Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0795b7b9-f2da-44fa-b181-d74a57f64e1b/a48abf35-c2cf-3f99-901f-4c22d9a1f796.roa
File:                     a48abf35-c2cf-3f99-901f-4c22d9a1f796.roa (raw, json)
Hash identifier:          bmWn+93OcpoldSnz4KWpo/3e7JgP21pU8EGjcRvjSFY=
Subject key identifier:   74:15:95:4B:0D:A6:89:E0:AF:4E:81:C6:BB:F5:F0:5D:B4:F0:20:0C
Certificate issuer:       /CN=0795b7b9-f2da-44fa-b181-d74a57f64e1b
Certificate serial:       010D0C9F4328584EE0C2057757B3963B47595340
Authority key identifier: A3:FB:1D:59:CD:2F:DB:E4:4E:58:8A:58:BB:6E:4D:6F:27:76:4A:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0795b7b9-f2da-44fa-b181-d74a57f64e1b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0795b7b9-f2da-44fa-b181-d74a57f64e1b/a48abf35-c2cf-3f99-901f-4c22d9a1f796.roa
Signing time:             Tue 18 Aug 2026 13:00:12 +0000
ROA not before:           Tue 18 Aug 2026 13:00:12 +0000
ROA not after:            Mon 16 Nov 2026 14:00:12 +0000
asID:                     12175
IP address blocks:        66.243.232.0/21 maxlen: 24
                          66.243.240.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0795b7b9-f2da-44fa-b181-d74a57f64e1b/0795b7b9-f2da-44fa-b181-d74a57f64e1b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0795b7b9-f2da-44fa-b181-d74a57f64e1b/0795b7b9-f2da-44fa-b181-d74a57f64e1b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0795b7b9-f2da-44fa-b181-d74a57f64e1b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 23 Aug 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:e0:c2:05:77:57:b3:96:3b:47:59:53:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0795b7b9-f2da-44fa-b181-d74a57f64e1b
        Validity
            Not Before: Aug 18 13:00:12 2026 GMT
            Not After : Nov 16 14:00:12 2026 GMT
        Subject: CN=ee41412a-891c-4c52-9990-7fcfddc5e23a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:74:1d:05:81:54:de:5e:73:80:8b:18:8f:84:
                    5b:7d:f9:97:4d:d1:da:b8:14:7d:a8:e8:44:90:71:
                    88:99:4d:3a:db:df:12:d9:a3:f2:d3:39:72:1b:a8:
                    42:12:0c:36:05:3c:2a:f8:15:e4:91:15:a1:fa:3a:
                    eb:37:55:a5:f6:13:0f:ea:10:73:52:19:8c:4c:62:
                    36:39:49:35:d1:56:cb:15:be:d9:ff:26:82:6c:27:
                    f0:65:c3:7d:85:48:fc:24:9e:df:cf:9c:c5:91:96:
                    32:40:49:bf:5f:74:6d:e1:65:fc:17:cd:be:dc:9b:
                    d6:2a:f9:1c:9a:d2:9c:ff:68:0c:b9:2d:6d:b9:9f:
                    49:44:1f:2e:9d:4c:e7:d7:fa:00:e8:68:79:95:3c:
                    26:78:e2:b8:16:d3:bf:76:69:d6:ab:78:f9:44:23:
                    e9:b3:e0:13:53:33:8f:af:cf:38:e1:7a:fe:bb:c8:
                    41:47:3e:d4:94:1b:bc:c4:78:29:0c:c8:8f:3a:4f:
                    fa:fa:29:92:aa:11:6e:5d:ae:b2:2a:05:6f:6c:04:
                    0b:58:b7:a0:30:d5:68:1c:18:a2:02:07:e9:f4:f9:
                    e0:de:91:f0:88:2a:c7:9b:fb:16:60:50:c2:2b:9c:
                    98:66:2c:60:9c:fa:3c:4f:e5:fd:83:93:5e:50:bb:
                    8d:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:15:95:4B:0D:A6:89:E0:AF:4E:81:C6:BB:F5:F0:5D:B4:F0:20:0C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0795b7b9-f2da-44fa-b181-d74a57f64e1b/a48abf35-c2cf-3f99-901f-4c22d9a1f796.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0795b7b9-f2da-44fa-b181-d74a57f64e1b/0795b7b9-f2da-44fa-b181-d74a57f64e1b.crl

            X509v3 Authority Key Identifier:
                keyid:A3:FB:1D:59:CD:2F:DB:E4:4E:58:8A:58:BB:6E:4D:6F:27:76:4A:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0795b7b9-f2da-44fa-b181-d74a57f64e1b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.243.232.0-66.243.255.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         88:ab:86:e9:d1:6a:34:d2:1f:87:e7:bb:6f:10:f4:52:20:51:
         e0:08:64:32:14:b7:e3:e2:a9:5b:3b:28:6e:0d:eb:49:46:0b:
         b3:46:72:4c:24:e4:c2:bb:54:6c:23:a3:ac:f0:09:c3:15:cd:
         d6:c3:52:cd:d7:37:27:8d:fc:83:9b:9b:ce:18:1b:db:10:64:
         a7:c9:bb:9a:59:bf:bb:c7:e1:6a:58:82:7f:cb:f1:ad:80:de:
         6d:2f:82:9d:1f:c7:73:cf:34:5b:04:3c:6f:6e:fa:92:06:3c:
         e0:97:ec:4c:ca:9c:71:16:af:df:38:39:75:c4:f2:ee:65:d6:
         07:75:32:d2:b9:2f:46:72:fa:82:e9:d2:6d:0d:01:d2:00:b8:
         31:c8:6d:5f:1b:c2:a9:bf:a9:be:04:3d:7e:26:78:5e:ad:0d:
         2e:6c:bf:d7:73:25:53:2c:d4:80:6e:15:e4:72:9e:f2:81:cd:
         d3:cf:51:2f:c9:57:9e:23:dc:68:5b:88:17:2b:5d:3d:ee:4c:
         cf:29:76:03:e0:1f:c3:e9:5e:e3:53:07:ce:a0:7b:6d:57:6f:
         85:e7:6a:ad:cb:ac:71:0e:c7:d9:51:ef:75:e9:83:c8:75:ed:
         13:46:86:bd:6c:22:99:6e:61:c6:16:4d:c0:b0:67:8b:72:49:
         17:47:d0:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 21 22:05:57 2026 by rpki-client