Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/daf7c8d7-e2a6-3ba8-a84a-052510cb46ee.roa
File:                     daf7c8d7-e2a6-3ba8-a84a-052510cb46ee.roa (raw, json)
Hash identifier:          fMFVD1p359VyMOVv9+ZtSE9cI4rHEZrg61Kbtw8A0Hg=
Subject key identifier:   06:E0:F9:9C:50:60:17:3D:4F:E2:CB:B9:96:0A:67:E4:DA:AE:51:71
Certificate issuer:       /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial:       010D0C9F4328584F4C3DB5A9984760EEE6CC1F80
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/daf7c8d7-e2a6-3ba8-a84a-052510cb46ee.roa
Signing time:             Sat 26 Sep 2026 01:00:13 +0000
ROA not before:           Sat 26 Sep 2026 01:00:13 +0000
ROA not after:            Fri 25 Dec 2026 02:00:13 +0000
asID:                     15169
IP address blocks:        66.249.80.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Sep 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:4c:3d:b5:a9:98:47:60:ee:e6:cc:1f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
        Validity
            Not Before: Sep 26 01:00:13 2026 GMT
            Not After : Dec 25 02:00:13 2026 GMT
        Subject: CN=cea98e4e-cf7a-46c9-8900-b10964420d5d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:32:8d:92:60:24:32:a5:f3:ba:96:38:41:1e:
                    06:ec:cd:56:37:8c:b3:fd:b7:37:a5:0a:ac:63:db:
                    6e:51:b1:9b:ac:dd:91:09:8e:f5:3b:c2:2e:46:87:
                    1e:fe:1a:52:85:3b:a6:67:e0:d8:1a:16:ef:79:01:
                    b7:17:fa:30:0f:2c:9f:57:d4:d4:f1:c8:a9:b5:fd:
                    83:a9:1f:ff:b8:a4:6b:26:54:b1:ad:de:96:0f:11:
                    b6:05:73:d7:1a:99:93:a7:da:59:16:dc:e2:c1:cf:
                    7e:cb:a0:18:2a:d1:59:c7:71:d1:49:0a:64:58:89:
                    7c:aa:90:08:81:75:11:d0:5d:ad:8e:5d:49:dc:2d:
                    0d:38:d6:1e:00:61:61:4d:28:89:db:51:90:07:3a:
                    f2:20:35:f5:7a:3c:86:ce:5e:e1:54:84:c3:16:8e:
                    cb:0a:4d:4a:ab:7c:5b:8f:fd:21:51:e3:56:ca:e8:
                    28:19:ef:c3:b9:92:95:87:82:44:6e:19:90:be:d0:
                    17:5d:0c:cd:f4:d5:51:07:d4:85:ed:98:92:8e:86:
                    5e:43:e1:0f:5c:76:b1:7c:8b:1c:5c:22:c7:6a:24:
                    3a:27:98:5a:d1:7f:62:99:a5:0d:07:db:71:90:e8:
                    8c:96:95:b1:73:4f:12:b4:df:90:e9:a5:35:25:06:
                    f5:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:E0:F9:9C:50:60:17:3D:4F:E2:CB:B9:96:0A:67:E4:DA:AE:51:71
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/daf7c8d7-e2a6-3ba8-a84a-052510cb46ee.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl

            X509v3 Authority Key Identifier:
                keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.249.80.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2b:b7:5c:c6:7f:1f:86:b2:bf:56:c1:57:80:60:78:d3:89:8d:
         b4:3d:f4:a2:b7:e9:4f:ec:71:ad:74:1b:94:07:6e:85:fc:3a:
         84:5f:1f:d8:19:a2:f2:4a:9d:7f:48:16:be:0b:c4:ce:56:b5:
         51:d5:47:77:f7:96:1f:b9:ea:ff:57:1f:84:fb:77:2c:52:13:
         b8:88:6d:d2:d9:e6:61:e8:7b:50:7c:f2:a3:00:0b:4a:44:33:
         92:b0:fc:27:af:c9:80:4a:f6:63:e4:7c:65:b5:12:2d:03:15:
         4b:22:c8:25:c7:6f:8e:ca:5f:0b:8c:58:ef:54:c2:5b:30:ff:
         22:29:a8:2d:99:4f:f2:06:eb:f8:63:0a:2f:b8:27:33:02:61:
         26:76:a7:ef:a4:66:19:d7:9f:0d:ab:4d:ae:10:9a:c9:44:85:
         98:41:12:72:80:c3:b9:99:75:93:67:52:78:0d:d1:25:cb:c7:
         8d:22:d7:a9:e2:67:89:cd:f1:9d:73:d9:57:91:b8:60:03:9e:
         94:69:dc:e1:cb:31:2b:41:32:3b:05:52:4a:49:ee:9b:3a:0e:
         8d:cf:9f:4b:7b:a4:c4:2a:bb:29:f4:e1:21:3a:e0:47:c1:55:
         8a:5b:68:f8:bb:b6:a1:fd:39:6c:17:9a:03:83:7d:3c:a1:91:
         10:dd:ee:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 04:09:06 2026 by rpki-client