Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8eaf014d-0b3e-4494-b07f-b3254fddef6a/fade97ca-586d-3ef2-b3b6-9d7106b26189.roa
File:                     fade97ca-586d-3ef2-b3b6-9d7106b26189.roa (raw, json)
Hash identifier:          09gorhvZx341cHidIbGjS3wIMT6WmM79kdbcPo5CL6I=
Subject key identifier:   17:55:15:05:5A:DA:9F:A7:1D:53:49:A5:24:DA:10:21:33:5F:D4:1A
Certificate issuer:       /CN=8eaf014d-0b3e-4494-b07f-b3254fddef6a
Certificate serial:       010D0C9F4328584D9A2021CF9D8834FD8A1F4340
Authority key identifier: AA:77:EC:D7:ED:F3:CC:EC:71:4B:19:7A:98:89:7F:7E:8F:90:76:E8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8eaf014d-0b3e-4494-b07f-b3254fddef6a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8eaf014d-0b3e-4494-b07f-b3254fddef6a/fade97ca-586d-3ef2-b3b6-9d7106b26189.roa
Signing time:             Thu 23 Apr 2026 13:00:32 +0000
ROA not before:           Thu 23 Apr 2026 13:00:32 +0000
ROA not after:            Wed 22 Jul 2026 13:00:32 +0000
asID:                     394772
IP address blocks:        66.223.120.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8eaf014d-0b3e-4494-b07f-b3254fddef6a/8eaf014d-0b3e-4494-b07f-b3254fddef6a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8eaf014d-0b3e-4494-b07f-b3254fddef6a/8eaf014d-0b3e-4494-b07f-b3254fddef6a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8eaf014d-0b3e-4494-b07f-b3254fddef6a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:9a:20:21:cf:9d:88:34:fd:8a:1f:43:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8eaf014d-0b3e-4494-b07f-b3254fddef6a
        Validity
            Not Before: Apr 23 13:00:32 2026 GMT
            Not After : Jul 22 13:00:32 2026 GMT
        Subject: CN=6d62b358-2e2b-44fa-9a65-52acc522ba2c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:a4:91:63:03:31:29:32:2f:e8:2d:1c:41:4f:
                    f1:51:25:54:3c:13:32:2e:2b:46:64:a3:24:b9:bf:
                    78:1e:14:53:d5:28:97:bf:b8:c5:a8:ea:e2:d2:a2:
                    8b:76:37:82:fe:3a:0b:a2:f3:19:3f:d9:85:52:2e:
                    ee:4b:a3:22:09:71:74:1f:1c:a9:bd:d8:62:e9:26:
                    49:c2:ab:ea:db:74:65:6a:3b:62:5c:c8:64:56:55:
                    1d:f5:35:3c:24:cf:57:12:29:81:5d:95:20:2a:56:
                    b6:fe:a6:2e:1b:ed:e3:7b:27:18:36:55:2c:dd:d1:
                    b0:60:ea:03:d5:22:3d:73:81:49:82:da:76:14:c6:
                    6a:79:77:8f:ee:c3:9b:ec:64:6d:88:0b:2a:9c:ae:
                    16:05:53:24:31:82:38:66:7c:2b:d4:f0:31:93:d1:
                    6a:f6:37:f2:c8:6e:2f:43:46:ff:2a:fb:6a:aa:51:
                    18:8f:d6:65:18:98:2c:fb:b3:e9:52:6e:40:db:5f:
                    d9:29:0d:3e:7c:6e:d1:a7:38:8e:fa:9e:d8:3b:bc:
                    7f:82:04:3c:85:69:15:4b:ec:a8:88:94:d9:8a:69:
                    94:90:ec:aa:a8:c5:02:a5:97:33:f7:53:d6:e6:2e:
                    7d:87:a1:76:fd:25:5a:19:55:da:e1:16:4a:16:b7:
                    74:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:55:15:05:5A:DA:9F:A7:1D:53:49:A5:24:DA:10:21:33:5F:D4:1A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8eaf014d-0b3e-4494-b07f-b3254fddef6a/fade97ca-586d-3ef2-b3b6-9d7106b26189.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8eaf014d-0b3e-4494-b07f-b3254fddef6a/8eaf014d-0b3e-4494-b07f-b3254fddef6a.crl

