Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b1896033-ca2b-44a4-b67f-7160d614cf31/30fe04ea-c011-361c-bd2d-01bfeab00827.roa
File:                     30fe04ea-c011-361c-bd2d-01bfeab00827.roa (raw, json)
Hash identifier:          lXbYMobc9xr7rH0vhg6sesFx4vRJiIFQ6o9ntpK1Omw=
Subject key identifier:   97:8D:A8:EC:BD:56:57:78:D2:22:E9:D6:39:8B:DC:FA:7C:12:9C:CF
Certificate issuer:       /CN=b1896033-ca2b-44a4-b67f-7160d614cf31
Certificate serial:       010D0C9F4328584D5FA4B1BFF3B23D4B0EE79F80
Authority key identifier: 58:AF:A3:F2:C0:80:A9:DA:AA:96:D3:A6:D5:D1:C6:BA:69:F0:89:32
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b1896033-ca2b-44a4-b67f-7160d614cf31.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b1896033-ca2b-44a4-b67f-7160d614cf31/30fe04ea-c011-361c-bd2d-01bfeab00827.roa
Signing time:             Thu 02 Apr 2026 14:15:12 +0000
ROA not before:           Thu 02 Apr 2026 14:15:12 +0000
ROA not after:            Wed 01 Jul 2026 14:15:12 +0000
asID:                     12186
IP address blocks:        66.187.206.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b1896033-ca2b-44a4-b67f-7160d614cf31/b1896033-ca2b-44a4-b67f-7160d614cf31.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b1896033-ca2b-44a4-b67f-7160d614cf31/b1896033-ca2b-44a4-b67f-7160d614cf31.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b1896033-ca2b-44a4-b67f-7160d614cf31.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 04 Apr 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:5f:a4:b1:bf:f3:b2:3d:4b:0e:e7:9f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b1896033-ca2b-44a4-b67f-7160d614cf31
        Validity
            Not Before: Apr  2 14:15:12 2026 GMT
            Not After : Jul  1 14:15:12 2026 GMT
        Subject: CN=209cf40f-a286-49b4-96ac-3a31d8986cac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:ed:de:21:47:87:f7:49:0f:86:56:b2:2c:b8:
                    dc:2d:16:81:79:ed:65:d0:df:44:4e:e0:36:79:22:
                    d3:cc:d9:23:b2:07:c7:33:82:16:f0:9b:90:89:44:
                    4a:1b:33:4b:5e:0c:aa:02:69:f1:01:a8:27:6f:89:
                    96:4c:01:3f:b2:5e:5e:36:32:2a:bb:01:b2:bc:ce:
                    0d:e9:9e:44:f9:15:f9:03:9a:59:be:f0:25:76:66:
                    f4:5a:dc:cb:88:ae:bc:ef:f7:f7:62:d3:37:ab:1b:
                    8f:3f:66:11:ac:16:23:28:48:2b:6d:c5:b4:59:0a:
                    a4:d2:24:70:ef:76:c0:e7:fa:ed:a0:23:4f:12:02:
                    29:fb:b4:d6:32:70:3b:f5:2b:be:c3:75:6e:1a:75:
                    16:d3:e6:70:55:03:9f:6d:8b:90:95:93:36:b5:e8:
                    6f:3c:3e:48:71:ab:a3:e8:2f:a9:4f:09:5c:49:87:
                    d8:64:3d:e0:3d:1a:d6:a4:71:14:91:7d:f2:7b:43:
                    e2:74:a3:bf:c5:30:ce:e9:a9:40:61:47:ce:11:71:
                    c1:d7:a6:d3:e6:cf:f0:87:2e:0c:9b:db:49:f1:f2:
                    bf:47:c5:55:84:b4:19:46:41:ef:18:8f:bd:d6:19:
                    21:ff:72:32:07:5a:53:ac:64:54:c6:26:41:c2:80:
                    0a:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:8D:A8:EC:BD:56:57:78:D2:22:E9:D6:39:8B:DC:FA:7C:12:9C:CF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b1896033-ca2b-44a4-b67f-7160d614cf31/30fe04ea-c011-361c-bd2d-01bfeab00827.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b1896033-ca2b-44a4-b67f-7160d614cf31/b1896033-ca2b-44a4-b67f-7160d614cf31.crl

            X509v3 Authority Key Identifier:
                keyid:58:AF:A3:F2:C0:80:A9:DA:AA:96:D3:A6:D5:D1:C6:BA:69:F0:89:32

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b1896033-ca2b-44a4-b67f-7160d614cf31.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.187.206.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         50:84:bd:dc:1a:8d:49:3d:6e:57:cd:ad:6f:57:9e:6a:18:39:
         8a:fb:27:9a:59:b8:88:fa:83:ef:e7:d0:94:b5:6e:52:8a:95:
         ea:1a:f7:9f:33:5c:ff:7f:a4:c5:c1:9b:00:e7:cf:7f:d4:b0:
         c7:6c:66:db:da:c6:9b:75:ab:57:41:18:d3:97:c5:c3:78:f1:
         b1:08:86:3c:12:91:b6:fe:2d:e3:73:19:1a:ff:ff:e7:aa:0b:
         0c:01:ce:78:88:49:31:76:01:de:7f:85:92:e4:31:8f:d3:cb:
         b1:04:a0:f9:17:4a:41:c9:40:70:14:9e:4b:17:eb:35:47:a9:
         36:2d:08:70:0a:c5:df:ec:13:09:04:24:21:5f:3c:f1:ef:c8:
         76:67:2e:25:09:74:e0:c0:f2:c2:c2:5b:31:e1:d6:f0:ea:bd:
         85:e6:63:0b:cf:f3:a5:0b:81:93:a3:c4:7b:98:66:b4:7c:a7:
         31:ed:12:13:84:74:90:42:a5:94:6e:5a:7f:20:4a:75:12:dd:
         87:d3:7c:82:87:10:03:9e:01:56:ad:6d:4f:b6:c3:eb:8b:eb:
         fe:17:a2:47:da:bf:51:ef:1d:ff:e3:89:d8:75:cb:4a:1c:7a:
         b3:05:43:7e:87:11:75:3d:9d:62:f9:a9:a4:90:b5:8a:ca:cd:
         dc:11:3f:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 3 12:56:19 2026 by rpki-client