Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/0a5a6f69-3335-3826-9d7e-893e816a4189.roa
File:                     0a5a6f69-3335-3826-9d7e-893e816a4189.roa (raw, json)
Hash identifier:          aXvrCd/yHVmtFqWbjsP7gatyQ45h5ehBCRx4VTmJCgQ=
Subject key identifier:   E9:5F:12:33:A0:65:28:A9:97:2B:3E:2D:7C:B0:92:D0:49:3B:21:2F
Certificate issuer:       /CN=5dce877b-b7a0-44f5-b8c2-1115311c773e
Certificate serial:       010D0C9F4328584F2D87C2EA4B6E9A5201099800
Authority key identifier: 91:40:49:57:21:04:32:E7:F1:28:40:C4:C1:5B:49:A8:24:DF:F2:2A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/0a5a6f69-3335-3826-9d7e-893e816a4189.roa
Signing time:             Tue 15 Sep 2026 01:00:12 +0000
ROA not before:           Tue 15 Sep 2026 01:00:12 +0000
ROA not after:            Mon 14 Dec 2026 02:00:12 +0000
asID:                     14618
IP address blocks:        207.202.66.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/5dce877b-b7a0-44f5-b8c2-1115311c773e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/5dce877b-b7a0-44f5-b8c2-1115311c773e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 05 Oct 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:2d:87:c2:ea:4b:6e:9a:52:01:09:98:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5dce877b-b7a0-44f5-b8c2-1115311c773e
        Validity
            Not Before: Sep 15 01:00:12 2026 GMT
            Not After : Dec 14 02:00:12 2026 GMT
        Subject: CN=6a7eeb5f-7acb-4218-90ca-c51a86bc2ea5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:4c:b0:ca:43:85:75:78:fa:07:c7:3f:32:a6:
                    15:cb:04:e9:e4:97:76:98:d0:6c:11:ab:99:2e:38:
                    83:56:81:b0:14:07:b4:3b:db:57:d7:54:fe:32:74:
                    ef:13:4e:58:40:7c:ef:da:18:a4:64:19:83:14:0f:
                    53:4e:95:12:b5:e4:bd:5c:84:ce:d3:32:7c:3c:43:
                    bc:1b:5b:ff:54:84:07:80:1a:e2:6c:96:d4:c8:69:
                    bc:f0:be:15:81:ab:f4:f5:c7:5b:c9:0b:f5:aa:11:
                    16:25:e6:db:b0:47:14:ce:69:58:d5:80:64:2b:97:
                    84:fd:f1:5f:0f:1a:82:79:1b:cd:55:2b:80:46:13:
                    dc:a5:27:5d:18:7a:79:ca:33:4f:28:71:a5:3e:3d:
                    23:b7:d9:2d:bf:02:a4:8c:3a:b3:f5:76:bd:cc:83:
                    d5:3a:d7:ef:ff:1d:c2:b9:8a:19:da:e2:9d:75:61:
                    50:47:cf:40:fb:74:92:18:06:d6:22:bf:34:53:19:
                    40:c9:3f:01:d0:31:7e:ce:ed:db:f3:2a:2e:f7:e0:
                    1a:de:68:a9:c0:8b:1c:68:8c:52:55:a6:44:c7:f5:
                    42:c5:fa:ce:a2:de:38:b1:91:54:dd:50:b5:c1:41:
                    dc:df:65:79:fe:33:dd:bd:9e:62:35:fe:6a:9e:92:
                    9a:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:5F:12:33:A0:65:28:A9:97:2B:3E:2D:7C:B0:92:D0:49:3B:21:2F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/0a5a6f69-3335-3826-9d7e-893e816a4189.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/5dce877b-b7a0-44f5-b8c2-1115311c773e.crl

            X509v3 Authority Key Identifier:
                keyid:91:40:49:57:21:04:32:E7:F1:28:40:C4:C1:5B:49:A8:24:DF:F2:2A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.202.66.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         39:8e:86:bc:14:bb:dc:13:7d:c8:4f:2f:90:d7:e1:2b:77:04:
         81:1b:08:d6:ef:12:f7:f7:3c:6c:bb:22:b7:73:26:ab:dd:fe:
         d6:03:c0:ac:61:86:1e:5b:cf:14:b3:a4:d4:09:fb:0a:92:21:
         55:05:f1:a0:45:6b:48:08:31:76:34:c5:0b:6e:99:1f:d2:19:
         fb:6b:43:e4:88:b3:63:c6:ec:95:0b:53:f9:8b:de:05:e9:68:
         81:10:54:5b:2a:a2:76:c4:82:0b:a2:3e:54:ef:53:d2:d7:4c:
         c0:20:4a:23:4e:26:d4:0c:33:86:43:62:13:4d:45:25:b1:2f:
         91:2d:4d:29:12:2f:57:d5:78:78:ee:27:94:0c:c2:ae:55:bd:
         13:f7:9b:af:91:ec:81:8a:66:3a:8d:a8:e7:26:10:12:9e:ef:
         96:74:b3:59:42:8d:85:0c:19:db:eb:74:4a:00:8c:32:22:f3:
         77:aa:28:3c:99:a1:f0:69:93:bd:af:a9:5c:0d:17:65:f3:ac:
         d2:72:e4:e6:8f:8a:2b:d8:a0:5a:d0:11:03:55:18:c4:c8:0f:
         1c:38:51:cb:98:a2:a5:31:25:f9:4d:0c:82:a0:4f:3e:6c:9c:
         17:7c:6b:3f:c1:85:8e:68:63:74:a6:cb:48:9e:42:4f:55:d1:
         ad:71:d8:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 02:45:20 2026 by rpki-client