Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/60eed75d-7064-34bb-a4b9-b4135d48551b.roa
File:                     60eed75d-7064-34bb-a4b9-b4135d48551b.roa (raw, json)
Hash identifier:          JYqa9FceCMix4aDFsjE4NqspHunH9iy3UYHYylkmsas=
Subject key identifier:   26:54:30:83:2C:64:F3:EC:C7:AB:9F:91:5B:9B:3E:0D:24:7C:3C:B3
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F4328584E455A0232BC00FA58A0494AB8
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/60eed75d-7064-34bb-a4b9-b4135d48551b.roa
Signing time:             Tue 23 Jun 2026 21:00:12 +0000
ROA not before:           Tue 23 Jun 2026 21:00:12 +0000
ROA not after:            Mon 21 Sep 2026 21:00:12 +0000
asID:                     30036
IP address blocks:        108.166.133.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 25 Jun 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:45:5a:02:32:bc:00:fa:58:a0:49:4a:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: Jun 23 21:00:12 2026 GMT
            Not After : Sep 21 21:00:12 2026 GMT
        Subject: CN=221ccb21-75a9-49d1-959b-e5ecf700568e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:b8:1b:4e:b3:5b:37:42:c7:d3:41:bb:77:88:
                    07:f2:fb:9b:97:c0:f2:6f:89:54:7f:da:99:c4:09:
                    9e:6f:b7:c0:22:14:42:a3:fb:fb:2a:73:45:7c:af:
                    e3:8a:cb:bc:a4:d5:27:69:a2:c2:23:bf:84:e5:a7:
                    c4:af:df:26:1b:9b:ed:bb:fb:ff:09:5b:96:7a:92:
                    48:9f:73:1c:f4:d7:a2:84:76:76:87:a8:f5:e4:99:
                    29:2b:ea:b0:f6:87:93:d9:69:90:9b:5d:de:bb:65:
                    89:bc:fc:ba:5b:04:65:1b:1d:d9:dc:d3:02:01:21:
                    3a:55:48:3d:a9:a2:6f:21:87:16:a3:65:0f:11:95:
                    98:37:dc:82:b9:d4:a7:c6:19:b2:41:42:48:f2:b0:
                    cf:ba:bf:1c:37:64:f6:2e:85:83:fc:3c:05:29:db:
                    6e:11:6c:6c:23:93:a0:fc:ff:97:57:26:d8:03:7f:
                    3c:cb:05:e4:20:3f:25:4d:ba:29:81:62:d6:31:8f:
                    24:e9:b7:d0:2a:b7:aa:c3:a7:3e:23:34:40:3d:fa:
                    04:7b:9c:fe:b9:62:dd:d2:c2:dd:31:6e:cc:5c:e5:
                    72:16:04:43:3e:15:01:81:6a:ee:f3:6b:a6:41:6a:
                    7c:0a:ca:11:49:1c:8e:f7:62:33:73:0b:35:39:5d:
                    10:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:54:30:83:2C:64:F3:EC:C7:AB:9F:91:5B:9B:3E:0D:24:7C:3C:B3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/60eed75d-7064-34bb-a4b9-b4135d48551b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.166.133.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0b:5d:a6:cd:66:c7:ef:e0:36:84:99:10:56:78:64:f1:ce:d2:
         66:63:f9:b6:35:44:85:80:84:e2:6d:dd:19:c4:c3:6c:28:45:
         bc:ed:2b:79:19:3c:47:b0:2c:f9:99:25:59:0e:64:6e:7e:bb:
         8f:9d:71:91:93:97:7b:de:d9:b8:14:25:93:06:69:b2:fc:4d:
         27:25:cc:08:d6:e4:f4:c5:1a:85:1e:5e:db:08:42:d0:c5:e0:
         92:14:6f:de:03:8d:54:aa:3e:1f:d6:38:5f:a6:d7:89:7e:6d:
         1b:3e:f4:f9:28:fc:35:b8:33:da:14:aa:6c:1d:33:e4:71:a3:
         58:99:9c:1b:9e:cf:77:98:4f:1a:5f:f1:d8:d0:4e:fe:f0:99:
         61:d6:dd:49:9c:77:2a:1f:bd:cf:c4:e0:8f:00:e2:2e:65:1f:
         cf:34:ce:82:bc:2b:05:61:8e:cd:59:13:72:75:d2:e5:45:8a:
         45:a1:42:ec:06:ff:3d:b7:f2:6a:4a:da:0e:f5:6e:a0:37:b1:
         c5:52:a1:6a:02:c4:22:2c:73:83:c0:3e:17:1f:df:f5:0d:c8:
         2d:14:a4:e4:7a:0d:89:b5:86:54:b3:cf:3c:c6:fe:80:a4:3e:
         6e:f7:fd:24:36:e8:8c:c9:a0:04:1d:90:28:cf:42:2b:6c:e1:
         e2:15:c8:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 24 03:20:51 2026 by rpki-client