Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e0f3775f-7a6b-4b92-b5df-82d81562b08e/99942ffb-7db2-3377-9d51-0347cd2081d8.roa
File:                     99942ffb-7db2-3377-9d51-0347cd2081d8.roa (raw, json)
Hash identifier:          zKSMNShwdpPYhyzZGIUSy7XgfJYVMgUXK7tpCyQX1wc=
Subject key identifier:   FC:B1:BF:2F:32:08:75:71:C7:3F:02:91:56:9F:AC:B0:E7:F7:89:D8
Certificate issuer:       /CN=e0f3775f-7a6b-4b92-b5df-82d81562b08e
Certificate serial:       010D0C9F4328584E6BF7E3771505B4EA92249A20
Authority key identifier: 09:4B:57:92:E3:15:87:9E:56:A8:65:09:B9:67:DD:30:71:7A:17:59
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e0f3775f-7a6b-4b92-b5df-82d81562b08e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e0f3775f-7a6b-4b92-b5df-82d81562b08e/99942ffb-7db2-3377-9d51-0347cd2081d8.roa
Signing time:             Tue 07 Jul 2026 16:59:28 +0000
ROA not before:           Tue 07 Jul 2026 16:59:28 +0000
ROA not after:            Mon 05 Oct 2026 16:59:28 +0000
asID:                     31898
IP address blocks:        66.235.215.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e0f3775f-7a6b-4b92-b5df-82d81562b08e/e0f3775f-7a6b-4b92-b5df-82d81562b08e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e0f3775f-7a6b-4b92-b5df-82d81562b08e/e0f3775f-7a6b-4b92-b5df-82d81562b08e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e0f3775f-7a6b-4b92-b5df-82d81562b08e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 14 Jul 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:6b:f7:e3:77:15:05:b4:ea:92:24:9a:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e0f3775f-7a6b-4b92-b5df-82d81562b08e
        Validity
            Not Before: Jul  7 16:59:28 2026 GMT
            Not After : Oct  5 16:59:28 2026 GMT
        Subject: CN=dc96eca9-72b4-4b59-bfef-05354ce654d0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:9f:e5:21:84:fc:99:22:67:20:dd:7c:e2:c6:
                    1b:1c:c2:75:23:d5:f9:19:63:17:86:7e:b8:a6:d9:
                    ee:08:c5:0c:a3:05:f5:8c:ef:39:2d:e2:f3:d1:0f:
                    ff:07:3f:21:05:42:66:99:02:de:b9:02:cb:9f:26:
                    b7:ab:f9:de:ca:30:76:17:02:0d:56:74:32:aa:0a:
                    ef:2b:74:c4:6d:dd:28:f2:81:d7:cc:25:db:6c:25:
                    41:e0:fd:95:67:28:d1:f5:d3:d3:0a:12:91:0d:77:
                    69:9f:da:44:b5:dc:ed:80:25:e9:bf:49:26:88:c9:
                    60:8f:ba:c9:66:97:27:b6:15:da:a0:e1:fd:96:cb:
                    3a:6f:1b:22:c1:ee:df:7c:05:60:68:46:67:95:a4:
                    76:77:88:9a:71:f8:e5:2b:28:34:3e:c0:1f:fe:c9:
                    53:39:f8:26:07:95:bb:b7:d8:05:e1:20:1b:db:44:
                    4e:c9:e1:2c:a0:02:43:8e:e2:92:b1:9c:96:7b:63:
                    77:16:0e:62:45:cb:2a:5c:87:25:29:83:4c:e9:0a:
                    2f:db:f0:d0:5c:92:94:02:62:ab:f7:14:95:e2:f2:
                    32:26:f6:ca:7e:78:de:15:74:db:a7:24:b1:f3:b5:
                    91:1b:17:42:a2:7a:eb:bb:a0:c1:34:6f:e9:6b:ef:
                    61:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:B1:BF:2F:32:08:75:71:C7:3F:02:91:56:9F:AC:B0:E7:F7:89:D8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e0f3775f-7a6b-4b92-b5df-82d81562b08e/99942ffb-7db2-3377-9d51-0347cd2081d8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e0f3775f-7a6b-4b92-b5df-82d81562b08e/e0f3775f-7a6b-4b92-b5df-82d81562b08e.crl

            X509v3 Authority Key Identifier:
                keyid:09:4B:57:92:E3:15:87:9E:56:A8:65:09:B9:67:DD:30:71:7A:17:59

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e0f3775f-7a6b-4b92-b5df-82d81562b08e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.235.215.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         36:f2:f7:3f:3a:bc:41:a5:69:0c:d1:7b:b7:6b:cd:96:88:43:
         0d:b2:41:a4:b2:52:52:d8:79:a2:ae:6e:1f:6d:bb:a2:a7:16:
         15:83:f8:e7:51:c1:25:f8:f8:33:96:b2:46:f0:56:39:0b:56:
         3b:0c:17:75:b4:8b:d7:19:42:7c:7e:85:87:c8:cc:76:28:31:
         ef:7a:75:2a:c1:5b:ed:6f:fb:22:62:d6:bd:f6:aa:46:46:46:
         a4:f2:ea:e5:71:d7:4b:e4:0c:60:73:d1:c9:de:cb:f0:ce:e3:
         8c:6e:87:58:bd:f9:86:9c:80:cb:21:77:98:8e:7a:26:1b:cf:
         b5:e5:80:94:1f:72:5e:44:7d:03:18:ff:1c:f2:bd:bb:b9:d5:
         7c:30:57:45:af:1f:2a:35:63:c3:c6:7a:db:ee:46:ab:e4:bc:
         86:49:72:02:01:78:bd:17:f4:a1:e6:06:80:e9:05:b0:c3:be:
         e0:7a:e1:d5:15:b7:f3:de:bf:ac:20:84:16:dd:0d:e7:f3:ec:
         68:a3:b8:90:b9:15:ac:bf:c1:c3:4a:4b:3e:5b:4b:f5:fb:36:
         3e:1b:e4:c7:16:43:1d:fa:c3:78:be:88:41:9d:15:f8:7e:d8:
         a6:82:9a:11:38:a9:25:08:5d:d0:9a:07:30:a6:ad:29:d0:85:
         de:c4:64:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 13 02:44:34 2026 by rpki-client