Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d170fca2-5f74-4408-8dc9-597ba031cfe2/fc7ae7f5-17b9-3107-92b9-48de9abb8412.roa
File:                     fc7ae7f5-17b9-3107-92b9-48de9abb8412.roa (raw, json)
Hash identifier:          r3is80wiyIxjMrZ6sHKSz/lPBJKIz46heBXT62ytb5A=
Subject key identifier:   C5:E9:85:23:3A:17:34:A2:57:3C:7F:EF:EA:C7:22:85:ED:76:2F:DE
Certificate issuer:       /CN=d170fca2-5f74-4408-8dc9-597ba031cfe2
Certificate serial:       010D0C9F4328584D1707BA3B9EA6B60D8801DBC0
Authority key identifier: FF:28:BA:9B:42:6B:7A:24:D9:A4:AB:B7:91:4D:BD:B3:6F:3F:62:9E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d170fca2-5f74-4408-8dc9-597ba031cfe2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d170fca2-5f74-4408-8dc9-597ba031cfe2/fc7ae7f5-17b9-3107-92b9-48de9abb8412.roa
Signing time:             Sat 07 Mar 2026 14:00:41 +0000
ROA not before:           Sat 07 Mar 2026 14:00:41 +0000
ROA not after:            Fri 05 Jun 2026 13:00:41 +0000
asID:                     16509
IP address blocks:        66.178.143.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d170fca2-5f74-4408-8dc9-597ba031cfe2/d170fca2-5f74-4408-8dc9-597ba031cfe2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d170fca2-5f74-4408-8dc9-597ba031cfe2/d170fca2-5f74-4408-8dc9-597ba031cfe2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d170fca2-5f74-4408-8dc9-597ba031cfe2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:17:07:ba:3b:9e:a6:b6:0d:88:01:db:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d170fca2-5f74-4408-8dc9-597ba031cfe2
        Validity
            Not Before: Mar  7 14:00:41 2026 GMT
            Not After : Jun  5 13:00:41 2026 GMT
        Subject: CN=64653e95-1b79-435e-9f2f-965e228e704c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:3d:32:1d:b5:61:f9:4f:9d:82:1b:a8:45:5c:
                    2f:0c:5b:e1:0b:87:d8:24:85:9b:67:c4:4e:d8:5e:
                    d3:3b:71:d7:5b:7b:ce:10:fd:2f:39:3d:64:a8:8f:
                    55:82:42:3b:1c:5a:bc:af:63:31:7d:5c:b9:0c:5a:
                    94:0a:13:f2:38:44:ea:5a:b7:85:8e:99:6a:dc:5f:
                    4b:a7:26:9a:6b:ac:21:c1:68:7a:e6:ed:5c:98:bb:
                    cc:51:81:b2:2b:69:4d:3b:e5:09:d9:98:34:da:0d:
                    b7:22:82:ef:40:79:d4:f3:7e:20:4f:ca:28:48:15:
                    76:e6:5f:57:dd:ad:3b:ce:45:1a:0b:be:c5:dc:32:
                    93:8f:5f:2a:07:8b:75:8b:39:dc:59:af:1e:43:9e:
                    3f:24:98:32:c9:9d:f7:12:a1:6f:4c:17:d4:16:00:
                    c4:b6:96:05:03:a3:56:e4:f7:dd:f4:b6:2a:0a:64:
                    46:9d:0c:1a:6e:7b:63:a6:31:e0:6e:0c:40:05:24:
                    24:2e:9d:76:c2:82:02:09:22:d8:79:bf:b6:29:45:
                    f3:a1:34:30:c2:ac:5b:17:91:19:19:b0:ee:9a:15:
                    27:9d:60:f6:89:8b:67:3b:4c:02:48:8a:59:73:6b:
                    2d:6c:d8:83:13:ab:fa:ea:a5:86:a1:29:58:3f:ba:
                    a6:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:E9:85:23:3A:17:34:A2:57:3C:7F:EF:EA:C7:22:85:ED:76:2F:DE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d170fca2-5f74-4408-8dc9-597ba031cfe2/fc7ae7f5-17b9-3107-92b9-48de9abb8412.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d170fca2-5f74-4408-8dc9-597ba031cfe2/d170fca2-5f74-4408-8dc9-597ba031cfe2.crl

            X509v3 Authority Key Identifier:
                keyid:FF:28:BA:9B:42:6B:7A:24:D9:A4:AB:B7:91:4D:BD:B3:6F:3F:62:9E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d170fca2-5f74-4408-8dc9-597ba031cfe2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.178.143.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         78:9c:d5:09:3f:a3:21:6b:45:e2:4d:11:86:10:82:a8:1d:7c:
         e7:55:a6:40:e1:b4:e5:ec:05:99:14:5f:0f:0c:91:e2:32:80:
         bb:fb:a9:19:25:8d:c4:79:45:81:46:4b:a7:8e:b4:87:68:12:
         b8:45:13:bf:03:12:f8:97:90:32:a1:06:99:ca:d5:ef:34:9b:
         7c:8e:4c:3d:80:69:07:85:95:09:43:8f:44:f4:12:db:91:8a:
         e9:ba:98:26:f1:c3:3a:f7:c3:31:6d:4f:91:be:5b:b3:83:57:
         f3:25:9c:47:b2:2a:b8:ab:74:f9:2b:ab:f9:e1:6f:52:99:34:
         16:4b:ca:54:7a:b4:a0:0e:43:01:60:96:37:58:cd:d0:ee:b7:
         00:ee:65:5f:c8:09:2b:97:50:08:77:60:c6:f5:d4:2c:c4:5e:
         b7:51:21:f0:35:76:2c:e2:ff:39:f6:27:45:40:ac:0b:26:2e:
         6b:71:fa:7e:1f:30:7b:c9:4f:75:59:52:39:bb:32:ec:03:84:
         e3:ee:95:b5:c0:11:e8:e0:db:7e:0e:7d:69:a1:45:26:56:54:
         2d:27:f6:d8:95:ad:e5:4d:14:72:73:24:49:1c:a9:cf:8e:69:
         85:cf:d3:1a:81:82:52:fc:33:3b:16:de:84:9d:c0:88:09:bc:
         bf:e8:cb:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 03:57:31 2026 by rpki-client