Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/20345bca-b793-4f14-a066-8653ac933903/66ad8129-478a-3a57-a4a9-3f420b58ffdc.roa
File:                     66ad8129-478a-3a57-a4a9-3f420b58ffdc.roa (raw, json)
Hash identifier:          G36vblwryM1OhJcVh3IoSgG7JVjqx/8nvYa429PW8YY=
Subject key identifier:   B4:96:75:4A:2E:34:51:7F:10:8D:58:FC:5A:51:A8:15:41:A1:BE:F6
Certificate issuer:       /CN=20345bca-b793-4f14-a066-8653ac933903
Certificate serial:       010D0C9F4328584DD0905F304A5E2B4A67092240
Authority key identifier: 10:6B:23:17:A7:88:A7:9F:AB:B4:F4:E5:33:83:B9:8B:9F:BB:CE:B4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/20345bca-b793-4f14-a066-8653ac933903.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/20345bca-b793-4f14-a066-8653ac933903/66ad8129-478a-3a57-a4a9-3f420b58ffdc.roa
Signing time:             Wed 13 May 2026 01:00:24 +0000
ROA not before:           Wed 13 May 2026 01:00:24 +0000
ROA not after:            Tue 11 Aug 2026 01:00:24 +0000
asID:                     16509
IP address blocks:        206.41.57.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/20345bca-b793-4f14-a066-8653ac933903/20345bca-b793-4f14-a066-8653ac933903.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/20345bca-b793-4f14-a066-8653ac933903/20345bca-b793-4f14-a066-8653ac933903.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/20345bca-b793-4f14-a066-8653ac933903.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:d0:90:5f:30:4a:5e:2b:4a:67:09:22:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=20345bca-b793-4f14-a066-8653ac933903
        Validity
            Not Before: May 13 01:00:24 2026 GMT
            Not After : Aug 11 01:00:24 2026 GMT
        Subject: CN=040710c9-f0ab-4dc2-b516-9cdf7b95051f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:70:5b:78:68:6d:58:f5:17:e8:20:1d:1b:d4:
                    d1:88:e4:68:72:f9:63:19:ca:0f:14:af:6d:cd:09:
                    8e:7a:f3:6c:52:ec:08:80:67:77:55:22:ef:66:15:
                    a7:c9:a0:52:8b:1a:5e:ce:97:f2:00:67:6b:b9:cf:
                    fb:69:32:e3:18:1d:95:84:65:c5:7a:50:27:86:2b:
                    a5:5a:a2:ed:bd:dc:c9:5f:06:bb:33:5f:20:6f:75:
                    fd:0a:7d:db:86:3f:90:73:e6:f8:89:f7:86:25:3a:
                    02:3c:37:9c:16:bd:53:fb:e4:17:54:5f:72:4f:17:
                    40:09:2a:31:e8:1d:be:d2:d7:ba:ed:81:5e:b1:66:
                    2f:a3:7c:72:47:00:73:3b:9f:1d:ab:d9:c0:b2:e0:
                    af:18:92:c2:c3:aa:60:bf:c6:e2:0a:c6:4f:7a:7d:
                    5f:fc:14:a4:a1:ec:a6:b1:64:41:e4:a0:99:2e:99:
                    be:03:d2:6b:3b:58:98:bf:41:53:37:54:24:1d:a2:
                    ef:84:11:6d:97:3d:f5:1a:69:fc:2c:3a:30:ca:77:
                    37:45:e0:50:ff:98:51:b7:8d:ca:ae:64:21:c9:c4:
                    6e:2b:91:d2:49:4c:2f:fa:32:d6:fe:82:f8:d5:59:
                    bf:3d:db:f8:79:64:cb:1d:55:8c:f1:a7:bd:c4:62:
                    77:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:96:75:4A:2E:34:51:7F:10:8D:58:FC:5A:51:A8:15:41:A1:BE:F6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/20345bca-b793-4f14-a066-8653ac933903/66ad8129-478a-3a57-a4a9-3f420b58ffdc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/20345bca-b793-4f14-a066-8653ac933903/20345bca-b793-4f14-a066-8653ac933903.crl

            X509v3 Authority Key Identifier:
                keyid:10:6B:23:17:A7:88:A7:9F:AB:B4:F4:E5:33:83:B9:8B:9F:BB:CE:B4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/20345bca-b793-4f14-a066-8653ac933903.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.41.57.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7f:b7:5e:2f:b3:4f:57:c4:a7:30:17:f5:13:45:22:1f:76:87:
         68:13:6b:f9:39:7a:01:73:e4:94:d1:1d:c2:27:ad:fa:3f:32:
         45:91:2b:5d:3c:ce:02:6a:30:1b:56:d0:e5:e0:ac:85:0e:a9:
         c3:b2:35:8a:f2:31:12:8e:89:06:9e:9a:08:3b:b7:06:2f:f7:
         47:2e:0f:df:34:e0:6b:29:c9:06:43:e6:1d:6d:82:5a:fb:21:
         e5:bb:60:b8:c6:63:a1:fe:cc:0b:2e:cb:76:b4:44:57:ad:c3:
         f6:52:ac:76:f2:5d:f5:29:48:f8:ee:3b:32:e0:05:36:98:55:
         78:47:c1:30:18:22:ea:7b:9d:5b:22:ee:46:bf:83:25:c5:1a:
         ce:3d:6e:70:bf:0a:59:09:2d:3a:e4:52:e2:a5:de:c4:27:00:
         e7:20:88:f8:16:4a:a1:9c:60:c6:92:ba:d9:fb:4f:67:f8:83:
         1f:32:d9:40:f6:04:52:59:94:9f:55:47:39:5a:8a:e8:46:d3:
         f0:2c:01:2a:0e:91:9a:67:51:30:b7:a2:cc:68:f7:e2:13:9a:
         a4:d5:c8:d8:39:c1:c8:91:de:fe:23:b6:d3:10:55:87:d7:8e:
         17:c6:35:dc:5c:47:b8:8b:42:8c:39:b8:51:d9:38:20:5c:05:
         f8:0b:08:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 16:26:46 2026 by rpki-client