Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/92db335e-640b-4ae2-9650-c420af83089d/39d9133d-52e8-3005-a634-1bde80e46901.roa
File:                     39d9133d-52e8-3005-a634-1bde80e46901.roa (raw, json)
Hash identifier:          u3A4famCfUiYBKwglcFXO9/wbxI+qcyyOkf71W3UXho=
Subject key identifier:   4F:6F:CD:CC:0A:EA:EA:20:13:F5:48:3C:21:5F:91:DE:DF:AB:0E:89
Certificate issuer:       /CN=92db335e-640b-4ae2-9650-c420af83089d
Certificate serial:       010D0C9F4328584F2EFAB6457104050063F46380
Authority key identifier: 9B:40:34:1F:25:09:26:BA:B6:19:D2:13:62:66:CE:A9:15:AA:29:F7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/92db335e-640b-4ae2-9650-c420af83089d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/92db335e-640b-4ae2-9650-c420af83089d/39d9133d-52e8-3005-a634-1bde80e46901.roa
Signing time:             Tue 15 Sep 2026 13:27:47 +0000
ROA not before:           Tue 15 Sep 2026 13:27:47 +0000
ROA not after:            Mon 14 Dec 2026 14:27:47 +0000
asID:                     53610
IP address blocks:        66.111.66.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/92db335e-640b-4ae2-9650-c420af83089d/92db335e-640b-4ae2-9650-c420af83089d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/92db335e-640b-4ae2-9650-c420af83089d/92db335e-640b-4ae2-9650-c420af83089d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/92db335e-640b-4ae2-9650-c420af83089d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 29 Sep 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:2e:fa:b6:45:71:04:05:00:63:f4:63:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=92db335e-640b-4ae2-9650-c420af83089d
        Validity
            Not Before: Sep 15 13:27:47 2026 GMT
            Not After : Dec 14 14:27:47 2026 GMT
        Subject: CN=f340ddce-ae54-4789-a312-d7b8b475909c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:f9:db:0b:cd:0a:30:a7:a5:e4:1a:23:15:01:
                    99:bb:ae:9e:8d:6e:20:9f:b8:db:4c:05:a8:d0:f9:
                    e7:32:9d:8b:1a:03:0d:85:ea:36:45:72:4a:6a:54:
                    25:cc:82:6a:74:aa:f0:8f:df:5d:22:9c:9f:a2:08:
                    3a:cf:db:d2:51:54:10:77:24:5f:5d:47:22:9b:a8:
                    c7:26:da:0e:bd:f6:e7:2e:a0:50:db:d6:ee:a9:f9:
                    a6:1c:ce:bd:fb:14:a7:45:68:1a:55:36:fc:b7:34:
                    23:4a:cd:74:1b:6c:08:2a:f9:35:24:02:92:c6:21:
                    02:9f:04:1d:01:2a:49:77:9b:2b:00:cf:8c:f0:c3:
                    d3:9d:28:ec:7c:89:e5:2e:fa:12:47:2c:88:4d:45:
                    e5:65:e4:2d:d5:f0:cd:cd:74:65:3b:da:5e:f7:6e:
                    49:d2:0f:40:02:87:9f:c9:1a:a8:b2:4a:7a:17:6a:
                    9e:66:0a:65:28:23:a1:ed:9f:bb:df:6a:b2:1f:a4:
                    3f:4b:a2:a6:3c:f4:70:be:cc:53:3e:78:7f:e2:d4:
                    66:52:f4:b6:75:18:9f:50:41:3b:ae:ba:f1:a2:64:
                    ca:65:0d:b6:01:d6:ac:dd:97:e7:86:33:f2:65:8e:
                    db:97:6e:a7:27:75:a5:2a:87:79:f2:60:68:fc:60:
                    b3:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:6F:CD:CC:0A:EA:EA:20:13:F5:48:3C:21:5F:91:DE:DF:AB:0E:89
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/92db335e-640b-4ae2-9650-c420af83089d/39d9133d-52e8-3005-a634-1bde80e46901.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/92db335e-640b-4ae2-9650-c420af83089d/92db335e-640b-4ae2-9650-c420af83089d.crl

            X509v3 Authority Key Identifier:
                keyid:9B:40:34:1F:25:09:26:BA:B6:19:D2:13:62:66:CE:A9:15:AA:29:F7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/92db335e-640b-4ae2-9650-c420af83089d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.111.66.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         24:e9:a6:83:9c:a8:b9:f8:d7:61:2f:a4:ed:80:09:bf:f3:65:
         63:1a:00:e1:6e:87:95:1f:25:55:72:d8:43:ac:0f:10:13:2f:
         4c:84:5f:1f:aa:e1:fe:93:c1:d0:43:d1:5e:ff:37:88:39:0c:
         89:85:13:76:39:32:a7:77:0a:6f:c0:f3:0a:2c:48:c5:0d:b3:
         92:ca:d3:d5:0d:57:cc:84:00:b6:f5:50:bf:44:90:f4:28:8c:
         bd:69:db:e0:37:c1:52:9c:87:5c:2b:ce:b4:35:1a:0b:20:f5:
         79:bd:6e:3f:c3:87:cd:47:da:82:9e:a6:85:6d:35:20:4a:02:
         70:1f:6a:90:eb:3f:31:00:b0:6a:d2:f2:e4:c6:02:58:c7:26:
         bd:66:6c:60:65:d3:25:da:cb:ec:7f:a1:a1:56:30:73:ee:0e:
         44:ca:66:d2:5a:52:0e:41:b6:9d:31:d5:ec:00:de:3a:b2:ca:
         2f:d0:64:d9:98:5d:0b:5b:9f:69:5f:50:ae:dc:40:00:46:8b:
         8c:26:80:b7:0b:84:9f:a5:4a:5f:a5:5d:cb:c8:93:09:f3:3c:
         81:b9:cf:25:2a:a5:91:07:1d:9a:cc:20:8f:f3:b2:3d:f4:38:
         e4:e6:04:c7:48:e5:c3:66:25:3f:70:ad:f8:c3:e7:19:64:ba:
         7f:0f:a0:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 06:06:38 2026 by rpki-client