Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842/97b38ee8-937f-3114-b811-73b2bff90459.roa
File:                     97b38ee8-937f-3114-b811-73b2bff90459.roa (raw, json)
Hash identifier:          N3NuzuP70JVSLwUOErIYY2YJC4+9oXFh9aM1OvYIkwM=
Subject key identifier:   6B:FD:6A:29:89:A1:9D:99:03:19:31:0C:02:8D:CE:AC:DE:6B:70:3A
Certificate issuer:       /CN=4e06497e-e9cc-45cb-85d6-cf2e58e51842
Certificate serial:       010D0C9F4328584F31B7C3DD3A75BC593DF7A780
Authority key identifier: 57:6F:9F:C6:66:F6:D1:29:CC:7F:C8:0E:E5:F8:47:B4:CB:F4:D1:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842/97b38ee8-937f-3114-b811-73b2bff90459.roa
Signing time:             Wed 16 Sep 2026 13:00:12 +0000
ROA not before:           Wed 16 Sep 2026 13:00:12 +0000
ROA not after:            Tue 15 Dec 2026 14:00:12 +0000
asID:                     2559
IP address blocks:        66.185.182.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842/4e06497e-e9cc-45cb-85d6-cf2e58e51842.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842/4e06497e-e9cc-45cb-85d6-cf2e58e51842.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 24 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:31:b7:c3:dd:3a:75:bc:59:3d:f7:a7:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e06497e-e9cc-45cb-85d6-cf2e58e51842
        Validity
            Not Before: Sep 16 13:00:12 2026 GMT
            Not After : Dec 15 14:00:12 2026 GMT
        Subject: CN=15666680-1543-4f3d-ab61-9850b39752fd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:5f:35:28:f3:f0:3d:68:7e:de:68:a6:d2:12:
                    98:64:81:73:f9:ae:77:11:99:64:9b:60:8e:d7:79:
                    23:9d:99:aa:08:1f:09:d9:51:50:7c:a7:f5:b9:11:
                    06:54:22:57:7d:30:ac:1d:71:21:45:a5:46:16:68:
                    66:f6:16:0b:aa:f4:24:2b:e2:d9:82:0c:ce:51:10:
                    cf:94:28:70:00:b6:c3:fe:8b:85:27:4a:13:c0:f3:
                    1b:84:21:d6:d5:a0:d4:39:0c:ff:25:96:f6:94:6d:
                    ab:e9:c9:15:4f:74:7e:08:f6:b8:af:33:3e:20:a4:
                    ea:eb:06:e9:ca:1e:af:5b:cb:9b:33:dc:ab:08:51:
                    ff:20:38:93:20:6b:ec:2a:5b:ed:76:8b:a6:2a:ef:
                    c5:49:9a:89:3a:06:8e:6b:c6:0a:da:c8:6c:0e:4d:
                    64:82:47:e8:29:9b:fa:da:4a:44:a4:fe:70:b6:fb:
                    7a:70:28:33:b0:cd:a3:f0:7f:f9:c0:3a:a1:e5:59:
                    2f:a7:ff:31:a8:2b:97:5e:a1:e7:bd:c5:ae:ea:be:
                    1c:e4:06:5e:60:cc:c8:2d:c1:e3:3b:d4:19:be:2d:
                    d1:db:05:f1:ea:fa:c3:ea:b0:29:1f:bc:3f:4d:c0:
                    0d:9e:25:a0:c7:93:80:6b:3b:f6:ea:97:25:b2:5c:
                    9a:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:FD:6A:29:89:A1:9D:99:03:19:31:0C:02:8D:CE:AC:DE:6B:70:3A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842/97b38ee8-937f-3114-b811-73b2bff90459.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842/4e06497e-e9cc-45cb-85d6-cf2e58e51842.crl

            X509v3 Authority Key Identifier:
                keyid:57:6F:9F:C6:66:F6:D1:29:CC:7F:C8:0E:E5:F8:47:B4:CB:F4:D1:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.185.182.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         10:83:a8:c8:b4:d1:5a:22:82:0b:3e:c2:f9:ce:d8:f9:ca:13:
         6b:d1:b1:3f:aa:45:39:fc:2c:06:c3:d3:f6:78:dc:91:c2:e7:
         ca:1b:aa:97:7c:d8:9a:fe:d1:37:e7:ff:5a:10:66:10:3c:a8:
         a7:69:b6:f2:ab:e2:64:d0:66:87:ed:63:2f:71:5d:a0:47:47:
         fe:bc:cf:f2:b0:23:5a:c4:3e:a4:1a:0f:2b:35:df:6f:56:5f:
         30:f6:ce:6e:1b:61:f5:0b:21:5e:1e:e8:75:d7:0b:1a:95:81:
         82:80:13:71:7b:67:aa:84:88:fd:95:3a:44:f2:17:9a:7f:63:
         7a:75:e7:c9:55:c0:7c:9e:ef:a0:51:b7:a5:05:c6:24:a9:e7:
         95:3c:27:3b:09:9e:4f:e1:71:b3:c0:1c:d8:fd:f7:4a:c2:1b:
         f2:de:e6:97:f2:77:5e:e7:67:56:95:ab:0e:16:73:ad:5e:b1:
         12:57:6d:1b:29:32:99:e1:8e:b0:f8:99:92:c5:3f:20:e1:a0:
         aa:f5:e5:c7:9c:56:07:f0:47:8d:bb:6b:25:b2:73:0f:03:0e:
         32:2a:ab:f3:bc:bc:91:c3:01:9b:05:7b:d5:52:1c:6e:8a:70:
         65:7e:0e:fb:7d:89:d8:76:7b:a0:0c:ca:cd:64:91:1d:c1:ba:
         49:d1:e1:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 11:56:16 2026 by rpki-client