Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e0f3775f-7a6b-4b92-b5df-82d81562b08e/f7b7d510-e264-34de-8247-db335bd27c59.roa
File:                     f7b7d510-e264-34de-8247-db335bd27c59.roa (raw, json)
Hash identifier:          v4nlk8OMqtMVioN9qEaDk9DZtncsXe/aRH3ev9vVb0c=
Subject key identifier:   F8:F5:DF:A9:DB:C4:30:04:2A:C2:C6:B9:A6:D5:9E:25:EB:74:81:13
Certificate issuer:       /CN=e0f3775f-7a6b-4b92-b5df-82d81562b08e
Certificate serial:       010D0C9F4328584F7E7DB9B2A9F1E957FBF86D00
Authority key identifier: 09:4B:57:92:E3:15:87:9E:56:A8:65:09:B9:67:DD:30:71:7A:17:59
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e0f3775f-7a6b-4b92-b5df-82d81562b08e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e0f3775f-7a6b-4b92-b5df-82d81562b08e/f7b7d510-e264-34de-8247-db335bd27c59.roa
Signing time:             Wed 14 Oct 2026 01:00:13 +0000
ROA not before:           Wed 14 Oct 2026 01:00:13 +0000
ROA not after:            Tue 12 Jan 2027 02:00:13 +0000
asID:                     198949
IP address blocks:        66.242.16.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e0f3775f-7a6b-4b92-b5df-82d81562b08e/e0f3775f-7a6b-4b92-b5df-82d81562b08e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e0f3775f-7a6b-4b92-b5df-82d81562b08e/e0f3775f-7a6b-4b92-b5df-82d81562b08e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e0f3775f-7a6b-4b92-b5df-82d81562b08e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 22 Oct 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:7e:7d:b9:b2:a9:f1:e9:57:fb:f8:6d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e0f3775f-7a6b-4b92-b5df-82d81562b08e
        Validity
            Not Before: Oct 14 01:00:13 2026 GMT
            Not After : Jan 12 02:00:13 2027 GMT
        Subject: CN=12b124e8-828a-4b06-bff4-0f3b832b92a5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:02:b1:44:b1:ad:3a:7f:12:6f:4b:52:9b:e6:
                    ab:bb:57:11:fb:07:ea:45:1c:66:75:20:97:9f:1e:
                    98:7b:2c:be:c0:4a:90:27:4d:c3:fd:74:de:db:43:
                    9b:90:cc:76:07:be:a8:88:0e:b2:1a:d6:63:00:21:
                    e5:67:b1:ba:66:61:c0:37:3d:fc:f9:f7:24:3d:d0:
                    bb:07:c8:d1:01:2b:7a:c3:1b:70:53:87:68:36:9c:
                    33:34:5c:ab:b1:7d:b1:93:19:69:b1:15:5c:f3:7c:
                    63:61:7b:d0:e1:c9:47:ec:87:69:7b:5c:53:b9:c1:
                    e8:fb:71:1f:c5:ef:4e:38:4c:3a:31:b1:77:93:b5:
                    ef:64:79:ac:87:cf:57:70:2b:c0:91:82:67:d9:ee:
                    38:a2:07:97:f5:78:7d:13:74:2f:8b:cd:eb:67:26:
                    b2:86:ca:45:97:d7:32:5b:24:d2:23:75:08:11:71:
                    49:94:98:a6:ad:5a:d5:89:3e:e5:d5:b1:3c:c6:df:
                    a9:84:f6:72:7a:3f:92:86:63:ca:21:c5:8c:bc:55:
                    8e:48:de:1e:c0:e8:13:f9:14:11:f7:ab:90:59:47:
                    91:7e:57:ca:c1:29:8d:1a:9b:88:8d:f2:4c:41:40:
                    d6:a6:d3:3a:c8:d0:78:ff:e3:e5:11:85:ee:33:09:
                    7f:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:F5:DF:A9:DB:C4:30:04:2A:C2:C6:B9:A6:D5:9E:25:EB:74:81:13
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e0f3775f-7a6b-4b92-b5df-82d81562b08e/f7b7d510-e264-34de-8247-db335bd27c59.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e0f3775f-7a6b-4b92-b5df-82d81562b08e/e0f3775f-7a6b-4b92-b5df-82d81562b08e.crl

            X509v3 Authority Key Identifier:
                keyid:09:4B:57:92:E3:15:87:9E:56:A8:65:09:B9:67:DD:30:71:7A:17:59

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e0f3775f-7a6b-4b92-b5df-82d81562b08e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.242.16.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         03:f6:45:06:b8:66:67:73:ca:11:5c:8f:35:4d:69:07:bf:f4:
         a4:92:50:52:7b:66:27:54:1c:7d:34:e8:3d:a0:96:27:a4:55:
         a0:19:be:22:d9:1c:68:ad:7b:fe:a5:bc:df:b2:54:7c:21:76:
         ab:08:e7:78:f5:30:c7:ff:f0:ab:98:6f:ba:50:ed:2b:a6:9f:
         26:ab:72:fb:3a:14:c1:ba:5b:e1:8d:a6:9f:03:bc:11:a9:ec:
         00:b9:b4:3b:02:9c:1f:d2:3c:53:8d:20:c2:9d:f2:55:28:ff:
         d6:a8:81:d6:95:15:5d:ab:57:c5:9d:c7:c0:fa:28:ca:75:a4:
         06:bd:1c:92:7d:34:3c:08:d9:80:57:f6:0c:61:21:cd:76:c9:
         34:4d:d2:cb:f9:d3:fb:75:cc:b0:83:09:e2:d0:f2:87:4b:30:
         da:02:a0:b6:a9:2e:68:16:02:27:b8:f4:14:8b:50:f7:76:f5:
         64:26:40:70:b4:a0:2b:3b:2c:4b:78:5e:aa:04:e6:d6:73:4a:
         f3:f0:f1:24:af:e7:58:1a:78:d5:7c:28:0f:54:91:33:d8:18:
         c0:fd:7b:f3:33:98:c0:de:e9:a9:8c:f0:d6:d7:54:a3:ab:b8:
         16:ba:66:02:1c:3d:88:0f:66:f5:e2:d8:71:c1:d2:b6:fb:5b:
         af:dc:9f:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 21 01:45:44 2026 by rpki-client