Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/ae74ee3b-204b-4c4e-958f-cd716b99ed12/8bb61ce9-7339-314f-a04d-5aee5f32fbd1.roa
File:                     8bb61ce9-7339-314f-a04d-5aee5f32fbd1.roa (raw, json)
Hash identifier:          KZK1OiWmEbeslVrUylt4ejFZvuXeGqFj9qbHLns1nsw=
Subject key identifier:   CD:B1:8B:A5:A6:88:49:2E:46:A9:DA:AB:26:80:2C:14:B2:7C:B2:74
Certificate issuer:       /CN=ae74ee3b-204b-4c4e-958f-cd716b99ed12
Certificate serial:       010D0C9F4328584EAFE6E6A3C612DF852C3D8E00
Authority key identifier: D4:C5:5C:07:DA:77:69:29:BF:B3:81:C4:9A:94:5C:C7:97:69:6B:5F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/ae74ee3b-204b-4c4e-958f-cd716b99ed12.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/ae74ee3b-204b-4c4e-958f-cd716b99ed12/8bb61ce9-7339-314f-a04d-5aee5f32fbd1.roa
Signing time:             Sat 01 Aug 2026 01:00:12 +0000
ROA not before:           Sat 01 Aug 2026 01:00:12 +0000
ROA not after:            Fri 30 Oct 2026 01:00:12 +0000
asID:                     60725
IP address blocks:        66.178.38.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/ae74ee3b-204b-4c4e-958f-cd716b99ed12/ae74ee3b-204b-4c4e-958f-cd716b99ed12.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/ae74ee3b-204b-4c4e-958f-cd716b99ed12/ae74ee3b-204b-4c4e-958f-cd716b99ed12.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/ae74ee3b-204b-4c4e-958f-cd716b99ed12.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Sep 2026 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:af:e6:e6:a3:c6:12:df:85:2c:3d:8e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ae74ee3b-204b-4c4e-958f-cd716b99ed12
        Validity
            Not Before: Aug  1 01:00:12 2026 GMT
            Not After : Oct 30 01:00:12 2026 GMT
        Subject: CN=a1751334-60d2-4934-9b5c-54dd64e434f0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:a4:62:6e:7a:75:15:43:fd:6b:c4:92:ca:b6:
                    16:95:a5:7f:8f:17:9a:20:06:1a:cc:78:ac:3c:6b:
                    25:9c:01:65:4f:ef:2e:a4:ec:1a:74:54:d3:a2:b4:
                    1c:63:c8:44:69:15:a5:0f:14:75:89:5f:6f:e6:53:
                    60:cd:bf:57:fb:88:f1:b9:a8:f3:6a:25:26:a8:08:
                    15:65:48:3f:c2:9a:ab:05:4c:5d:98:fb:07:2d:6f:
                    cc:01:2a:11:db:36:34:a5:0b:86:ec:d7:bf:31:e7:
                    6e:2b:77:0d:15:75:f4:3c:d3:37:55:53:7d:27:9c:
                    1c:f0:63:23:c3:b6:f2:90:90:79:ed:b6:f1:12:75:
                    5c:0e:54:75:7f:72:34:67:33:ee:38:9d:d0:9e:6a:
                    65:43:57:e0:eb:ae:db:31:e1:b7:d8:b0:d7:d3:59:
                    c7:7c:40:a7:f3:c4:8d:62:b3:7c:3c:22:9b:48:9c:
                    c5:f9:da:ef:7b:f4:e7:59:70:71:88:b7:01:84:4e:
                    8b:cc:4a:9f:b2:b5:6b:09:1a:d8:f7:d1:6c:eb:b1:
                    b1:02:38:ce:32:e3:81:5a:88:dc:14:56:89:bf:5c:
                    55:f1:dc:75:33:be:ea:91:8e:83:6f:76:84:6d:68:
                    ef:98:0c:b3:fb:92:cd:58:7d:3c:80:01:27:95:36:
                    ec:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:B1:8B:A5:A6:88:49:2E:46:A9:DA:AB:26:80:2C:14:B2:7C:B2:74
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/ae74ee3b-204b-4c4e-958f-cd716b99ed12/8bb61ce9-7339-314f-a04d-5aee5f32fbd1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/ae74ee3b-204b-4c4e-958f-cd716b99ed12/ae74ee3b-204b-4c4e-958f-cd716b99ed12.crl

            X509v3 Authority Key Identifier:
                keyid:D4:C5:5C:07:DA:77:69:29:BF:B3:81:C4:9A:94:5C:C7:97:69:6B:5F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/ae74ee3b-204b-4c4e-958f-cd716b99ed12.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.178.38.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6f:d3:24:fe:83:37:7f:bd:b7:40:aa:c0:3f:9c:45:aa:cf:3c:
         8b:08:ab:a1:6b:4e:46:26:12:2b:06:1c:02:e8:ac:c7:e8:32:
         c5:26:42:63:83:6b:a9:3c:7e:72:c7:9d:32:43:28:75:5b:18:
         38:97:fc:2f:fa:f1:39:a8:0c:51:f2:15:c6:c5:bc:2c:b3:07:
         41:04:2d:0b:7c:61:32:b5:eb:22:cf:bf:85:e0:aa:2d:ca:3a:
         1f:f2:a0:0a:d7:7f:89:2a:a3:15:c1:c0:54:10:1c:28:19:c9:
         4b:d4:6a:c1:1b:7f:60:ab:2e:4a:c8:58:14:15:1b:44:b7:a5:
         2b:75:dd:c4:57:23:57:15:e9:bf:67:a7:84:c6:bc:77:f4:b8:
         47:cb:62:94:f3:9f:f4:f3:7a:4c:6f:6c:94:79:50:26:7a:ad:
         97:70:83:4b:48:04:25:6f:bf:77:f2:47:dc:bc:af:5a:c6:86:
         95:72:59:11:1c:e8:87:32:bc:5d:9a:73:e4:5a:8a:ac:d0:3e:
         c1:6a:95:f7:27:39:ea:a3:45:f9:de:d5:c6:64:a2:cc:4e:4b:
         69:58:cb:04:62:cf:7c:56:7f:62:c2:14:31:f5:eb:c1:71:da:
         3f:01:53:ef:48:9d:dc:5c:13:40:da:81:ce:a6:a3:1d:53:05:
         48:90:65:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 01:24:18 2026 by rpki-client