Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ecbe2caf-afd0-4edf-a743-b350c23e307d/4d27f777-ac63-385f-a971-b017fca91aaf.roa
File:                     4d27f777-ac63-385f-a971-b017fca91aaf.roa (raw, json)
Hash identifier:          d7vfARSd5rX4s79PePjzcox1NPLXtsfAF4ERhQzRm9U=
Subject key identifier:   AF:A6:5E:BE:60:2A:84:6C:14:D9:AB:7B:32:CE:3E:5F:53:C6:E0:F9
Certificate issuer:       /CN=ecbe2caf-afd0-4edf-a743-b350c23e307d
Certificate serial:       010D0C9F4328584EC20C7BBAD210CB7A87EBA440
Authority key identifier: C2:76:72:F8:A3:BA:3C:3B:04:3F:5B:E1:5B:0D:90:5C:D9:3A:58:58
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ecbe2caf-afd0-4edf-a743-b350c23e307d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ecbe2caf-afd0-4edf-a743-b350c23e307d/4d27f777-ac63-385f-a971-b017fca91aaf.roa
Signing time:             Fri 07 Aug 2026 13:00:11 +0000
ROA not before:           Fri 07 Aug 2026 13:00:11 +0000
ROA not after:            Thu 05 Nov 2026 14:00:11 +0000
asID:                     6994
IP address blocks:        66.54.100.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ecbe2caf-afd0-4edf-a743-b350c23e307d/ecbe2caf-afd0-4edf-a743-b350c23e307d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ecbe2caf-afd0-4edf-a743-b350c23e307d/ecbe2caf-afd0-4edf-a743-b350c23e307d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ecbe2caf-afd0-4edf-a743-b350c23e307d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 14 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:c2:0c:7b:ba:d2:10:cb:7a:87:eb:a4:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ecbe2caf-afd0-4edf-a743-b350c23e307d
        Validity
            Not Before: Aug  7 13:00:11 2026 GMT
            Not After : Nov  5 14:00:11 2026 GMT
        Subject: CN=2705fdbe-4111-45bf-a918-228cb9aea172
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:d4:62:23:1b:24:90:5c:73:e5:8f:7b:e3:f5:
                    01:32:fa:ee:d8:58:4c:62:f5:1b:15:54:c8:4c:52:
                    82:b8:de:f1:38:ea:a7:27:59:f1:19:00:20:e8:2f:
                    fc:5c:80:e4:44:d9:75:ee:cd:8c:30:07:66:3a:a2:
                    32:36:df:d8:68:bc:70:64:23:1e:b9:5f:d3:a7:36:
                    a5:ec:ae:91:d0:dc:5e:49:82:e5:33:78:a6:1b:4f:
                    78:e6:cf:a7:c2:9c:97:66:07:57:6a:83:1d:f0:c6:
                    c9:b8:80:10:c7:f8:1c:6c:60:d2:9d:05:f1:21:5e:
                    a7:a3:79:ea:e8:aa:fe:0f:ae:6b:52:94:5f:11:5a:
                    ad:9a:e7:d5:74:33:85:82:29:3a:c6:be:e3:37:40:
                    5e:09:82:ff:89:e0:a2:33:a5:f5:5c:a6:bf:e3:68:
                    58:c9:29:ac:3c:4e:81:71:0f:04:ee:15:08:65:39:
                    f3:78:b4:7c:37:2d:ae:bf:f5:fd:af:78:b2:a8:8f:
                    9c:41:50:29:26:fc:c0:24:c8:d4:88:c4:7d:a2:1a:
                    dc:19:9f:c7:5c:4a:4f:de:b8:35:2a:cb:b7:ee:db:
                    50:40:d8:26:d4:32:14:1f:ab:57:3a:5c:64:7e:ce:
                    14:77:29:62:84:39:d1:50:82:42:06:8c:d0:e9:ba:
                    b3:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:A6:5E:BE:60:2A:84:6C:14:D9:AB:7B:32:CE:3E:5F:53:C6:E0:F9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ecbe2caf-afd0-4edf-a743-b350c23e307d/4d27f777-ac63-385f-a971-b017fca91aaf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ecbe2caf-afd0-4edf-a743-b350c23e307d/ecbe2caf-afd0-4edf-a743-b350c23e307d.crl

            X509v3 Authority Key Identifier:
                keyid:C2:76:72:F8:A3:BA:3C:3B:04:3F:5B:E1:5B:0D:90:5C:D9:3A:58:58

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ecbe2caf-afd0-4edf-a743-b350c23e307d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.54.100.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         94:92:f1:17:bc:59:69:cf:00:ac:d8:c4:00:5a:64:87:d0:7b:
         0e:91:ed:2a:d1:cf:de:5c:05:77:f0:ba:d8:36:8a:6c:81:56:
         f9:d5:ec:4d:4e:4f:dc:0d:6f:4f:1a:1b:23:17:56:3a:54:f8:
         36:30:8a:00:98:d7:b8:47:c7:c9:e4:60:9d:4a:6a:38:02:49:
         13:4c:7d:c5:8e:fd:9f:b6:4f:96:be:20:c3:67:63:f9:da:1c:
         08:22:71:e2:0e:41:62:da:fe:88:75:fa:a9:6e:40:9d:fb:b8:
         9d:03:12:9e:1e:d1:7f:84:0a:4a:c2:02:34:d0:fb:9d:c2:4c:
         31:7f:7a:24:89:6d:1a:8e:50:0b:f2:91:2d:93:ad:e6:05:a5:
         8e:bc:b0:ad:29:05:cd:ea:02:cf:10:7d:07:bc:fe:c4:fb:4b:
         d0:50:e5:c2:f1:6b:b2:4d:59:7d:2d:fc:c9:6b:0c:8a:3f:d8:
         61:dd:5e:32:61:ee:b0:a0:7b:1b:78:be:64:e6:64:dc:11:6f:
         1b:e3:a3:e5:55:ca:74:b1:d5:8e:11:d5:f6:76:19:de:c2:82:
         bf:27:c5:07:e9:f1:d5:ba:1f:81:29:d5:8e:44:ce:cd:22:3a:
         8b:b7:f5:04:b9:8a:bc:17:5f:08:fa:27:42:17:c3:81:3b:7a:
         a5:dd:a6:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 13 15:03:22 2026 by rpki-client