Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/a61ac961-5ff2-3cfb-a919-e0928d53be63.roa
File:                     a61ac961-5ff2-3cfb-a919-e0928d53be63.roa (raw, json)
Hash identifier:          cZvxWjLjgPiPF/nBdFW6WuFtR26Ji9AuSJgLRVI/I/o=
Subject key identifier:   33:D9:2C:10:FE:80:73:35:60:4C:EF:DB:63:A3:1D:DE:0D:6F:C3:C0
Certificate issuer:       /CN=24fa05bf-5b46-4a55-bd55-4891d21cb24f
Certificate serial:       010D0C9F4328584E8DEFAAB4BD3364B86E108E50
Authority key identifier: F7:6F:8C:D8:57:DC:73:3D:90:CF:C1:F9:F3:DF:C0:38:A5:E8:74:80
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/a61ac961-5ff2-3cfb-a919-e0928d53be63.roa
Signing time:             Sun 19 Jul 2026 21:00:12 +0000
ROA not before:           Sun 19 Jul 2026 21:00:12 +0000
ROA not after:            Sat 17 Oct 2026 21:00:12 +0000
asID:                     394437
IP address blocks:        66.249.100.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/24fa05bf-5b46-4a55-bd55-4891d21cb24f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/24fa05bf-5b46-4a55-bd55-4891d21cb24f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 05:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:8d:ef:aa:b4:bd:33:64:b8:6e:10:8e:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=24fa05bf-5b46-4a55-bd55-4891d21cb24f
        Validity
            Not Before: Jul 19 21:00:12 2026 GMT
            Not After : Oct 17 21:00:12 2026 GMT
        Subject: CN=dd887d48-5987-4591-b63f-e287c841bfbe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:51:0d:6f:4c:d8:2b:bf:93:c3:88:df:d9:45:
                    28:20:27:bc:8c:00:3f:2d:1d:22:c0:94:6e:48:92:
                    49:de:ba:b5:ae:69:40:d1:74:4b:ea:cd:b6:b3:4d:
                    ec:e5:ea:3b:a8:06:f9:41:dc:4d:89:d4:4d:dd:94:
                    f2:46:73:c1:0f:f4:6a:32:70:20:f0:99:3b:c6:43:
                    7a:73:39:cb:e4:b5:04:cc:d6:e4:48:1c:43:52:87:
                    76:30:67:cd:0d:0d:d7:90:6e:bb:ff:33:17:d2:84:
                    a0:4e:f3:95:97:66:88:ef:b2:be:3d:0f:97:07:42:
                    5d:69:c5:2a:b8:90:f4:db:05:35:3b:28:a5:27:e4:
                    39:0b:4f:2a:60:3a:c6:a7:77:e2:3e:ef:4f:75:7b:
                    07:88:01:c7:23:a9:46:de:bf:cb:c1:79:8d:66:b2:
                    dc:c9:1a:ce:a8:47:89:c8:09:38:d7:58:34:cc:2c:
                    c8:8b:b5:76:dd:4a:6b:20:a6:90:f3:79:34:d0:e6:
                    72:33:33:9b:e5:91:fd:80:61:6d:1c:ff:98:83:0f:
                    71:fc:82:04:7b:9f:a3:54:d9:d7:17:d2:34:15:02:
                    bb:65:dd:85:5b:5d:f5:eb:57:6f:b7:c8:40:a1:7d:
                    0c:90:28:fd:97:6b:80:98:9f:b6:19:e2:59:97:04:
                    38:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:D9:2C:10:FE:80:73:35:60:4C:EF:DB:63:A3:1D:DE:0D:6F:C3:C0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/a61ac961-5ff2-3cfb-a919-e0928d53be63.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/24fa05bf-5b46-4a55-bd55-4891d21cb24f.crl

            X509v3 Authority Key Identifier:
                keyid:F7:6F:8C:D8:57:DC:73:3D:90:CF:C1:F9:F3:DF:C0:38:A5:E8:74:80

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.249.100.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         59:6a:05:d0:8a:b4:ff:f8:06:c5:96:3d:c9:be:02:f0:60:7a:
         ff:55:21:ff:e7:1c:02:79:d1:a6:bb:ff:d7:f3:71:f2:76:e1:
         45:19:f9:a3:8e:bd:e2:5e:8e:25:c5:a8:94:4f:e5:57:6b:64:
         23:89:13:23:57:15:e6:6a:54:00:44:dd:3f:67:95:7f:c8:1b:
         f4:53:d5:38:ce:84:b2:ab:66:ae:cc:7d:08:4a:d3:16:f6:82:
         3a:3c:53:99:3b:da:68:3b:34:26:30:10:67:8d:dc:1a:ab:a2:
         4f:3c:d4:20:91:b8:f7:50:70:7e:0c:67:8a:1a:05:70:04:1a:
         73:45:20:64:cd:c4:01:1c:8d:80:a6:cd:f8:c6:73:44:4d:5a:
         a0:89:49:e9:ad:35:df:a4:51:da:9a:d8:4d:e1:e9:4a:57:ff:
         94:52:62:a6:18:fd:14:76:12:2b:84:46:4e:79:3e:ae:69:9a:
         a3:f6:ac:42:88:f2:54:14:c0:e1:af:26:bd:3c:57:94:52:1f:
         f5:f2:f3:51:21:ac:e6:96:8e:7f:3a:ec:76:1a:39:31:d1:0b:
         4c:b7:af:15:07:ec:15:6b:b4:4f:2f:c9:a4:81:54:bb:2f:5a:
         02:38:19:13:10:a3:84:d6:8c:7f:71:79:72:2f:4b:8f:9e:d6:
         47:82:a2:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 06:06:14 2026 by rpki-client