Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/66a219b1-9a85-3816-b306-827ed97596c0.roa
File:                     66a219b1-9a85-3816-b306-827ed97596c0.roa (raw, json)
Hash identifier:          pswK3+STPoOWVtnKqWbRpHtrNqq0ubnTKChTFvS77Hg=
Subject key identifier:   22:84:04:EA:D7:01:7A:6F:1F:4C:3F:80:89:D6:50:66:55:66:E1:29
Certificate issuer:       /CN=3f8d6baa-d4d5-415c-a024-00343e5a69d1
Certificate serial:       010D0C9F4328584D1B1A14CA629E731129174C80
Authority key identifier: 40:99:74:B4:C0:F6:6C:EC:3E:BA:50:F8:B3:40:34:15:D8:1C:87:FB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/66a219b1-9a85-3816-b306-827ed97596c0.roa
Signing time:             Mon 09 Mar 2026 01:00:32 +0000
ROA not before:           Mon 09 Mar 2026 01:00:32 +0000
ROA not after:            Sun 07 Jun 2026 01:00:32 +0000
asID:                     11090
IP address blocks:        72.35.112.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/3f8d6baa-d4d5-415c-a024-00343e5a69d1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/3f8d6baa-d4d5-415c-a024-00343e5a69d1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 14 Mar 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:1b:1a:14:ca:62:9e:73:11:29:17:4c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f8d6baa-d4d5-415c-a024-00343e5a69d1
        Validity
            Not Before: Mar  9 01:00:32 2026 GMT
            Not After : Jun  7 01:00:32 2026 GMT
        Subject: CN=b651f92f-f39a-4abb-859f-8bcb6df074bf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:93:02:47:22:ad:bc:ed:74:ac:44:ac:97:b0:
                    a1:d5:b0:61:b7:49:8c:df:60:92:66:93:c1:6f:ba:
                    ef:1f:a2:bb:b3:ac:4d:20:2e:30:4f:5e:84:e6:e8:
                    49:e5:8e:04:6e:b2:b9:3f:af:32:90:2d:09:57:c6:
                    30:a5:ef:d6:28:34:a2:3e:21:3a:ab:34:e1:4d:0c:
                    77:cc:95:a6:22:ff:f7:2b:72:71:e9:44:9e:22:44:
                    9b:62:50:1b:c1:43:b9:8c:9a:08:b7:24:3d:3b:66:
                    09:99:39:1d:35:5c:ae:dd:76:da:ea:09:2d:0d:3c:
                    97:0f:f3:5e:16:9f:d4:e4:ea:32:c8:50:30:27:a3:
                    b7:e1:e9:f3:26:c9:be:98:21:38:e9:da:c2:b6:b5:
                    21:0a:b5:b9:de:c9:16:94:51:13:91:f9:87:a1:4c:
                    df:aa:cd:1a:cc:0a:cc:29:dd:55:dc:6b:c0:fe:77:
                    f6:0b:32:ac:8f:a7:1d:41:a0:9e:0f:b9:e2:d3:8f:
                    51:71:50:a3:f8:b5:c9:54:77:e5:24:0d:d7:ab:bd:
                    9f:7e:32:cb:2e:77:5a:a6:b3:b0:b8:e2:34:1b:5e:
                    9e:a0:c4:cb:d9:f1:64:5e:8d:4f:ce:0f:a4:0c:06:
                    22:e9:2c:40:83:7b:bc:9e:b2:b1:78:a2:4c:b9:09:
                    71:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:84:04:EA:D7:01:7A:6F:1F:4C:3F:80:89:D6:50:66:55:66:E1:29
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/66a219b1-9a85-3816-b306-827ed97596c0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/3f8d6baa-d4d5-415c-a024-00343e5a69d1.crl

            X509v3 Authority Key Identifier:
                keyid:40:99:74:B4:C0:F6:6C:EC:3E:BA:50:F8:B3:40:34:15:D8:1C:87:FB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.35.112.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         45:1a:40:38:59:3e:44:40:32:fe:0a:47:91:61:b0:d9:5b:7d:
         3b:3a:fe:cb:9c:ec:ba:fd:29:81:c1:95:e3:3a:14:3d:7f:27:
         4d:04:ba:3f:1b:45:56:bd:52:c2:9b:64:ea:83:10:95:78:7c:
         ca:ac:e2:2f:59:fc:d7:38:92:d6:44:e5:7c:6d:59:71:32:fb:
         03:53:54:9d:c4:90:eb:d5:e4:ff:78:b8:f6:0b:6d:eb:cb:fe:
         e3:fb:c7:53:3e:21:24:06:bb:cc:10:8c:bd:4f:ee:a0:9b:91:
         c9:57:4c:53:aa:df:8a:5d:8a:65:0e:ab:92:44:c6:1a:b5:2b:
         dc:26:a9:83:21:93:46:11:d2:f9:cb:7c:3b:d4:1a:cd:9a:39:
         12:15:a4:a3:93:f5:7c:5e:45:a9:a0:47:22:cc:4e:56:8d:a7:
         3d:d3:2a:2b:fd:9d:38:8b:01:62:eb:77:64:10:dc:5a:50:c6:
         fc:28:04:3c:b7:6e:24:8b:87:70:05:78:87:56:4f:61:c3:30:
         c6:94:3a:24:c9:97:15:7c:d8:a8:c6:85:0a:9d:35:97:7a:8a:
         e1:b5:e9:be:58:e4:8a:3e:60:70:c5:70:4c:3a:f5:d1:30:83:
         75:58:6f:b2:74:34:3d:50:88:8d:8b:4e:54:59:d0:a0:ee:47:
         c2:39:90:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 10:55:38 2026 by rpki-client