Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/66094ef6-a967-4978-81e1-d66227a478fd/36872929-4860-33a1-ae87-19f6bebe7ad4.roa
File:                     36872929-4860-33a1-ae87-19f6bebe7ad4.roa (raw, json)
Hash identifier:          Oyd5dUkAWeBCQNBIFNWddJG/KE6J53M45rz/Ws+whTU=
Subject key identifier:   B0:7D:CE:E9:57:FC:1F:3E:0C:79:FB:12:30:C1:C0:12:47:C6:2E:EC
Certificate issuer:       /CN=66094ef6-a967-4978-81e1-d66227a478fd
Certificate serial:       010D0C9F4328584E779A36574A0230BAEEA64880
Authority key identifier: DC:40:B2:B3:F2:F8:D5:1B:56:E9:5A:27:61:F8:24:01:B5:71:DF:31
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/66094ef6-a967-4978-81e1-d66227a478fd.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/66094ef6-a967-4978-81e1-d66227a478fd/36872929-4860-33a1-ae87-19f6bebe7ad4.roa
Signing time:             Sat 11 Jul 2026 21:00:11 +0000
ROA not before:           Sat 11 Jul 2026 21:00:11 +0000
ROA not after:            Fri 09 Oct 2026 21:00:11 +0000
asID:                     13536
IP address blocks:        66.152.127.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/66094ef6-a967-4978-81e1-d66227a478fd/66094ef6-a967-4978-81e1-d66227a478fd.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/66094ef6-a967-4978-81e1-d66227a478fd/66094ef6-a967-4978-81e1-d66227a478fd.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/66094ef6-a967-4978-81e1-d66227a478fd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 14 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:77:9a:36:57:4a:02:30:ba:ee:a6:48:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66094ef6-a967-4978-81e1-d66227a478fd
        Validity
            Not Before: Jul 11 21:00:11 2026 GMT
            Not After : Oct  9 21:00:11 2026 GMT
        Subject: CN=bbadd0ad-e5ea-4098-aa9f-87b7166ca894
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:f4:b1:57:22:5e:a4:6e:56:6f:a7:d9:6a:8b:
                    6e:af:98:f2:46:1a:df:e6:68:45:cc:db:b9:87:6e:
                    a9:9c:25:b3:78:31:48:03:ac:e4:1b:da:70:ec:46:
                    63:a0:70:4e:ec:13:4b:49:f7:1a:e6:24:15:11:9f:
                    a8:f2:0a:6a:dd:1a:aa:88:38:4d:0f:14:a2:5a:cd:
                    38:4c:82:6f:5e:05:26:6e:a3:22:42:0d:d6:e8:0f:
                    d3:77:1c:26:fe:00:a4:04:04:88:29:27:d3:0a:09:
                    d6:44:a3:ef:cf:b5:9a:5b:64:4f:75:6f:23:bc:41:
                    4b:0e:7e:e4:95:f9:ff:b0:4f:cc:74:79:84:d4:6b:
                    88:8b:e4:6e:b8:86:07:93:f8:a8:90:c7:2a:cd:ee:
                    99:1d:3b:ef:ab:2b:9e:d8:c8:03:fe:db:78:1c:6f:
                    fd:04:77:6b:ce:f7:1d:c3:62:6e:a1:da:57:5b:14:
                    2d:61:4a:c0:29:05:ec:2f:8f:b5:1a:7a:f3:84:61:
                    52:69:d7:94:22:76:31:38:d3:89:40:13:bd:3f:24:
                    e5:5f:d5:64:a7:5c:34:10:e9:36:66:42:38:f5:f5:
                    c0:e4:55:cf:71:08:b5:f1:8b:34:78:90:a8:28:11:
                    5a:3e:fe:19:8f:e5:8d:87:34:11:9a:33:01:72:4d:
                    ce:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:7D:CE:E9:57:FC:1F:3E:0C:79:FB:12:30:C1:C0:12:47:C6:2E:EC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/66094ef6-a967-4978-81e1-d66227a478fd/36872929-4860-33a1-ae87-19f6bebe7ad4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/66094ef6-a967-4978-81e1-d66227a478fd/66094ef6-a967-4978-81e1-d66227a478fd.crl

            X509v3 Authority Key Identifier:
                keyid:DC:40:B2:B3:F2:F8:D5:1B:56:E9:5A:27:61:F8:24:01:B5:71:DF:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/66094ef6-a967-4978-81e1-d66227a478fd.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.152.127.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6c:cb:49:af:63:63:a5:05:c3:d9:27:30:fc:d5:ff:3d:3d:ae:
         b4:43:62:3a:d4:46:e1:ab:e1:3e:46:0b:3d:7d:14:ce:96:ef:
         e4:03:eb:6c:2e:97:bc:ee:b0:2f:59:bd:3a:e5:08:8e:c4:b8:
         9e:85:4f:4f:44:b0:99:6b:ad:a6:f9:fa:d9:6d:ee:19:f3:02:
         d6:f5:fc:1f:bb:a6:c6:a4:d8:bd:1c:b9:85:82:5d:03:2a:2d:
         65:90:ce:47:9c:25:c1:e3:b2:42:3f:1a:0a:f5:25:6c:bc:39:
         2d:a0:cd:05:37:a6:98:23:f5:e6:2f:6c:58:19:8f:f0:aa:ae:
         6e:b8:c0:fe:28:38:d5:68:19:57:25:6f:ad:9d:a9:bf:52:d8:
         9d:52:71:7d:d4:d3:29:39:62:ee:7e:4e:34:75:de:bd:ab:e6:
         60:9d:ac:fa:e6:0d:2b:69:8e:16:30:62:95:fe:55:3b:7e:77:
         5a:cd:5a:a1:7d:29:57:84:7e:bb:3c:71:d3:ed:33:78:c8:74:
         18:03:05:0a:a5:16:b1:0a:bd:ff:48:05:1c:17:97:c3:80:1a:
         ed:64:ca:2b:5e:a0:4b:24:33:75:6c:15:29:9a:a1:c8:79:39:
         5e:5c:38:65:97:68:be:66:80:a9:ce:3f:6a:c9:ea:ea:d3:f3:
         39:cf:5a:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 13 12:57:04 2026 by rpki-client