Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/b401b75d-1b75-30fd-9468-b62b2e1167c2.roa
File:                     b401b75d-1b75-30fd-9468-b62b2e1167c2.roa (raw, json)
Hash identifier:          Cf4aDJIuaxujzosquE65TOGN+oiOxttakiRRCqd1Pr8=
Subject key identifier:   DF:E7:99:67:6D:6A:9A:3E:62:34:1A:46:73:F3:D5:FC:EC:D3:29:20
Certificate issuer:       /CN=da370214-1d61-48bf-84a0-a60096ccaae7
Certificate serial:       010D0C9F4328584DA6B0309E32A689D5D5498C80
Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/b401b75d-1b75-30fd-9468-b62b2e1167c2.roa
Signing time:             Tue 28 Apr 2026 01:00:24 +0000
ROA not before:           Tue 28 Apr 2026 01:00:24 +0000
ROA not after:            Mon 27 Jul 2026 01:00:24 +0000
asID:                     206300
IP address blocks:        66.92.249.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:a6:b0:30:9e:32:a6:89:d5:d5:49:8c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7
        Validity
            Not Before: Apr 28 01:00:24 2026 GMT
            Not After : Jul 27 01:00:24 2026 GMT
        Subject: CN=04505fff-8b77-473b-9ae8-d743e8d48405
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:8f:72:86:f4:81:6d:b5:a9:77:e6:12:35:fe:
                    12:12:20:cf:3e:4a:f0:9e:48:17:15:69:66:70:99:
                    24:ed:b6:86:07:0b:b1:0e:28:ec:63:ef:2d:86:8d:
                    59:29:ad:5a:eb:d4:b6:1e:0f:17:82:ba:c1:bc:fa:
                    8f:f9:79:50:fd:12:33:12:e3:40:50:79:82:75:30:
                    e4:cc:d9:51:af:4e:cd:6f:9e:fa:6e:2b:ad:cd:28:
                    49:e1:59:a1:3b:af:0b:ff:3f:b1:29:08:a1:fd:9a:
                    da:65:ed:fd:6e:03:bf:5a:2e:33:13:72:8f:7c:7f:
                    19:67:49:73:de:9a:90:c6:1b:5f:50:89:34:4f:79:
                    fd:20:ac:66:b6:ea:f8:fa:8f:14:9f:08:90:04:50:
                    a8:91:62:bc:d5:39:e8:0b:a6:73:85:16:c9:bd:83:
                    3f:d3:51:b0:de:a0:28:3a:86:38:18:68:63:bd:75:
                    62:3f:13:01:dc:6c:34:56:06:a4:c2:38:ae:1e:c6:
                    11:39:b3:d8:c7:49:c7:74:0b:fe:c0:3b:b2:21:dd:
                    d0:15:d0:ba:99:30:c5:43:d9:a8:27:c4:01:13:28:
                    51:b5:73:31:19:bf:56:da:84:d7:9b:2e:02:59:17:
                    a7:b4:71:71:cd:d7:e7:96:0b:ae:c0:bb:3c:89:84:
                    25:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:E7:99:67:6D:6A:9A:3E:62:34:1A:46:73:F3:D5:FC:EC:D3:29:20
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/b401b75d-1b75-30fd-9468-b62b2e1167c2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl

            X509v3 Authority Key Identifier:
                keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.92.249.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         62:e3:5f:a7:5f:b6:f1:9d:65:e3:54:3b:0e:cc:6f:58:a1:98:
         f8:c2:8c:3c:b7:e8:18:7e:04:4e:24:6c:49:7a:ee:82:91:35:
         4d:c7:6e:5e:fa:2b:af:9c:24:b3:29:08:7e:a8:02:d6:76:c1:
         ee:43:ce:2f:25:bb:18:90:74:b5:99:cb:6c:e7:72:5b:14:2d:
         4a:6a:67:66:bb:05:e2:40:56:1d:15:83:6f:48:bb:b4:dc:cc:
         9c:ca:5f:d3:3f:57:c9:cb:bc:8a:ca:6e:c7:90:7e:f2:87:bc:
         fc:34:b8:7f:3d:20:45:71:22:5a:ad:89:05:c5:6d:fe:45:31:
         4f:4e:24:24:2e:07:bf:2c:f7:02:e2:95:6e:0d:ae:2a:42:da:
         d5:c3:49:79:23:77:e5:f3:ac:e6:52:09:03:34:82:eb:db:2d:
         bf:69:42:50:81:b7:41:b7:30:98:c3:11:59:1e:fe:b9:4b:b2:
         dd:58:57:d1:e9:23:8f:86:3c:d7:0d:6e:68:0f:f4:2a:27:44:
         da:34:5a:ba:49:12:ec:af:37:a9:b7:29:27:e3:63:b1:9f:fe:
         05:70:ac:56:2d:5b:43:dc:39:c3:32:df:9c:af:97:57:9d:eb:
         a7:9d:03:71:9d:fa:30:fa:ea:23:57:a8:eb:c8:e7:e0:ab:f5:
         cb:68:99:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 11:52:07 2026 by rpki-client