Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/58d2b29f-1da9-4b65-a82f-389822bed566/dc287312-eccd-3850-9465-849bc58be72d.roa
File:                     dc287312-eccd-3850-9465-849bc58be72d.roa (raw, json)
Hash identifier:          MqWMAaUxxG+1aOEY4uBhEfzzhPcvj4GDveNY2zKEVMc=
Subject key identifier:   F1:8E:A8:BF:94:13:51:E9:6F:DA:B9:3C:84:1A:9E:CB:22:CF:2F:53
Certificate issuer:       /CN=58d2b29f-1da9-4b65-a82f-389822bed566
Certificate serial:       010D0C9F4328584EED520825E46182D165AA4B80
Authority key identifier: 3F:C5:A3:7A:1A:1F:74:88:44:CA:33:CB:C7:AD:B9:B5:60:EA:10:70
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/58d2b29f-1da9-4b65-a82f-389822bed566.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/58d2b29f-1da9-4b65-a82f-389822bed566/dc287312-eccd-3850-9465-849bc58be72d.roa
Signing time:             Sun 23 Aug 2026 01:00:12 +0000
ROA not before:           Sun 23 Aug 2026 01:00:12 +0000
ROA not after:            Sat 21 Nov 2026 02:00:12 +0000
asID:                     16509
IP address blocks:        66.81.241.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/58d2b29f-1da9-4b65-a82f-389822bed566/58d2b29f-1da9-4b65-a82f-389822bed566.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/58d2b29f-1da9-4b65-a82f-389822bed566/58d2b29f-1da9-4b65-a82f-389822bed566.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/58d2b29f-1da9-4b65-a82f-389822bed566.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 26 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:ed:52:08:25:e4:61:82:d1:65:aa:4b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=58d2b29f-1da9-4b65-a82f-389822bed566
        Validity
            Not Before: Aug 23 01:00:12 2026 GMT
            Not After : Nov 21 02:00:12 2026 GMT
        Subject: CN=92a53e9a-5e16-4821-bf92-89a69138bed6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:18:7b:42:e9:32:bc:37:c7:04:98:91:b4:48:
                    1c:d5:6f:cf:84:e3:d8:6f:fe:cd:51:53:d0:25:a2:
                    13:f3:21:5d:c5:f6:3f:41:98:4c:d4:c3:81:a4:96:
                    5b:ba:d7:b0:21:f6:98:88:99:2e:39:d0:72:64:ff:
                    7a:f3:a2:f1:81:ae:59:6e:49:dc:db:c8:a2:bd:3b:
                    57:01:9b:6a:64:50:26:c7:c5:f8:ca:9b:ba:2f:de:
                    8b:be:9d:b9:3d:68:2a:ad:98:15:35:3a:6a:b8:17:
                    20:0d:1a:6c:69:33:41:87:93:51:21:a5:4d:79:0c:
                    2d:11:4d:ab:fb:7c:a4:4a:87:9e:b7:fd:52:de:c1:
                    e7:03:ed:a7:60:b8:27:ce:25:e4:6a:cd:45:a3:e2:
                    c9:4b:71:fb:5b:0a:de:df:a1:34:22:17:a2:2c:86:
                    8d:22:9a:8f:de:ff:3a:27:20:63:2c:5b:a9:76:87:
                    73:d5:ca:c4:8c:0d:b0:b9:30:0e:99:89:78:27:65:
                    a7:1c:8f:0b:8f:6d:8a:33:1c:d7:4d:d5:42:d0:39:
                    48:7f:2a:b6:76:6c:40:a1:66:ec:9e:85:2f:bf:93:
                    46:89:f7:66:8b:63:0b:a7:81:95:80:59:8a:a2:6d:
                    59:ab:a9:81:52:57:c0:7f:4c:43:00:8e:bf:95:ba:
                    8b:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:8E:A8:BF:94:13:51:E9:6F:DA:B9:3C:84:1A:9E:CB:22:CF:2F:53
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/58d2b29f-1da9-4b65-a82f-389822bed566/dc287312-eccd-3850-9465-849bc58be72d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/58d2b29f-1da9-4b65-a82f-389822bed566/58d2b29f-1da9-4b65-a82f-389822bed566.crl

            X509v3 Authority Key Identifier:
                keyid:3F:C5:A3:7A:1A:1F:74:88:44:CA:33:CB:C7:AD:B9:B5:60:EA:10:70

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/58d2b29f-1da9-4b65-a82f-389822bed566.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.81.241.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         71:50:c2:a1:e5:0a:5e:6f:4b:b9:a9:81:de:81:4e:01:cf:88:
         75:7d:77:7e:48:89:e1:3d:bc:c0:b4:ed:25:d3:a0:d1:12:b3:
         35:8d:08:12:bc:93:f9:0d:af:d6:b8:e6:82:a0:70:b7:38:b9:
         c4:15:36:e6:b4:42:b1:a1:19:cf:e7:65:7c:ac:93:74:cb:82:
         c6:d4:5a:9a:d8:53:eb:80:f4:44:37:ef:26:3b:63:6e:58:47:
         48:5c:bc:1d:49:6a:90:f2:ab:f9:86:bb:24:c8:df:c5:5f:3a:
         50:af:ae:81:cf:e5:cc:a3:d5:80:ee:ab:4f:2c:d7:2b:e9:89:
         d2:23:dd:6d:cf:7f:38:91:35:9f:64:3d:dd:2e:0f:62:fd:f2:
         d9:32:74:81:db:0f:bb:4e:a9:05:96:97:11:90:1e:c6:73:4d:
         7e:7d:9f:11:2a:df:fa:67:64:1c:d0:c4:be:18:9f:99:01:7a:
         7c:92:66:96:93:10:9d:fe:47:77:06:93:8d:1d:cc:ea:93:6d:
         62:5c:ff:de:3f:ad:4d:b0:f9:e0:3a:3e:e9:0e:84:7a:07:8d:
         61:0d:50:ab:7a:8b:35:68:3f:01:7a:a8:6e:9c:c9:27:cf:40:
         c3:31:03:81:54:04:1b:49:d4:31:23:fc:f4:cf:e8:e8:45:6b:
         8d:90:38:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 15:10:47 2026 by rpki-client