Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cef8d320-c2b4-4718-be9c-ec3f801c0818/7d1782c8-6710-350b-a87c-af35b36707e0.roa
File:                     7d1782c8-6710-350b-a87c-af35b36707e0.roa (raw, json)
Hash identifier:          888CJadIULQcTiGxrwFKkCl9v3rzxOFrjHN9WjnhbbA=
Subject key identifier:   C6:21:1A:47:98:C0:44:FA:78:EC:A0:23:98:86:07:F0:E7:01:6F:1C
Certificate issuer:       /CN=cef8d320-c2b4-4718-be9c-ec3f801c0818
Certificate serial:       010D0C9F4328584ECD37225481DBCCAF04453700
Authority key identifier: 4E:25:DB:86:B1:2F:12:A6:19:D4:A4:01:D5:5F:F2:92:96:52:43:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cef8d320-c2b4-4718-be9c-ec3f801c0818.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cef8d320-c2b4-4718-be9c-ec3f801c0818/7d1782c8-6710-350b-a87c-af35b36707e0.roa
Signing time:             Tue 11 Aug 2026 13:00:11 +0000
ROA not before:           Tue 11 Aug 2026 13:00:11 +0000
ROA not after:            Mon 09 Nov 2026 14:00:11 +0000
asID:                     63452
IP address blocks:        66.187.244.0/22 maxlen: 22
                          66.187.244.0/24 maxlen: 24
                          173.243.238.0/24 maxlen: 24
                          173.243.239.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cef8d320-c2b4-4718-be9c-ec3f801c0818/cef8d320-c2b4-4718-be9c-ec3f801c0818.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cef8d320-c2b4-4718-be9c-ec3f801c0818/cef8d320-c2b4-4718-be9c-ec3f801c0818.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cef8d320-c2b4-4718-be9c-ec3f801c0818.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 23 Aug 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:cd:37:22:54:81:db:cc:af:04:45:37:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cef8d320-c2b4-4718-be9c-ec3f801c0818
        Validity
            Not Before: Aug 11 13:00:11 2026 GMT
            Not After : Nov  9 14:00:11 2026 GMT
        Subject: CN=b69df421-7dac-48eb-a922-d0343260273b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:33:6c:14:f0:77:53:78:64:8f:1d:f2:3d:5d:
                    f6:7b:07:ba:27:bb:d8:9d:32:a1:18:46:bc:67:bc:
                    fb:93:f2:f9:1a:a7:51:de:10:34:87:6d:db:e8:fc:
                    a2:39:90:3b:04:22:7c:b6:46:4a:18:23:1a:71:06:
                    13:27:3f:d2:38:6d:fb:2c:72:1d:45:39:da:64:6f:
                    92:c7:88:6f:8a:10:dc:5f:0b:5d:5d:03:fc:47:21:
                    82:85:e6:ab:24:f1:c4:6e:91:04:c3:67:aa:98:65:
                    3c:a4:ba:6d:c8:04:ff:1a:f0:1e:24:2d:2e:67:90:
                    b5:06:ff:d2:9a:bb:ca:96:4a:67:f1:0f:0b:ba:26:
                    62:62:cc:b6:bc:8e:0f:ba:a3:38:0d:08:ab:c3:02:
                    b8:5d:11:66:c5:8f:19:7e:06:a8:b9:22:b6:fc:d8:
                    73:59:b7:13:83:0a:a3:b0:0c:56:a6:5f:f9:44:c7:
                    62:f6:99:85:31:e5:21:71:f1:bd:ae:cc:cd:c4:bb:
                    fe:5a:18:f5:ec:fb:0a:6b:67:08:b3:bf:5e:78:48:
                    69:40:97:1a:61:23:1a:45:74:05:bc:61:3d:c6:73:
                    2e:be:47:7b:e8:3d:fb:5e:c8:60:a3:fa:35:a2:c6:
                    7b:74:4d:62:b6:08:10:10:e6:93:c0:3b:0a:be:82:
                    9c:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:21:1A:47:98:C0:44:FA:78:EC:A0:23:98:86:07:F0:E7:01:6F:1C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cef8d320-c2b4-4718-be9c-ec3f801c0818/7d1782c8-6710-350b-a87c-af35b36707e0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cef8d320-c2b4-4718-be9c-ec3f801c0818/cef8d320-c2b4-4718-be9c-ec3f801c0818.crl

            X509v3 Authority Key Identifier:
                keyid:4E:25:DB:86:B1:2F:12:A6:19:D4:A4:01:D5:5F:F2:92:96:52:43:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cef8d320-c2b4-4718-be9c-ec3f801c0818.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.187.244.0/22
                  173.243.238.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0b:6b:7f:cb:a2:39:e5:a1:21:ab:fd:6a:03:09:7f:0a:42:a0:
         39:60:d2:43:fe:15:31:06:8b:a0:82:09:25:b8:a3:a9:7c:ee:
         0b:68:74:17:04:64:01:ac:df:f0:c3:ad:6e:4e:be:5c:79:c8:
         f5:dd:33:21:30:36:8f:e9:5f:56:13:07:a3:6e:29:75:e8:e9:
         72:2e:fa:1c:00:da:57:24:c1:66:09:bb:23:a8:bb:02:70:f1:
         86:3b:ce:e5:d3:3c:c2:83:9c:c5:3f:bc:e5:e1:92:44:8b:39:
         4a:43:5d:bd:5c:83:74:cd:c8:75:01:d3:58:4f:8e:c3:78:70:
         1a:eb:3b:ba:26:94:83:72:37:3e:8f:de:7e:55:2f:a3:c6:94:
         26:20:5d:a6:04:42:b9:86:de:dc:ff:40:34:25:84:79:eb:83:
         7d:7e:1d:2d:3f:b5:76:42:f9:ce:c3:33:aa:f4:eb:09:b7:65:
         38:c6:e9:c5:81:3a:04:b3:65:4b:81:86:5c:d6:52:95:00:3e:
         8b:95:5e:23:2a:4d:13:19:a1:c9:0d:63:6d:0f:51:16:39:92:
         1c:15:65:74:da:70:a2:2b:d9:42:2d:ad:fa:02:33:93:f7:06:
         69:b4:3a:bc:85:e5:b8:fb:63:0b:2c:31:97:cb:8a:5e:19:cf:
         27:8d:7f:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 21 22:03:58 2026 by rpki-client