Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ad6d9c2-d380-4f1f-8f6c-ebc2e503c4a8/e5652748-b21b-3b97-9ed9-0874bee6c5a1.roa
File:                     e5652748-b21b-3b97-9ed9-0874bee6c5a1.roa (raw, json)
Hash identifier:          FRfayNGmeRUHMiOV/fRr9pmEOyZmbfYn5PyLoA7apes=
Subject key identifier:   40:10:D3:0B:ED:31:E6:EF:EE:E5:4B:17:8C:11:D8:BC:BE:25:43:C0
Certificate issuer:       /CN=5ad6d9c2-d380-4f1f-8f6c-ebc2e503c4a8
Certificate serial:       010D0C9F4328584E97B50FBEDFF84735019E7080
Authority key identifier: 92:9F:B9:15:00:7A:DA:95:56:D3:15:81:73:8D:42:02:1C:CA:3A:87
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ad6d9c2-d380-4f1f-8f6c-ebc2e503c4a8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ad6d9c2-d380-4f1f-8f6c-ebc2e503c4a8/e5652748-b21b-3b97-9ed9-0874bee6c5a1.roa
Signing time:             Thu 23 Jul 2026 09:00:11 +0000
ROA not before:           Thu 23 Jul 2026 09:00:11 +0000
ROA not after:            Wed 21 Oct 2026 09:00:11 +0000
asID:                     26677
IP address blocks:        66.97.20.88/29 maxlen: 29
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ad6d9c2-d380-4f1f-8f6c-ebc2e503c4a8/5ad6d9c2-d380-4f1f-8f6c-ebc2e503c4a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ad6d9c2-d380-4f1f-8f6c-ebc2e503c4a8/5ad6d9c2-d380-4f1f-8f6c-ebc2e503c4a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ad6d9c2-d380-4f1f-8f6c-ebc2e503c4a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:97:b5:0f:be:df:f8:47:35:01:9e:70:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5ad6d9c2-d380-4f1f-8f6c-ebc2e503c4a8
        Validity
            Not Before: Jul 23 09:00:11 2026 GMT
            Not After : Oct 21 09:00:11 2026 GMT
        Subject: CN=ed83b956-926b-4b77-98f5-93e4cf898ffe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:d2:45:20:16:a2:df:39:e1:ee:1e:43:e1:80:
                    16:82:3b:56:3e:2d:a5:a9:b8:7b:fd:2d:07:e1:8d:
                    59:65:d5:fa:00:3d:68:d0:87:98:3a:4a:03:57:d0:
                    6a:76:39:89:0b:1b:f1:ce:9e:eb:5c:dd:4e:e0:2d:
                    93:f0:4b:37:ce:28:4a:92:49:3e:64:a3:93:05:15:
                    78:67:af:7b:6e:0a:9f:8c:8e:29:9e:0f:bb:10:99:
                    23:f0:73:aa:71:cc:f6:d5:4a:08:c6:5e:19:18:30:
                    4f:9e:07:d1:7a:2f:bb:ff:e4:ed:13:37:a1:9f:83:
                    82:4c:06:98:c9:7a:99:ad:77:97:91:67:32:37:7c:
                    05:0f:48:b3:95:ce:af:e0:57:23:7d:7e:0f:63:32:
                    2b:69:26:8e:d1:eb:5b:c3:75:47:0c:f8:a3:ed:67:
                    09:1c:a2:bd:e7:d5:3f:60:9f:74:cb:cc:7f:3d:89:
                    f9:1d:da:66:04:2e:59:9f:cc:51:fa:1f:a9:38:0b:
                    d4:48:78:49:4f:b5:38:6b:88:a3:b7:3f:d9:96:9e:
                    48:2d:f9:62:02:27:b2:2e:41:43:87:62:8e:0a:54:
                    af:f5:2b:c6:9c:c7:2c:71:ec:7e:86:9a:28:c3:21:
                    20:e6:50:59:8c:48:9c:b7:fd:6e:63:85:c2:d3:19:
                    76:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:10:D3:0B:ED:31:E6:EF:EE:E5:4B:17:8C:11:D8:BC:BE:25:43:C0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ad6d9c2-d380-4f1f-8f6c-ebc2e503c4a8/e5652748-b21b-3b97-9ed9-0874bee6c5a1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ad6d9c2-d380-4f1f-8f6c-ebc2e503c4a8/5ad6d9c2-d380-4f1f-8f6c-ebc2e503c4a8.crl

