3A:8E:34:29:AC:5A:A7:AF:0B:E4:DB:9A:33:BA:25:0F:54:CB:F4:60
Certificate issuer:       /CN=45172e0b-02b7-43fc-843c-98c0f87cafa4
Certificate serial:       010D0C9F4328584E90F4BB0EF85C7B546991F700
Authority key identifier: 6D:29:CD:58:DA:B1:10:CE:4D:CC:52:5F:D6:FD:71:2D:D8:DD:AE:A3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/45172e0b-02b7-43fc-843c-98c0f87cafa4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/45172e0b-02b7-43fc-843c-98c0f87cafa4/e9bb7b7c-8b52-3bd4-a1c6-a0888160ba13.roa
Signing time:             Mon 20 Jul 2026 22:58:01 +0000
ROA not before:           Mon 20 Jul 2026 22:58:01 +0000
ROA not after:            Sun 18 Oct 2026 22:58:01 +0000
asID:                     33554
IP address blocks:        66.51.240.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/45172e0b-02b7-43fc-843c-98c0f87cafa4/45172e0b-02b7-43fc-843c-98c0f87cafa4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/45172e0b-02b7-43fc-843c-98c0f87cafa4/45172e0b-02b7-43fc-843c-98c0f87cafa4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/45172e0b-02b7-43fc-843c-98c0f87cafa4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 24 Jul 2026 23:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:90:f4:bb:0e:f8:5c:7b:54:69:91:f7:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=45172e0b-02b7-43fc-843c-98c0f87cafa4
        Validity
            Not Before: Jul 20 22:58:01 2026 GMT
            Not After : Oct 18 22:58:01 2026 GMT
        Subject: CN=7c0f5339-c11b-4ebd-b0fa-e4e653e88599
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:9c:54:ea:12:44:23:97:85:b1:44:8b:63:32:
                    eb:e1:ae:7a:29:66:84:8e:f6:de:5d:f9:16:0e:be:
                    5d:a8:25:48:b3:ae:00:ab:07:3b:b7:fe:d2:2e:40:
                    8c:14:34:a5:ca:43:bd:82:a5:53:dd:c4:aa:e7:1e:
                    7e:63:a0:62:e3:f8:5e:e7:e3:e6:e3:8e:54:4a:15:
                    f3:b0:9b:db:0d:69:7e:a5:90:38:e5:f3:c2:e6:7f:
                    29:83:ff:7f:1e:e8:f4:53:40:7a:19:7c:94:bc:67:
                    68:6c:17:ed:8a:af:9a:e8:25:7f:00:04:f4:b1:a7:
                    c4:8f:86:ad:db:73:77:08:be:5b:80:64:32:82:22:
                    94:1d:b3:11:37:e0:9e:3d:47:6e:8d:32:a8:64:ee:
                    ce:6e:00:f0:17:2d:e5:e2:67:14:f0:ca:89:28:d6:
                    51:85:4d:8d:0c:19:81:5f:77:d2:cb:d8:67:83:49:
                    5d:7d:42:50:8a:c0:42:1f:e5:63:1e:4a:a0:43:dc:
                    e6:c0:43:14:82:a2:bd:87:7d:6a:12:05:96:bb:58:
                    15:f6:1b:be:55:3c:7d:95:f6:67:86:73:6c:5c:25:
                    78:e8:4d:fc:61:1d:d9:07:a8:71:35:7a:45:fe:2f:
                    97:5a:25:7a:d2:ac:2f:cb:1b:99:69:0b:4f:be:95:
                    33:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:8E:34:29:AC:5A:A7:AF:0B:E4:DB:9A:33:BA:25:0F:54:CB:F4:60
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/45172e0b-02b7-43fc-843c-98c0f87cafa4/e9bb7b7c-8b52-3bd4-a1c6-a0888160ba13.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/45172e0b-02b7-43fc-843c-98c0f87cafa4/45172e0b-02b7-43fc-843c-98c0f87cafa4.crl

            X509v3 Authority Key Identifier:
                keyid:6D:29:CD:58:DA:B1:10:CE:4D:CC:52:5F:D6:FD:71:2D:D8:DD:AE:A3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/45172e0b-02b7-43fc-843c-98c0f87cafa4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.51.240.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2f:00:78:e4:1f:5d:88:98:24:74:00:f3:15:30:a8:49:ef:3a:
         c7:af:fe:fc:9f:96:ca:a6:86:0d:49:7f:a7:10:0d:f1:e9:19:
         cd:4d:8f:3c:82:70:7b:6d:4f:d2:0a:2f:54:86:bb:d2:c0:ed:
         83:f2:8d:6d:1d:a8:e2:3b:3a:b4:ee:c3:02:8f:15:9e:42:c9:
         da:d4:ff:01:f3:99:fe:23:f9:9d:85:b6:1e:69:7f:4f:0a:c6:
         68:df:0f:26:55:ba:79:36:11:2e:30:7e:8e:bc:4a:3e:3b:6e:
         70:b6:8c:56:cf:9f:f0:c9:c2:ce:37:49:7f:91:90:97:20:4f:
         32:28:1a:49:3d:91:d4:60:10:db:a0:eb:59:8d:2c:7b:c6:1c:
         fc:eb:59:a8:ca:2d:9c:77:32:5e:29:28:fc:2c:3a:0b:2c:f0:
         72:ba:bc:16:f4:eb:f1:81:4f:90:91:55:03:f7:8f:d9:ba:95:
         23:4e:fb:d7:33:d2:39:a1:38:8f:9c:e3:e3:76:af:92:dc:af:
         e7:da:05:2b:4c:ba:76:b7:69:5b:27:f7:82:01:1b:3b:3d:86:
         0f:03:2c:43:3f:c5:33:d4:16:f5:cf:09:03:74:cf:49:57:1a:
         6a:d0:6a:a0:96:4c:24:3c:be:7f:32:be:3a:3e:e7:c6:aa:26:
         2b:12:49:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 22:20:07 2026 by rpki-client