Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/89538b38-2fe8-3ff2-a454-9da0a03ae9bb.roa
File:                     89538b38-2fe8-3ff2-a454-9da0a03ae9bb.roa (raw, json)
Hash identifier:          vged6EnfstmfmD+S/sPFTTA3AHW08zB0H54E5jmyYus=
Subject key identifier:   52:A8:1B:17:E9:75:9E:17:B0:89:93:D7:97:5D:11:B2:E2:8E:0E:03
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F4328584D40CB2835C796AD1137F51E40
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/89538b38-2fe8-3ff2-a454-9da0a03ae9bb.roa
Signing time:             Sun 22 Mar 2026 13:00:41 +0000
ROA not before:           Sun 22 Mar 2026 13:00:41 +0000
ROA not after:            Sat 20 Jun 2026 13:00:41 +0000
asID:                     11427
IP address blocks:        66.68.0.0/15 maxlen: 15
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:40:cb:28:35:c7:96:ad:11:37:f5:1e:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Mar 22 13:00:41 2026 GMT
            Not After : Jun 20 13:00:41 2026 GMT
        Subject: CN=2f8656f6-cc8e-47a2-a9c5-7b5d53cc41a9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:75:cd:6c:e4:c4:d6:5d:2c:39:69:d7:f3:cb:
                    cf:01:f2:5e:62:6f:0f:dd:4b:bd:7d:04:b4:d3:84:
                    7d:c7:75:63:e0:aa:37:5f:ab:9e:a3:62:81:01:ac:
                    51:74:ef:bc:56:f6:3a:d7:21:74:b6:06:07:86:6c:
                    c1:e5:a3:39:20:9f:75:1c:c5:ed:e7:3b:a8:53:b3:
                    9c:d1:a0:0b:fa:7f:d4:6c:7f:3b:34:15:fd:56:44:
                    54:6c:98:c7:c0:1f:3f:6e:07:f6:db:1b:f6:d3:c6:
                    86:50:70:92:db:9f:e1:41:2d:89:c4:74:ad:50:de:
                    cb:2b:7a:97:19:d1:2f:49:cf:c8:51:10:2e:90:70:
                    91:d0:70:16:56:d1:13:94:d1:5d:cc:f7:10:91:3f:
                    5c:fd:01:f4:b7:85:58:52:af:32:f7:a8:5d:a9:86:
                    df:65:ff:e8:5c:50:82:fe:cd:ae:71:b8:24:9f:ee:
                    6f:c0:e0:c3:83:27:82:d3:a1:1c:58:e3:f8:0c:26:
                    2e:33:57:e5:13:a7:79:f2:77:6f:14:67:55:d9:e3:
                    9c:ba:14:65:fe:d4:de:58:45:b7:16:bc:a7:99:7e:
                    33:23:db:d2:8d:3c:51:d8:fe:e5:6a:4a:be:ac:11:
                    3a:b8:3b:0f:38:f4:4d:f6:f1:3f:35:1d:da:e1:8e:
                    28:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:A8:1B:17:E9:75:9E:17:B0:89:93:D7:97:5D:11:B2:E2:8E:0E:03
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/89538b38-2fe8-3ff2-a454-9da0a03ae9bb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.68.0.0/15

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         15:1f:12:b8:f2:6b:4c:ab:1c:19:f0:59:50:f6:9f:13:91:72:
         8a:33:23:f5:e3:4b:1d:6d:b4:63:86:d2:96:64:17:f0:35:5e:
         f3:16:ee:28:9d:63:86:93:85:f8:49:64:28:c2:b3:81:df:08:
         4d:58:1c:2e:16:12:a4:d0:99:5f:8b:6e:24:e0:7f:25:54:2b:
         19:9f:ad:9e:95:73:ab:36:c7:25:2a:58:f8:4f:79:30:59:0a:
         c7:a1:b4:7f:d1:48:be:d4:e0:d5:61:e8:38:b9:40:be:d9:95:
         a2:d6:ea:8c:e6:c1:a3:ae:df:ba:f3:49:f1:b3:2a:99:c8:8a:
         92:1c:49:d5:d1:ca:13:45:87:5f:c3:a4:8b:b7:b3:62:4f:ed:
         9b:98:44:48:96:4b:18:d3:d3:1c:2b:96:79:d5:89:a7:7a:a6:
         ad:e6:a7:5e:f9:e0:a7:b7:45:69:bd:7d:35:b3:b5:08:27:70:
         cd:f8:ea:de:b5:f7:64:d9:45:e0:02:69:5a:df:36:62:51:7b:
         d3:1c:cf:6e:f9:64:6a:45:60:ce:01:6f:a3:24:68:30:2a:32:
         ed:25:43:49:fb:30:28:c4:4d:ed:a3:95:b1:a2:81:34:fc:6b:
         8d:30:71:71:a0:2f:03:9d:09:71:d7:aa:17:12:e1:93:70:fd:
         b0:ef:b0:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 16:07:06 2026 by rpki-client