            X509v3 Authority Key Identifier:
                keyid:92:9F:B9:15:00:7A:DA:95:56:D3:15:81:73:8D:42:02:1C:CA:3A:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ad6d9c2-d380-4f1f-8f6c-ebc2e503c4a8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.97.20.88/29

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         74:da:9f:87:10:c8:d0:1b:cb:0a:32:e7:b2:83:ae:5f:7f:e1:
         b1:26:de:8c:2a:d2:c7:5a:78:6f:53:d0:3a:46:60:13:fa:91:
         f7:32:ab:9d:03:e7:ec:0e:5c:fe:3e:05:cf:d0:76:13:12:bc:
         02:c4:b5:9a:af:01:9d:f3:13:e4:f6:bb:2f:2c:7c:aa:06:ea:
         1e:c2:ea:70:8c:a4:11:2a:d8:7f:5f:38:ab:ca:1e:6b:7c:e2:
         86:d3:30:0d:fb:49:34:35:de:08:c9:4f:54:b7:14:7d:1a:5f:
         34:81:d3:86:fd:9b:af:97:27:04:e8:49:d7:81:50:1b:23:8b:
         fa:91:cd:31:ad:e1:a0:3e:36:7d:38:0e:4c:54:3c:d8:b3:9c:
         97:78:cc:77:7b:e5:76:8c:bc:60:b1:c1:34:d6:1a:e9:3f:f7:
         dc:fd:b8:26:48:4f:9b:a4:bf:5e:45:b8:2e:46:a9:d9:6a:64:
         14:c6:84:3e:05:91:28:39:b9:b4:2f:82:24:2a:cf:0b:14:28:
         3f:ab:70:51:28:e1:17:40:d4:92:b6:bb:ca:03:79:67:bd:1f:
         bc:a8:c6:70:89:ed:54:70:84:bb:e0:1e:61:af:b1:c0:f7:7a:
         a5:ea:2f:a0:45:5c:7a:72:ab:14:97:11:0d:0f:bc:cf:43:f7:
         a5:0f:5a:6a
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE6XtQ++3/hHNQGecIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWFkNmQ5YzItZDM4MC00ZjFmLThmNmMtZWJjMmU1MDNj
NGE4MB4XDTI2MDcyMzA5MDAxMVoXDTI2MTAyMTA5MDAxMVowLzEtMCsGA1UEAxMk
ZWQ4M2I5NTYtOTI2Yi00Yjc3LTk4ZjUtOTNlNGNmODk4ZmZlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsNJFIBai3znh7h5D4YAWgjtWPi2lqbh7/S0H
4Y1ZZdX6AD1o0IeYOkoDV9BqdjmJCxvxzp7rXN1O4C2T8Es3zihKkkk+ZKOTBRV4
Z697bgqfjI4png+7EJkj8HOqccz21UoIxl4ZGDBPngfRei+7/+TtEzehn4OCTAaY
yXqZrXeXkWcyN3wFD0izlc6v4FcjfX4PYzIraSaO0etbw3VHDPij7WcJHKK959U/
YJ90y8x/PYn5HdpmBC5Zn8xR+h+pOAvUSHhJT7U4a4ijtz/Zlp5ILfliAieyLkFD
h2KOClSv9SvGnMcscex+hpoowyEg5lBZjEict/1uY4XC0xl2NwIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFEAQ0wvtMebv7uVLF4wR2Ly+JUPAMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC81YWQ2
ZDljMi1kMzgwLTRmMWYtOGY2Yy1lYmMyZTUwM2M0YTgvZTU2NTI3NDgtYjIxYi0z
Yjk3LTllZDktMDg3NGJlZTZjNWExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvNWFkNmQ5YzItZDM4MC00ZjFmLThm
NmMtZWJjMmU1MDNjNGE4LzVhZDZkOWMyLWQzODAtNGYxZi04ZjZjLWViYzJlNTAz
YzRhOC5jcmwwHwYDVR0jBBgwFoAUkp+5FQB62pVW0xWBc41CAhzKOocwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC81YWQ2ZDljMi1kMzgwLTRmMWYtOGY2Yy1lYmMy
ZTUwM2M0YTguY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUDQmEUWDBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQB02p+HEMjQG8sKMueyg65ff+GxJt6MKtLHWnhvU9A6RmAT+pH3Mqud
A+fsDlz+PgXP0HYTErwCxLWarwGd8xPk9rsvLHyqBuoewupwjKQRKth/Xziryh5r
fOKG0zAN+0k0Nd4IyU9UtxR9Gl80gdOG/ZuvlycE6EnXgVAbI4v6kc0xreGgPjZ9
OA5MVDzYs5yXeMx3e+V2jLxgscE01hrpP/fc/bgmSE+bpL9eRbguRqnZamQUxoQ+
BZEoObm0L4IkKs8LFCg/q3BRKOEXQNSStrvKA3lnvR+8qMZwie1UcIS74B5hr7HA
93ql6i+gRVx6cqsUlxEND7zPQ/elD1pq
-----END CERTIFICATE-----
Generated at Fri Jul 24 14:25:40 2026 by rpki-client