Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1f7c91ae-026c-479d-9cb5-d3837e3d4751/fa8eb30f-23ef-3b93-aee9-b05edf5e3a90.roa
File:                     fa8eb30f-23ef-3b93-aee9-b05edf5e3a90.roa (raw, json)
Hash identifier:          mbGNmcG5Xg3vf9h4TzrxJlELI34UoT/iQMc10+5ph9s=
Subject key identifier:   11:B6:CD:18:C1:57:00:E9:F0:6D:82:38:3E:2B:56:DD:94:91:2A:27
Certificate issuer:       /CN=1f7c91ae-026c-479d-9cb5-d3837e3d4751
Certificate serial:       010D0C9F4328584EF87CB375B8000C39BD8734C0
Authority key identifier: B6:31:20:DC:30:4B:1B:26:F4:1F:E4:5B:2B:92:7D:62:52:7E:13:CB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1f7c91ae-026c-479d-9cb5-d3837e3d4751.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1f7c91ae-026c-479d-9cb5-d3837e3d4751/fa8eb30f-23ef-3b93-aee9-b05edf5e3a90.roa
Signing time:             Thu 27 Aug 2026 01:00:12 +0000
ROA not before:           Thu 27 Aug 2026 01:00:12 +0000
ROA not after:            Wed 25 Nov 2026 02:00:12 +0000
asID:                     812
IP address blocks:        66.209.52.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1f7c91ae-026c-479d-9cb5-d3837e3d4751/1f7c91ae-026c-479d-9cb5-d3837e3d4751.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1f7c91ae-026c-479d-9cb5-d3837e3d4751/1f7c91ae-026c-479d-9cb5-d3837e3d4751.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1f7c91ae-026c-479d-9cb5-d3837e3d4751.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 05 Sep 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:f8:7c:b3:75:b8:00:0c:39:bd:87:34:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1f7c91ae-026c-479d-9cb5-d3837e3d4751
        Validity
            Not Before: Aug 27 01:00:12 2026 GMT
            Not After : Nov 25 02:00:12 2026 GMT
        Subject: CN=aafe230c-c01f-41e7-9c56-a7a0f7d34e34
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:79:ed:ad:8d:f5:5f:d9:b6:65:7d:fe:cc:de:
                    fa:53:ae:07:1e:1f:b8:b5:d0:75:72:9d:ce:49:92:
                    1f:28:bd:03:9e:e4:2d:36:8b:d4:26:7a:4b:21:d8:
                    54:8e:67:7b:aa:36:db:54:57:65:66:87:22:52:40:
                    bb:03:e3:50:49:f7:98:a0:ea:72:d9:39:2e:06:b8:
                    2c:07:ea:70:4f:aa:af:50:76:40:d1:d1:13:b8:3d:
                    b5:5e:b9:ab:c5:b7:bc:df:18:31:53:ed:11:b1:bb:
                    9f:2f:79:a8:12:68:6a:54:1f:64:3a:87:d8:81:ac:
                    fb:f7:a8:c6:51:83:78:19:ea:08:1c:93:7e:3d:79:
                    68:7d:38:98:b8:21:fd:50:e9:83:df:d4:32:2a:62:
                    7f:70:9d:d5:f0:09:42:f5:b2:df:7d:29:e5:4c:f7:
                    e2:b2:b6:69:14:db:cb:f1:63:fb:1f:f1:43:a8:3f:
                    ad:b5:f8:1e:d6:a2:d2:f8:5d:f4:34:58:f5:29:68:
                    25:22:99:65:e5:f7:8d:db:d9:2c:1c:13:dc:2f:01:
                    9d:eb:7a:19:df:4e:a7:a7:b1:ea:a3:b4:0c:5a:bb:
                    19:32:92:72:4e:b3:5c:93:5f:9d:4a:c8:c9:0e:48:
                    07:e6:89:cb:52:51:53:aa:75:29:2f:80:de:14:af:
                    fb:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:B6:CD:18:C1:57:00:E9:F0:6D:82:38:3E:2B:56:DD:94:91:2A:27
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1f7c91ae-026c-479d-9cb5-d3837e3d4751/fa8eb30f-23ef-3b93-aee9-b05edf5e3a90.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1f7c91ae-026c-479d-9cb5-d3837e3d4751/1f7c91ae-026c-479d-9cb5-d3837e3d4751.crl

            X509v3 Authority Key Identifier:
                keyid:B6:31:20:DC:30:4B:1B:26:F4:1F:E4:5B:2B:92:7D:62:52:7E:13:CB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1f7c91ae-026c-479d-9cb5-d3837e3d4751.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.209.52.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         06:9f:30:6c:f8:02:cf:3e:bd:c2:73:f2:0c:82:e3:fa:20:53:
         68:ae:93:13:0c:4f:a6:02:fa:e2:39:0a:3f:8f:3d:38:30:93:
         ef:ac:fe:75:25:b2:9f:bf:4c:17:c0:90:2a:a4:09:4a:f0:ef:
         4a:d8:30:ad:9e:49:b2:8f:03:14:fb:dc:87:90:d0:9b:75:b7:
         93:85:1b:1c:11:22:5d:0a:61:b6:44:74:01:03:c5:a7:e7:2b:
         ea:2d:16:b5:89:ca:fb:6f:46:3c:f0:94:06:53:97:13:b9:d1:
         37:34:e0:a1:9e:16:80:06:c4:bf:18:79:d4:fb:5d:4d:c9:13:
         4e:e8:02:69:3d:4e:fe:ca:ca:d0:df:68:24:76:a9:c3:18:fc:
         f3:b8:c5:38:03:a1:43:53:e3:40:f1:1e:fd:80:f6:00:b8:bc:
         c7:21:0c:8b:15:d0:7a:97:32:e7:bb:97:d1:04:d3:35:b9:0d:
         7e:ca:2a:63:fb:24:76:24:d6:9a:75:89:05:ca:58:07:43:c4:
         53:be:40:2d:dc:90:0e:54:7a:06:ff:4e:e2:3e:9d:b3:96:ff:
         cc:7d:f5:21:b8:84:03:e4:75:aa:04:48:7b:95:6b:4f:eb:69:
         54:60:38:72:e3:ca:11:9e:dc:5d:e1:59:a6:98:56:5a:6b:59:
         6a:d0:98:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 3 17:44:40 2026 by rpki-client