Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d0d8dd5c-4116-345e-9d41-1dcb321b68de.roa
File:                     d0d8dd5c-4116-345e-9d41-1dcb321b68de.roa (raw, json)
Hash identifier:          GsEmQbhRXHwmsBcdCSCL6AsjTCBgMLFHRPDS+6yn6Mg=
Subject key identifier:   00:5F:2F:90:BD:94:21:8A:BD:6F:7E:D3:A3:0D:D7:EB:10:B2:DD:62
Certificate issuer:       /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial:       010D0C9F4328584E6574B151ABD739EBD1BAA240
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d0d8dd5c-4116-345e-9d41-1dcb321b68de.roa
Signing time:             Sun 05 Jul 2026 09:00:13 +0000
ROA not before:           Sun 05 Jul 2026 09:00:13 +0000
ROA not after:            Sat 03 Oct 2026 09:00:13 +0000
asID:                     393804
IP address blocks:        66.16.92.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 14 Jul 2026 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:65:74:b1:51:ab:d7:39:eb:d1:ba:a2:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
        Validity
            Not Before: Jul  5 09:00:13 2026 GMT
            Not After : Oct  3 09:00:13 2026 GMT
        Subject: CN=805d7731-3463-494c-a994-a4ed916083d7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:d4:01:fe:15:4d:8c:64:e4:df:f4:d5:77:45:
                    d4:35:91:0c:40:32:58:f0:b9:b1:9f:00:52:e7:e1:
                    ae:17:7a:3e:f7:d6:cb:3e:b1:2d:08:72:6f:ea:2b:
                    b5:5f:be:94:f7:b0:fc:75:85:29:13:ae:fe:66:b6:
                    12:e7:e9:5c:6c:bf:17:6e:b1:b4:5e:5a:e6:56:34:
                    cf:14:20:cc:3c:8c:27:8a:a5:ea:6d:4d:ac:2d:91:
                    77:b6:7e:75:af:10:2a:e4:d2:4a:58:fb:25:f9:7c:
                    ce:b4:99:a6:78:4a:51:31:5d:4c:7c:ff:91:8c:28:
                    e3:76:a5:6f:a6:06:3d:ea:cf:2d:7c:6a:ff:78:88:
                    cf:c9:90:91:02:bc:85:5f:61:23:ed:d9:e0:06:6e:
                    e4:10:ca:d3:2f:7b:89:35:f1:49:d1:64:27:ba:08:
                    a6:8d:f4:d9:48:38:77:e0:b4:90:8c:b6:ef:b6:87:
                    1d:3e:10:43:94:f8:fe:3f:86:93:01:a9:d7:eb:c5:
                    23:e9:22:11:23:c7:86:68:eb:e5:05:6b:48:74:9b:
                    d6:01:8c:6c:e4:be:bd:2f:ab:42:76:0e:44:07:ba:
                    d4:cd:f8:36:38:bf:36:59:a8:89:11:a3:27:3a:28:
                    56:6f:bc:be:36:67:ee:82:a4:6c:88:eb:a3:c8:d8:
                    fd:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:5F:2F:90:BD:94:21:8A:BD:6F:7E:D3:A3:0D:D7:EB:10:B2:DD:62
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d0d8dd5c-4116-345e-9d41-1dcb321b68de.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl

            X509v3 Authority Key Identifier:
                keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.16.92.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         51:71:48:d3:78:f2:c0:ef:f6:b5:63:67:b1:a2:19:73:9a:ec:
         0a:27:08:ca:1b:b6:e8:b7:91:64:5f:c6:ba:e6:2d:b1:7e:15:
         93:44:44:f8:e3:4e:93:ae:a7:ad:a6:1a:e5:b0:50:0b:2c:e4:
         7d:a4:08:f4:7a:9f:84:97:e3:c6:7a:e8:56:f6:0d:81:fe:a3:
         37:8e:7a:11:9e:91:f2:d2:9b:78:74:c4:67:fa:fa:83:29:5c:
         c3:fe:34:34:eb:86:6f:5c:e6:f7:71:02:0a:6a:d9:4f:d8:be:
         4e:8b:a8:8a:04:d8:0a:ba:f0:81:f3:1b:0f:40:2a:a7:4b:b2:
         6f:55:6b:83:bf:d9:ae:e0:3a:bc:c1:3d:73:16:7b:b0:93:35:
         6f:21:1d:4d:06:3e:7e:df:ce:95:ab:1e:e3:65:99:ba:78:ca:
         62:cd:5d:33:99:fe:02:56:8a:f0:6e:be:cb:8a:f5:33:75:05:
         70:1b:c6:43:5a:54:4c:ab:35:ab:92:4e:8e:0f:8a:13:dc:e8:
         1e:ad:f0:8e:8c:e4:d9:a0:32:d5:0e:0b:e7:ec:27:60:38:dc:
         50:64:43:9b:c6:cd:78:36:65:85:0f:34:3a:b9:81:56:c3:e9:
         1f:e7:b2:20:29:84:0f:30:16:57:32:c0:25:3c:3a:e5:c1:78:
         c2:2f:37:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 13 05:50:55 2026 by rpki-client