Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/a4d174ef-e870-39c8-9fd0-86313be6068a.roa
File:                     a4d174ef-e870-39c8-9fd0-86313be6068a.roa (raw, json)
Hash identifier:          ynaNOrkuVAcrlUigcp2cm+G46mqzvQf9rABEiHkZvd4=
Subject key identifier:   1A:2C:B2:DE:F0:49:B4:55:A3:E7:91:DE:04:D0:BF:F6:C2:D1:4F:0A
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F4328584D40CA8335D60A0357111BAC00
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/a4d174ef-e870-39c8-9fd0-86313be6068a.roa
Signing time:             Sun 22 Mar 2026 13:00:41 +0000
ROA not before:           Sun 22 Mar 2026 13:00:41 +0000
ROA not after:            Sat 20 Jun 2026 13:00:41 +0000
asID:                     11427
IP address blocks:        66.25.0.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:40:ca:83:35:d6:0a:03:57:11:1b:ac:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Mar 22 13:00:41 2026 GMT
            Not After : Jun 20 13:00:41 2026 GMT
        Subject: CN=e462a79f-9bb7-4872-9cd6-bc647731d234
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:50:a0:2b:4a:3f:cf:85:ca:8b:85:e1:57:49:
                    4c:02:9e:5d:29:ca:7a:c0:8b:90:54:3e:c4:b5:b3:
                    a1:bb:4f:9f:cf:28:ad:12:3c:ed:4c:12:b8:ec:7c:
                    b3:0a:04:a7:f2:e9:75:b5:0e:3d:a2:71:64:60:b4:
                    6b:21:4b:48:8e:a4:8d:72:04:53:d7:c3:73:33:40:
                    41:4a:bc:20:e7:83:01:54:0b:38:9d:44:c5:35:1a:
                    a7:a5:d7:18:9c:84:16:1b:88:8e:ca:aa:20:53:f7:
                    05:b7:85:2a:2f:28:16:d1:52:a4:fc:bf:52:f3:19:
                    20:45:05:82:7c:c7:9f:c2:20:ea:aa:f9:b6:be:b2:
                    0c:70:7e:d2:05:6c:de:61:22:5e:d5:6d:28:5f:96:
                    96:fa:b4:53:72:e6:a6:8c:0e:45:47:2b:81:3d:9a:
                    9a:04:ef:a2:a4:ab:5a:b9:48:02:ee:6c:28:70:d7:
                    29:9b:a2:10:30:7d:12:3f:ab:c6:41:ef:a1:52:9e:
                    30:05:d2:c0:4d:c1:a1:91:eb:50:38:1f:d0:35:4f:
                    36:f0:ef:38:4e:1a:a3:22:bb:39:0e:65:ac:ea:cf:
                    2c:b2:e2:25:a5:f1:ef:f1:cb:19:11:4a:41:9a:a8:
                    d0:41:5d:bb:6e:36:02:60:56:e4:64:8d:d2:ed:88:
                    bc:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:2C:B2:DE:F0:49:B4:55:A3:E7:91:DE:04:D0:BF:F6:C2:D1:4F:0A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/a4d174ef-e870-39c8-9fd0-86313be6068a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.25.0.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0b:e8:ef:53:c3:89:a0:08:13:15:bb:58:e0:a9:3d:75:4c:46:
         55:52:21:fd:ac:e6:2c:76:64:a9:b1:ca:fd:f4:39:d9:9c:60:
         4f:1f:56:e2:45:ad:fb:f6:f4:fc:d2:67:06:a6:b0:c1:88:91:
         6b:a8:84:93:fc:5c:9b:8b:9f:56:e4:aa:2d:8a:7c:45:2d:85:
         28:a0:43:95:d7:ee:3a:91:f0:82:ac:ed:89:c7:c2:8d:e7:7e:
         ac:a3:2e:5c:e8:b5:04:63:ce:6e:cc:ae:97:4c:9b:36:37:af:
         2b:b0:54:c6:e6:87:8b:d6:c1:2e:66:dc:37:83:42:f6:ae:3d:
         34:2b:09:15:80:74:c5:27:be:46:32:5d:cb:c1:93:28:4d:6a:
         3c:9b:fc:2b:63:d9:04:07:f2:9b:55:a0:a8:06:d7:8f:41:a6:
         c1:08:0f:ad:7d:bf:39:60:98:8e:c7:e0:b1:49:da:4e:2f:dc:
         da:85:f7:43:53:2b:37:ef:85:ee:8f:a0:02:13:35:6b:fc:3d:
         1b:fb:83:b4:4d:80:1a:1e:72:a9:96:03:01:fa:f7:17:9c:bd:
         ea:34:f6:5c:60:36:50:cb:de:f7:a3:9d:65:d1:8d:ea:cb:f5:
         50:ab:36:58:bf:b7:d8:63:7c:61:c7:03:7d:64:f0:4e:b0:5b:
         d7:d0:38:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 05:06:16 2026 by rpki-client