Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/bc6884d6-b11e-4280-9c4c-8177287d9869/0272f9e1-576e-3684-8d67-64211f32881e.roa
File:                     0272f9e1-576e-3684-8d67-64211f32881e.roa (raw, json)
Hash identifier:          Ku0mac0HZt1c/tYxPwlNNTnX0F+SoNXEWbQMA9f+dmE=
Subject key identifier:   47:43:14:E7:4B:DD:29:91:08:B6:98:61:75:E7:2A:27:4C:03:A1:90
Certificate issuer:       /CN=bc6884d6-b11e-4280-9c4c-8177287d9869
Certificate serial:       010D0C9F4328584F4976DE35A3714CBA7CED6600
Authority key identifier: 15:C8:EE:BC:17:5F:6B:10:C3:DC:7A:CF:57:D4:D1:F3:90:0F:0E:87
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/bc6884d6-b11e-4280-9c4c-8177287d9869.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/bc6884d6-b11e-4280-9c4c-8177287d9869/0272f9e1-576e-3684-8d67-64211f32881e.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     398324
IP address blocks:        66.132.153.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/bc6884d6-b11e-4280-9c4c-8177287d9869/bc6884d6-b11e-4280-9c4c-8177287d9869.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/bc6884d6-b11e-4280-9c4c-8177287d9869/bc6884d6-b11e-4280-9c4c-8177287d9869.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/bc6884d6-b11e-4280-9c4c-8177287d9869.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 08 Oct 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:76:de:35:a3:71:4c:ba:7c:ed:66:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bc6884d6-b11e-4280-9c4c-8177287d9869
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=f5ddfc7f-1039-463f-9491-dc0aa088b854
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:f8:58:77:f9:7a:38:4f:3d:59:03:ee:6b:fe:
                    66:13:d9:72:f3:d8:26:a3:ed:fb:38:db:03:ca:2f:
                    8b:7c:79:f9:4a:3f:26:b3:17:74:46:89:5e:6a:f8:
                    9a:88:2a:56:b7:15:40:03:82:ae:63:62:58:bc:f7:
                    5e:5c:f1:ab:e0:34:0e:14:fb:b1:b2:3b:2c:f7:f0:
                    3e:96:57:8e:0b:de:4e:67:f9:5e:5a:09:e6:de:73:
                    82:fa:10:8f:8a:90:36:4f:56:65:b7:bb:44:c9:cf:
                    41:24:e8:38:b8:07:08:bc:5c:91:b3:52:20:cf:df:
                    2d:7c:bf:39:97:9d:d6:f7:de:60:7b:75:a4:89:1f:
                    61:4e:b7:43:db:d3:ea:e6:3c:86:ea:c8:21:91:a7:
                    f7:37:4a:a2:8d:36:04:2f:c8:52:b6:5b:cf:57:7f:
                    44:e7:85:6f:85:ae:81:b2:a5:5f:97:4d:34:19:49:
                    7b:12:a5:35:3c:6f:00:aa:7d:fc:e6:47:79:4d:74:
                    32:b2:a3:d3:0c:11:12:af:fd:c5:14:70:b8:6a:8f:
                    84:0e:dd:ff:dd:b4:7c:f7:4d:0f:82:13:ca:44:72:
                    13:14:37:1f:c9:52:1d:50:93:b7:bb:45:0b:94:98:
                    53:90:78:97:9c:b2:c0:8b:ce:20:c7:ee:d4:76:5d:
                    70:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:43:14:E7:4B:DD:29:91:08:B6:98:61:75:E7:2A:27:4C:03:A1:90
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/bc6884d6-b11e-4280-9c4c-8177287d9869/0272f9e1-576e-3684-8d67-64211f32881e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/bc6884d6-b11e-4280-9c4c-8177287d9869/bc6884d6-b11e-4280-9c4c-8177287d9869.crl

            X509v3 Authority Key Identifier:
                keyid:15:C8:EE:BC:17:5F:6B:10:C3:DC:7A:CF:57:D4:D1:F3:90:0F:0E:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/bc6884d6-b11e-4280-9c4c-8177287d9869.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.132.153.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4d:a1:10:2e:81:de:af:f1:e9:af:18:83:87:2e:e3:e7:f6:25:
         ed:12:32:6b:a8:70:da:7f:e8:fc:12:5b:2c:46:dc:af:28:8c:
         06:29:b2:10:9d:6e:31:3f:b4:d8:3f:81:6a:72:d6:1d:bb:f5:
         b4:35:51:a5:22:82:33:45:db:0b:34:35:aa:30:3f:a9:05:5f:
         22:55:bb:6c:4a:c7:8b:2b:09:89:47:d5:be:1d:45:0f:f3:57:
         59:e7:ce:01:08:04:31:c3:fe:07:99:81:7b:27:5f:19:e5:84:
         b5:48:ae:00:69:36:b0:5c:5f:9b:db:ec:fc:c9:f9:15:93:49:
         56:8d:df:1f:d2:85:ff:46:a1:f5:5f:6f:0d:ff:cd:64:cb:5e:
         00:ad:56:48:33:54:5d:af:16:6f:3f:98:31:ce:8e:b4:e1:03:
         e2:cc:19:a3:c0:5e:9e:96:e7:25:a0:e0:44:83:f2:d4:60:35:
         90:15:e7:23:f0:e1:d8:cf:de:97:7c:92:75:2b:dc:1a:48:5e:
         59:e4:77:6a:57:eb:df:f2:88:12:f0:d9:c0:38:f2:5a:8b:87:
         b5:8d:ed:23:ec:0e:3e:91:a1:47:61:f5:9c:68:76:07:98:51:
         01:d0:31:a7:5a:68:84:67:a0:4a:a3:a8:2d:81:89:17:9c:19:
         62:5c:d9:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 7 08:50:21 2026 by rpki-client