Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/957264f8-0474-43d0-9a3b-5f53ce28790d/976bff61-e8bf-3711-88dc-a4ab9c98b531.roa
File:                     976bff61-e8bf-3711-88dc-a4ab9c98b531.roa (raw, json)
Hash identifier:          +LFmYcld/meoMxgBsAI0IEmcMzjMFNhP2fye71u/Rr4=
Subject key identifier:   5B:E5:62:28:0A:AE:CF:DE:EC:08:B6:28:CF:55:BD:3D:AD:D9:C0:17
Certificate issuer:       /CN=957264f8-0474-43d0-9a3b-5f53ce28790d
Certificate serial:       010D0C9F4328584D4D5A5DBE1D47A55336E3D400
Authority key identifier: 8E:9D:11:16:67:5E:D2:48:46:F0:6A:D8:54:07:55:80:F0:16:CC:2F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/957264f8-0474-43d0-9a3b-5f53ce28790d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/957264f8-0474-43d0-9a3b-5f53ce28790d/976bff61-e8bf-3711-88dc-a4ab9c98b531.roa
Signing time:             Fri 27 Mar 2026 01:00:31 +0000
ROA not before:           Fri 27 Mar 2026 01:00:31 +0000
ROA not after:            Thu 25 Jun 2026 01:00:31 +0000
asID:                     15344
IP address blocks:        66.212.62.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/957264f8-0474-43d0-9a3b-5f53ce28790d/957264f8-0474-43d0-9a3b-5f53ce28790d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/957264f8-0474-43d0-9a3b-5f53ce28790d/957264f8-0474-43d0-9a3b-5f53ce28790d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/957264f8-0474-43d0-9a3b-5f53ce28790d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:4d:5a:5d:be:1d:47:a5:53:36:e3:d4:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=957264f8-0474-43d0-9a3b-5f53ce28790d
        Validity
            Not Before: Mar 27 01:00:31 2026 GMT
            Not After : Jun 25 01:00:31 2026 GMT
        Subject: CN=04388f82-a68b-45c7-b949-018d45e23353
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:af:59:1f:a7:e1:cd:5a:22:52:9a:3b:1a:55:
                    ea:6b:9d:27:47:71:10:f7:cd:1b:cc:c0:f5:79:b5:
                    5c:d0:cb:e3:36:4e:f7:f7:85:f8:bc:7a:9e:6e:5b:
                    49:8a:a4:93:fd:d7:c7:1c:f8:7e:5f:b3:a0:e5:ac:
                    d6:96:c1:43:f1:06:55:8b:99:25:92:c6:ac:d6:d7:
                    64:d2:fe:3c:e0:e9:59:9d:80:d0:74:2a:b9:03:34:
                    9d:20:eb:08:89:75:9a:af:bd:41:90:09:73:09:6d:
                    2a:f2:67:45:2f:05:4a:20:ad:95:cd:f1:70:92:3e:
                    7b:48:c4:a0:f5:7b:0e:9e:cc:d5:be:a3:c6:3c:18:
                    8e:34:75:03:59:73:df:81:77:b1:92:48:13:23:f9:
                    df:60:3f:34:cd:b8:af:07:f9:f6:8f:45:8d:aa:d5:
                    a6:ff:c5:c0:fe:48:4f:c6:76:ba:d2:d1:55:ad:31:
                    29:b2:8d:01:82:fd:00:5b:04:d1:e9:00:85:05:53:
                    f8:c1:a3:a5:7f:4b:1e:06:a1:ff:9b:19:19:57:e6:
                    d7:98:22:59:1e:c5:43:5b:d2:a9:02:49:e1:c0:f7:
                    74:94:ff:16:ff:fc:dd:27:6e:21:3d:54:03:4c:52:
                    ca:c1:52:38:1c:eb:c9:bb:8d:85:28:52:2a:29:aa:
                    67:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:E5:62:28:0A:AE:CF:DE:EC:08:B6:28:CF:55:BD:3D:AD:D9:C0:17
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/957264f8-0474-43d0-9a3b-5f53ce28790d/976bff61-e8bf-3711-88dc-a4ab9c98b531.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/957264f8-0474-43d0-9a3b-5f53ce28790d/957264f8-0474-43d0-9a3b-5f53ce28790d.crl

            X509v3 Authority Key Identifier:
                keyid:8E:9D:11:16:67:5E:D2:48:46:F0:6A:D8:54:07:55:80:F0:16:CC:2F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/957264f8-0474-43d0-9a3b-5f53ce28790d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.212.62.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         74:a1:30:43:b6:a4:bc:ea:af:52:14:ff:ba:36:54:17:fb:78:
         a7:f0:6c:4e:5a:cc:c6:9b:71:a6:36:16:a8:b3:cc:d0:df:22:
         65:d6:5d:21:31:8e:36:66:a7:94:23:dd:9e:1d:41:1e:a6:90:
         bb:bd:7c:af:15:60:ba:b1:a4:b5:7f:fe:cb:75:28:b4:e3:e4:
         17:4f:f0:4b:99:bf:12:84:ad:e1:0c:5c:b8:e7:f6:d2:31:0c:
         12:b4:75:29:b3:97:31:0e:1f:a3:67:6e:17:e7:84:c8:d0:32:
         eb:bb:15:ea:e0:69:b3:92:b7:0d:d8:ea:da:70:0b:44:97:0a:
         70:69:e4:ad:a9:88:88:16:a8:94:d2:dc:27:77:38:b2:c9:8a:
         d0:64:64:f9:d5:8e:6b:fb:bb:17:8a:ba:69:e6:06:69:2f:6d:
         7a:69:4f:7d:8f:d7:02:29:a7:cf:37:19:1b:c1:b1:38:8d:d7:
         3e:48:9d:21:7d:3c:bb:eb:39:39:24:34:9a:f4:25:ff:1a:89:
         76:ee:53:59:fa:af:bc:a9:82:88:7e:b8:e1:28:a2:ac:69:04:
         ca:2d:1c:a4:dc:2e:9d:0f:6d:6f:1c:b5:84:a6:eb:16:c6:a9:
         5b:09:c1:82:b0:a7:22:61:85:2c:2a:29:3a:3d:19:fe:f9:f5:
         4a:0c:ad:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 03:45:23 2026 by rpki-client