Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/8b7092fe-9be9-38d5-b66d-816731ea68cc.roa
File:                     8b7092fe-9be9-38d5-b66d-816731ea68cc.roa (raw, json)
Hash identifier:          MMtN+PkVPdTn/HWlRmdcsG+1YJOMSusCSI5t97qaUiI=
Subject key identifier:   73:0C:BD:C9:C5:B0:F0:79:68:40:50:28:2E:CF:3C:C9:9F:FE:69:6B
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584F480D618FFCAEF1F1BDEAB580
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/8b7092fe-9be9-38d5-b66d-816731ea68cc.roa
Signing time:             Thu 24 Sep 2026 13:00:12 +0000
ROA not before:           Thu 24 Sep 2026 13:00:12 +0000
ROA not after:            Wed 23 Dec 2026 14:00:12 +0000
asID:                     63981
IP address blocks:        66.160.164.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Sep 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:48:0d:61:8f:fc:ae:f1:f1:bd:ea:b5:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Sep 24 13:00:12 2026 GMT
            Not After : Dec 23 14:00:12 2026 GMT
        Subject: CN=63f0694b-ea81-48e1-a284-43934ea5654a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:fa:09:0c:23:9e:7c:f9:1d:ff:b5:b7:21:c2:
                    32:37:dc:c9:ab:24:73:74:74:b9:fa:8e:ca:54:80:
                    30:a1:dd:e7:37:72:46:e0:3f:40:27:ea:d8:08:d3:
                    6a:15:07:0b:11:14:1c:7d:37:9a:53:cb:5e:03:bb:
                    24:c9:a0:37:19:68:09:36:14:b0:7a:f1:db:19:f8:
                    dc:78:d8:ce:2d:57:19:dd:ef:d0:a8:b0:f4:3d:39:
                    c2:01:59:54:6a:d1:00:ed:4e:10:37:0d:6c:aa:cd:
                    d7:a3:53:ce:06:c8:cd:90:30:86:dd:b0:85:14:db:
                    1c:4a:52:cc:53:14:32:5c:c1:1f:de:e3:19:53:2f:
                    6e:1f:81:70:6a:60:38:d6:8d:53:c4:b2:f9:5b:9d:
                    c3:01:95:0f:fa:0b:7d:6f:aa:92:62:da:0a:d1:38:
                    88:04:a2:5b:ef:86:d1:3f:d1:ca:1d:79:b0:63:8b:
                    2b:28:d2:73:df:f5:dd:71:29:ae:82:c9:5c:e0:da:
                    cd:7b:a9:29:af:de:2e:39:f4:85:22:ef:8f:61:d3:
                    a0:1d:38:54:d6:b8:f4:d4:92:6d:8f:79:5a:19:c7:
                    20:95:67:55:fa:f2:e5:ad:32:c4:fb:e0:3a:7d:c8:
                    45:6d:09:7d:c1:2e:02:1b:0a:d3:94:dc:35:f9:40:
                    06:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:0C:BD:C9:C5:B0:F0:79:68:40:50:28:2E:CF:3C:C9:9F:FE:69:6B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/8b7092fe-9be9-38d5-b66d-816731ea68cc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.160.164.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         bb:51:f5:cb:d4:34:34:e6:4e:46:12:0a:69:0f:05:75:b9:ab:
         ee:6b:62:fa:04:73:54:1a:cd:66:60:f0:c0:42:5a:b5:ec:10:
         23:d4:fc:5a:ef:14:ab:d2:4f:10:0c:aa:c7:92:fa:02:c5:74:
         75:d2:f1:a3:f4:05:35:d8:e1:96:03:65:41:7c:2d:cb:19:9b:
         f9:03:ba:0d:88:f4:17:90:0e:b5:55:35:fc:4d:88:58:74:75:
         3e:d2:9b:d4:9b:60:41:ed:d2:63:2f:64:fc:03:b3:57:5e:d8:
         0b:7d:39:12:0e:0c:c2:63:af:ae:25:20:2c:73:e6:ff:9f:08:
         b8:bf:83:b0:94:99:e7:c6:8e:8e:f3:d8:c2:68:4a:30:d6:c2:
         68:0c:2e:39:da:2e:8f:29:6e:eb:f4:15:5b:9c:aa:21:e2:38:
         c0:b6:5c:87:dd:59:ec:0c:65:0d:b3:bf:93:27:18:01:91:e1:
         13:f8:ef:fd:ae:f3:72:23:95:84:a6:4d:11:75:ba:76:83:a4:
         e6:82:5c:a4:a7:8c:d9:f6:c4:a0:38:98:5b:97:a0:52:c6:86:
         17:d4:0a:1c:cc:52:5c:81:d0:2f:66:c1:a0:2c:dd:16:b5:2b:
         81:79:fb:b3:76:95:27:5d:73:22:d9:53:8e:31:22:b8:87:1d:
         36:c6:69:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 06:59:18 2026 by rpki-client