Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6/85d294e9-78a5-369d-a3f2-71a1857f2fcb.roa
File:                     85d294e9-78a5-369d-a3f2-71a1857f2fcb.roa (raw, json)
Hash identifier:          3R66WZw59MEZSlmiGHv7sD9FMSYKbxFet2us5GQVLqk=
Subject key identifier:   0F:02:2E:18:CB:CB:1D:46:56:4B:C6:63:58:F6:63:5D:AC:0C:AA:80
Certificate issuer:       /CN=6e9c5894-f794-4209-a00d-cf232363d7c6
Certificate serial:       010D0C9F4328584E4AEF333077AC0D13A0FC1280
Authority key identifier: EB:6D:3E:D4:C8:21:B9:96:11:9E:0C:09:FF:5D:B7:88:80:52:94:85
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6/85d294e9-78a5-369d-a3f2-71a1857f2fcb.roa
Signing time:             Thu 25 Jun 2026 21:00:12 +0000
ROA not before:           Thu 25 Jun 2026 21:00:12 +0000
ROA not after:            Wed 23 Sep 2026 21:00:12 +0000
asID:                     13916
IP address blocks:        66.159.224.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6/6e9c5894-f794-4209-a00d-cf232363d7c6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6/6e9c5894-f794-4209-a00d-cf232363d7c6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Jul 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:4a:ef:33:30:77:ac:0d:13:a0:fc:12:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6e9c5894-f794-4209-a00d-cf232363d7c6
        Validity
            Not Before: Jun 25 21:00:12 2026 GMT
            Not After : Sep 23 21:00:12 2026 GMT
        Subject: CN=071e0321-d33b-4ca0-b0c7-c17001e9db22
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:31:b7:e6:61:99:71:74:6e:a4:c3:09:b6:f3:
                    6e:be:02:dd:8d:f8:0f:62:f3:e4:f7:c6:8e:d6:18:
                    0e:ea:9e:01:b4:f4:b0:1e:2d:86:2a:92:41:13:ca:
                    ce:b6:9d:3d:39:71:f6:ed:c9:a0:55:54:1b:d3:32:
                    1d:ef:2d:96:78:8c:29:8b:6a:4f:c4:ab:80:9c:4e:
                    ba:40:f1:a5:3a:42:f4:0a:95:15:8d:13:95:e1:40:
                    2f:fa:7d:0e:c7:2e:37:b8:68:03:2c:1a:d3:81:fe:
                    25:82:3e:2d:f9:41:61:f6:5f:86:48:60:a2:be:72:
                    21:a8:3a:85:8d:34:c2:db:89:85:f7:b1:9f:9d:1a:
                    a4:f0:c6:a4:a5:0a:18:eb:48:5e:de:c6:a7:e8:a9:
                    fa:23:7d:4d:4e:6a:7d:90:30:23:3d:de:04:1a:9f:
                    d4:bd:51:c6:36:91:23:0d:4b:bd:84:67:37:08:9c:
                    25:ec:ba:24:3f:f2:80:0f:c7:d2:13:8d:59:a9:65:
                    7e:ee:a6:9a:83:04:aa:7c:b7:9a:80:15:78:71:6c:
                    b6:cd:23:f5:f0:c6:3b:b6:b7:b3:11:0e:32:83:f8:
                    23:37:ae:48:16:a1:d2:7f:01:69:a2:7e:06:33:5c:
                    f6:d6:1a:23:ea:61:a9:9d:aa:4b:38:a7:c2:25:88:
                    fd:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:02:2E:18:CB:CB:1D:46:56:4B:C6:63:58:F6:63:5D:AC:0C:AA:80
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6/85d294e9-78a5-369d-a3f2-71a1857f2fcb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6/6e9c5894-f794-4209-a00d-cf232363d7c6.crl

            X509v3 Authority Key Identifier:
                keyid:EB:6D:3E:D4:C8:21:B9:96:11:9E:0C:09:FF:5D:B7:88:80:52:94:85

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.159.224.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         bb:18:01:64:13:b9:54:86:57:25:e7:98:94:fa:a8:12:e0:94:
         da:f2:62:e8:6a:d2:dc:6f:61:cb:6a:f1:4f:e4:ab:c6:f9:67:
         05:fb:ec:63:75:9a:78:75:d4:4d:28:63:5b:85:28:28:b7:83:
         f0:5f:13:2e:a1:97:98:04:ce:20:03:a2:aa:54:57:00:4c:47:
         ca:6d:08:bc:23:16:b5:0e:7d:4d:6b:b0:ed:e8:9f:c6:27:71:
         d4:a4:4d:32:52:9d:86:c8:9f:ba:37:b4:f0:21:77:36:d4:ec:
         86:43:c0:32:31:19:7d:20:eb:82:e7:a7:8b:55:d0:20:87:35:
         be:a8:f9:c3:35:39:07:8e:86:4f:b3:36:d3:1e:63:97:57:3b:
         bc:57:b3:46:6f:76:7c:4e:b8:01:20:62:39:5b:23:36:60:d9:
         c2:bf:3f:18:3f:63:e7:8b:96:08:12:27:64:70:94:80:23:4c:
         54:34:f9:86:8f:8a:06:d1:2e:16:52:30:5f:65:ba:1b:95:ba:
         25:b9:a3:2f:6c:5f:a0:73:34:bc:84:72:11:33:37:02:fb:a1:
         a5:ce:ba:6b:fe:f0:57:34:b9:61:4f:1c:f4:a7:05:9c:b0:6a:
         1b:80:32:fd:e7:6f:b8:68:6c:83:c4:6f:81:d3:bf:b7:2f:c3:
         a5:63:9f:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 23:17:22 2026 by rpki-client