Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d170fca2-5f74-4408-8dc9-597ba031cfe2/f9dfbd79-2a17-3ec6-a656-e9d137f0ace3.roa
File:                     f9dfbd79-2a17-3ec6-a656-e9d137f0ace3.roa (raw, json)
Hash identifier:          +wtLuxhulyUA7RfaJanQ0gzQAnon8OHQYaxN1n0VIeo=
Subject key identifier:   AF:0A:50:1E:0E:95:F8:6D:39:F4:29:EF:0D:23:64:E8:85:42:E7:28
Certificate issuer:       /CN=d170fca2-5f74-4408-8dc9-597ba031cfe2
Certificate serial:       010D0C9F4328584D6AAA8941B35BF36CDABA7500
Authority key identifier: FF:28:BA:9B:42:6B:7A:24:D9:A4:AB:B7:91:4D:BD:B3:6F:3F:62:9E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d170fca2-5f74-4408-8dc9-597ba031cfe2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d170fca2-5f74-4408-8dc9-597ba031cfe2/f9dfbd79-2a17-3ec6-a656-e9d137f0ace3.roa
Signing time:             Mon 06 Apr 2026 13:00:30 +0000
ROA not before:           Mon 06 Apr 2026 13:00:30 +0000
ROA not after:            Sun 05 Jul 2026 13:00:30 +0000
asID:                     16509
IP address blocks:        66.178.133.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d170fca2-5f74-4408-8dc9-597ba031cfe2/d170fca2-5f74-4408-8dc9-597ba031cfe2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d170fca2-5f74-4408-8dc9-597ba031cfe2/d170fca2-5f74-4408-8dc9-597ba031cfe2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d170fca2-5f74-4408-8dc9-597ba031cfe2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 09 Apr 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:6a:aa:89:41:b3:5b:f3:6c:da:ba:75:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d170fca2-5f74-4408-8dc9-597ba031cfe2
        Validity
            Not Before: Apr  6 13:00:30 2026 GMT
            Not After : Jul  5 13:00:30 2026 GMT
        Subject: CN=081eeb8d-770b-4061-9631-643605e9196c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:9a:2e:2a:c8:1f:6c:c2:2d:e0:16:a3:1a:58:
                    d9:ea:98:11:9a:91:b3:96:92:80:7a:a4:8c:a9:cd:
                    bb:2f:03:60:26:45:3d:a8:31:dc:93:ea:0b:ed:40:
                    08:ba:b7:e0:10:38:5c:ab:7c:21:be:f6:68:e8:9f:
                    35:dd:43:59:23:6b:ac:3d:38:6f:3a:35:c9:32:05:
                    e6:85:e1:fc:8e:f8:bf:a4:ef:61:ed:71:8f:e0:35:
                    92:c6:a1:90:19:ca:8c:f4:8a:fd:37:e3:d2:75:8a:
                    6c:c5:4a:a7:02:a1:33:62:80:41:ef:cd:1a:6b:97:
                    50:0c:b3:79:ac:16:c5:83:dd:26:ec:9f:44:9a:07:
                    ac:05:7e:2e:97:79:6c:dc:b1:65:3c:42:a9:a9:84:
                    a6:f9:69:b2:fd:9c:df:68:6b:3d:72:f2:3a:d9:f9:
                    03:3c:86:44:43:77:7a:ee:3c:4e:36:93:37:dd:79:
                    2f:21:06:16:3a:f1:8d:b8:cd:ed:0a:57:de:f3:d3:
                    6e:cb:76:ce:0d:70:9a:f6:86:82:cd:bd:f7:67:c6:
                    58:40:81:82:2b:78:9d:a1:bc:21:9d:79:c0:c4:f5:
                    5f:ac:a3:77:41:b6:14:86:66:8f:a7:d5:e7:4c:c0:
                    3d:a6:f4:ad:4f:e5:38:41:5f:ad:cf:9c:8c:6e:13:
                    18:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:0A:50:1E:0E:95:F8:6D:39:F4:29:EF:0D:23:64:E8:85:42:E7:28
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d170fca2-5f74-4408-8dc9-597ba031cfe2/f9dfbd79-2a17-3ec6-a656-e9d137f0ace3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d170fca2-5f74-4408-8dc9-597ba031cfe2/d170fca2-5f74-4408-8dc9-597ba031cfe2.crl

            X509v3 Authority Key Identifier:
                keyid:FF:28:BA:9B:42:6B:7A:24:D9:A4:AB:B7:91:4D:BD:B3:6F:3F:62:9E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d170fca2-5f74-4408-8dc9-597ba031cfe2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.178.133.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         d8:9f:c7:6e:12:d0:0f:40:d9:2a:dd:51:41:c5:47:63:88:a6:
         e2:7b:7a:cc:66:37:5d:d8:2f:ba:81:3a:bd:23:64:19:91:b1:
         18:b8:2c:67:dd:0e:4e:7d:ef:26:a2:25:5e:94:59:d1:63:98:
         df:3e:1c:7a:eb:d9:7b:42:04:af:33:cf:6f:3f:e0:c0:82:9e:
         aa:93:57:de:af:8c:5f:6c:f6:3c:25:00:ff:e4:1f:93:09:9c:
         48:c6:2d:40:2a:a1:4e:27:99:02:22:17:23:75:ae:6c:16:de:
         b2:34:80:3d:1c:6f:6a:cc:89:49:10:5b:a8:03:5e:61:75:de:
         76:a2:ba:50:a8:c0:47:91:d0:5b:85:a2:aa:df:63:29:68:85:
         9d:87:da:cf:5d:2a:46:67:67:a7:df:84:9a:b3:13:c4:17:bc:
         b4:bc:57:b6:96:b9:59:0a:4b:08:33:23:d7:fe:c2:2d:69:45:
         a1:74:02:06:67:c8:4c:af:a8:fe:ca:c8:62:89:1b:38:63:97:
         92:85:01:6a:c4:a3:a7:ca:14:49:e2:21:88:53:7d:24:12:e1:
         5b:6c:ee:c7:2d:73:a9:9a:4e:ab:41:5c:2e:dc:2e:d3:c8:da:
         5f:ee:8d:4b:35:b0:28:84:8e:60:58:e8:36:af:0d:dc:75:7b:
         5a:67:46:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 13:28:31 2026 by rpki-client