            X509v3 Authority Key Identifier:
                keyid:AA:77:EC:D7:ED:F3:CC:EC:71:4B:19:7A:98:89:7F:7E:8F:90:76:E8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8eaf014d-0b3e-4494-b07f-b3254fddef6a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.223.120.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         65:dd:cb:9e:ba:1d:66:16:bf:e0:fe:c2:7f:54:78:5f:c6:49:
         d5:fd:2d:0c:64:cd:1a:cd:05:07:80:d7:cf:7d:1d:b8:61:68:
         93:5c:2c:52:62:4d:82:09:b9:cd:8f:fe:f6:85:f2:02:14:33:
         58:46:e9:59:6b:25:ef:89:04:77:e6:c3:17:27:ad:1d:46:5f:
         e5:bf:5e:d1:b8:a8:ea:30:56:75:e4:1f:b6:99:68:29:9d:7f:
         1e:98:5a:6c:22:b7:1e:21:fc:ce:74:74:c1:03:50:23:c4:f8:
         e5:7e:f5:f5:01:0a:96:7b:e9:81:8f:eb:cd:5f:5e:f8:4d:6a:
         4e:6b:39:79:42:46:b1:9a:83:4e:32:50:cb:e9:d7:62:6f:2e:
         97:64:f2:4a:72:1f:46:a3:10:88:f4:02:d6:cb:e7:7c:bf:eb:
         33:d9:c8:ec:63:64:71:09:48:d0:0b:84:8a:3e:3d:a5:44:49:
         d7:95:a7:8d:99:23:58:f9:91:37:d6:fb:7c:b7:e6:e6:ed:84:
         0d:c3:be:a4:43:f1:6f:7e:5d:b6:39:d8:e3:cc:10:ba:06:82:
         69:38:bf:50:8a:c5:71:0e:63:6a:d6:aa:af:2a:36:e4:19:43:
         3c:10:cb:e2:74:8d:bc:8b:9d:50:a5:7f:3e:b1:05:3e:6c:0e:
         31:ca:3f:11
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2aICHPnYg0/YofQ0AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOGVhZjAxNGQtMGIzZS00NDk0LWIwN2YtYjMyNTRmZGRl
ZjZhMB4XDTI2MDQyMzEzMDAzMloXDTI2MDcyMjEzMDAzMlowLzEtMCsGA1UEAxMk
NmQ2MmIzNTgtMmUyYi00NGZhLTlhNjUtNTJhY2M1MjJiYTJjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvqSRYwMxKTIv6C0cQU/xUSVUPBMyLitGZKMk
ub94HhRT1SiXv7jFqOri0qKLdjeC/joLovMZP9mFUi7uS6MiCXF0Hxypvdhi6SZJ
wqvq23RlajtiXMhkVlUd9TU8JM9XEimBXZUgKla2/qYuG+3jeycYNlUs3dGwYOoD
1SI9c4FJgtp2FMZqeXeP7sOb7GRtiAsqnK4WBVMkMYI4Znwr1PAxk9Fq9jfyyG4v
Q0b/KvtqqlEYj9ZlGJgs+7PpUm5A21/ZKQ0+fG7RpziO+p7YO7x/ggQ8hWkVS+yo
iJTZimmUkOyqqMUCpZcz91PW5i59h6F2/SVaGVXa4RZKFrd0yQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFBdVFQVa2p+nHVNJpSTaECEzX9QaMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi84ZWFm
MDE0ZC0wYjNlLTQ0OTQtYjA3Zi1iMzI1NGZkZGVmNmEvZmFkZTk3Y2EtNTg2ZC0z
ZWYyLWIzYjYtOWQ3MTA2YjI2MTg5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02
Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvOGVhZjAxNGQtMGIzZS00NDk0LWIw
N2YtYjMyNTRmZGRlZjZhLzhlYWYwMTRkLTBiM2UtNDQ5NC1iMDdmLWIzMjU0ZmRk
ZWY2YS5jcmwwHwYDVR0jBBgwFoAUqnfs1+3zzOxxSxl6mIl/fo+QdugwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm
Ny1iNTk5LWU5ZDBlOTgxZDliZi84ZWFmMDE0ZC0wYjNlLTQ0OTQtYjA3Zi1iMzI1
NGZkZGVmNmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCQt94MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGXdy566HWYWv+D+wn9UeF/GSdX9LQxkzRrNBQeA1899HbhhaJNcLFJi
TYIJuc2P/vaF8gIUM1hG6VlrJe+JBHfmwxcnrR1GX+W/XtG4qOowVnXkH7aZaCmd
fx6YWmwitx4h/M50dMEDUCPE+OV+9fUBCpZ76YGP681fXvhNak5rOXlCRrGag04y
UMvp12JvLpdk8kpyH0ajEIj0AtbL53y/6zPZyOxjZHEJSNALhIo+PaVESdeVp42Z
I1j5kTfW+3y35ubthA3DvqRD8W9+XbY52OPMELoGgmk4v1CKxXEOY2rWqq8qNuQZ
QzwQy+J0jbyLnVClfz6xBT5sDjHKPxE=
-----END CERTIFICATE-----
Generated at Wed May 13 01:40:09 2026 by rpki-client