Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a2d75f1-8f4b-49d3-9661-209643086151/5e80c34e-1cd1-3db4-a203-4ece44604f75.roa
File:                     5e80c34e-1cd1-3db4-a203-4ece44604f75.roa (raw, json)
Hash identifier:          ABLbmZ3PzVVm1UOFMho5yOGV7vPNpmrhDo4bLSfuUes=
Subject key identifier:   BD:A3:0B:B3:1A:FF:77:72:3B:AE:B1:EE:19:B1:94:67:07:F7:F6:AA
Certificate issuer:       /CN=0a2d75f1-8f4b-49d3-9661-209643086151
Certificate serial:       010D0C9F4328584E51E9E7920A4BC8B1AC4F8170
Authority key identifier: 0D:B3:3C:FC:9E:40:5D:1E:D0:4A:EE:B3:FA:F1:A8:B0:17:78:4C:7E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a2d75f1-8f4b-49d3-9661-209643086151.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a2d75f1-8f4b-49d3-9661-209643086151/5e80c34e-1cd1-3db4-a203-4ece44604f75.roa
Signing time:             Sun 28 Jun 2026 09:00:11 +0000
ROA not before:           Sun 28 Jun 2026 09:00:11 +0000
ROA not after:            Sat 26 Sep 2026 09:00:11 +0000
asID:                     33296
IP address blocks:        66.118.48.0/24 maxlen: 24
                          66.187.197.0/24 maxlen: 24
                          66.187.198.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a2d75f1-8f4b-49d3-9661-209643086151/0a2d75f1-8f4b-49d3-9661-209643086151.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a2d75f1-8f4b-49d3-9661-209643086151/0a2d75f1-8f4b-49d3-9661-209643086151.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a2d75f1-8f4b-49d3-9661-209643086151.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 24 Jul 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:51:e9:e7:92:0a:4b:c8:b1:ac:4f:81:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0a2d75f1-8f4b-49d3-9661-209643086151
        Validity
            Not Before: Jun 28 09:00:11 2026 GMT
            Not After : Sep 26 09:00:11 2026 GMT
        Subject: CN=a8bfa934-2ae9-46ce-83e5-b33572a59759
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:8d:b7:d0:c3:77:eb:6f:b0:12:0d:05:3f:63:
                    64:89:22:a6:71:88:74:58:8d:10:0b:dc:a9:71:40:
                    cc:95:b4:22:47:d9:22:33:4b:a6:a7:ec:37:4b:5f:
                    3c:bb:6e:5e:e2:1d:c6:8e:b8:54:f1:15:2a:e7:19:
                    10:5c:99:da:2a:75:1c:1c:f8:03:b9:13:1b:0e:8b:
                    8c:83:0d:ba:d0:62:54:76:b5:b5:bb:38:f7:3b:ab:
                    1d:7f:51:56:c4:02:43:cb:fb:d6:49:19:c4:42:aa:
                    9a:8c:52:da:a2:76:19:2b:6d:cf:c3:a7:ca:52:44:
                    90:a0:10:2a:c5:6c:8f:02:b1:54:1c:29:a2:19:15:
                    39:ee:1a:1c:43:21:7e:b3:1b:d9:60:a9:47:6b:f0:
                    8f:81:67:d3:bb:bf:dc:2e:8f:f3:5f:fb:b9:19:af:
                    62:2a:9d:d2:90:60:40:71:b6:aa:3a:44:f8:3a:01:
                    dc:bc:67:be:eb:c1:dd:51:cf:91:fa:c7:e8:30:b0:
                    43:cf:5d:f5:31:3c:0e:c1:90:38:3f:f4:f1:b8:e1:
                    d2:73:0b:31:9f:15:d3:3a:e1:3c:ef:57:4d:0c:dc:
                    1a:fa:3e:f3:10:a3:86:41:ba:65:bc:8d:73:7c:23:
                    18:1a:9e:4b:26:c8:e4:df:fd:0b:78:43:e0:3c:98:
                    5d:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:A3:0B:B3:1A:FF:77:72:3B:AE:B1:EE:19:B1:94:67:07:F7:F6:AA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a2d75f1-8f4b-49d3-9661-209643086151/5e80c34e-1cd1-3db4-a203-4ece44604f75.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a2d75f1-8f4b-49d3-9661-209643086151/0a2d75f1-8f4b-49d3-9661-209643086151.crl

            X509v3 Authority Key Identifier:
                keyid:0D:B3:3C:FC:9E:40:5D:1E:D0:4A:EE:B3:FA:F1:A8:B0:17:78:4C:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a2d75f1-8f4b-49d3-9661-209643086151.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.118.48.0/24
                  66.187.197.0-66.187.198.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         65:eb:29:e3:08:56:85:02:cc:2b:a4:c6:6d:ec:9f:c1:e2:cd:
         34:85:5d:8d:a7:fc:3c:db:e7:e9:58:e0:6c:57:a5:44:ba:48:
         7b:55:e3:5d:35:5c:cf:1f:c4:f7:a6:8b:d3:34:87:ac:64:ae:
         54:30:0d:9b:6f:7a:5d:e9:cf:87:49:8a:08:3f:96:6e:25:6c:
         82:b6:82:8e:07:ab:95:1c:e7:0c:bd:38:a4:61:5b:82:65:25:
         ce:1b:c8:36:88:bd:6c:81:4d:47:2b:15:58:ac:76:70:18:65:
         57:ee:84:df:9d:55:c9:f2:d4:53:29:2a:83:75:de:d5:58:f8:
         f9:73:af:2a:30:93:22:3c:5f:b0:6b:b3:57:bc:69:07:5a:79:
         56:40:3a:fe:b6:21:51:55:0f:3a:08:56:74:34:44:18:67:c3:
         f4:30:c5:45:f5:e3:df:5a:73:7e:74:2a:43:23:c5:89:7f:c1:
         03:ab:3a:dd:56:51:f3:3e:4a:4e:a7:8d:a7:e7:b4:6e:8d:71:
         66:30:dc:04:94:57:a8:57:b2:93:f1:26:f6:60:37:53:b5:9e:
         0b:2c:2b:66:1e:f6:2d:d4:1f:49:3b:a3:c5:69:64:84:38:8c:
         97:0e:16:b6:45:0c:14:af:f4:61:f9:5d:fe:ad:2b:30:82:76:
         be:91:dd:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 19:37:35 2026 by rpki-client