Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/f804b9fc-d5fc-3af4-99a2-11b31f98e48e.roa
File:                     f804b9fc-d5fc-3af4-99a2-11b31f98e48e.roa (raw, json)
Hash identifier:          yFxoT2ApSpLvUqcN94cn0HeSePHMCU63iJeDG4/z19k=
Subject key identifier:   82:73:10:8D:FD:82:8F:52:0E:B3:C1:84:E7:37:DD:50:01:DD:1E:F9
Certificate issuer:       /CN=93458135-7183-45e8-9dbc-dd82d2ffa119
Certificate serial:       010D0C9F4328584ED9C7569D2D48FBD752971FE0
Authority key identifier: EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/f804b9fc-d5fc-3af4-99a2-11b31f98e48e.roa
Signing time:             Sun 16 Aug 2026 01:00:14 +0000
ROA not before:           Sun 16 Aug 2026 01:00:14 +0000
ROA not after:            Sat 14 Nov 2026 02:00:14 +0000
asID:                     4997
IP address blocks:        66.213.144.0/21 maxlen: 21
                          66.213.152.0/21 maxlen: 21
                          66.213.153.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 28 Aug 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:d9:c7:56:9d:2d:48:fb:d7:52:97:1f:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93458135-7183-45e8-9dbc-dd82d2ffa119
        Validity
            Not Before: Aug 16 01:00:14 2026 GMT
            Not After : Nov 14 02:00:14 2026 GMT
        Subject: CN=9d5e6957-28c9-4ebc-86cc-b41ed3bf8b77
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:13:09:24:36:bd:ad:ec:cd:c4:5e:cc:81:bd:
                    98:b8:d5:90:85:09:a1:81:82:97:7c:39:02:48:7b:
                    cf:6b:a6:55:5c:99:9f:6d:e9:25:e5:c9:96:93:20:
                    27:14:0a:13:4b:12:8f:4c:d1:13:dc:30:24:92:23:
                    45:8b:79:8b:94:ba:bb:e2:9d:3a:c9:af:9d:a6:7a:
                    dc:7b:07:2f:ac:23:67:80:0e:6d:87:30:18:66:a3:
                    db:5c:9f:03:34:d8:55:ca:80:45:ca:3d:0c:b3:05:
                    e6:3d:be:4e:c3:3d:8c:35:52:ee:80:a7:bd:02:56:
                    88:0a:ae:e5:c8:7c:d2:29:9d:36:b4:85:16:3d:52:
                    28:9a:43:d7:71:2c:ae:ed:dd:38:fc:a9:19:0d:82:
                    f7:c0:92:a3:e4:f2:61:b0:53:31:83:88:6f:59:44:
                    5c:d2:83:b7:b0:df:f9:1e:e6:5f:3f:b1:32:94:37:
                    10:75:ee:3e:f0:61:21:72:f0:04:b6:f5:25:4b:99:
                    4c:1e:eb:79:0a:88:9b:b2:53:ff:b9:d1:1b:18:39:
                    de:a4:8a:5c:e6:c1:ed:69:ac:cd:3f:09:18:15:a7:
                    e7:97:c2:b8:05:25:29:e4:f9:4a:77:2a:0f:0b:2f:
                    c9:6c:2c:16:4b:d8:77:e9:a9:38:e2:6d:79:ef:0d:
                    08:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:73:10:8D:FD:82:8F:52:0E:B3:C1:84:E7:37:DD:50:01:DD:1E:F9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/f804b9fc-d5fc-3af4-99a2-11b31f98e48e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl

            X509v3 Authority Key Identifier:
                keyid:EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.213.144.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         71:af:c3:86:2a:fd:b3:ca:15:fd:ec:17:5e:e6:c8:4a:8c:98:
         c8:55:f6:8b:e0:e7:53:ec:c9:a7:fc:71:3d:f1:5d:e5:eb:bb:
         d2:44:88:f7:b5:66:82:2b:90:54:da:82:7a:48:d8:a6:c9:ad:
         88:87:7c:53:2f:25:a8:e7:1e:d9:98:ae:1f:ab:21:38:14:43:
         bf:26:3b:fc:04:55:71:e7:5c:17:b2:18:fb:3b:6d:49:8e:ec:
         2d:87:c4:76:96:e2:29:ef:78:af:f2:01:b7:4e:80:a8:db:52:
         d5:c8:64:4b:dd:a6:ab:8d:aa:7a:a2:64:a1:8b:c3:f0:c3:6a:
         be:65:c0:e6:5f:6c:87:2a:44:20:3d:b2:b5:0b:db:c3:5e:04:
         21:96:0e:ba:2b:5a:2b:07:b0:2e:5b:a4:fa:55:56:46:3e:c8:
         2f:47:9c:94:75:96:2a:33:8f:ea:24:5f:43:51:cb:e2:b0:f8:
         9a:08:81:06:f2:3d:2e:5a:66:57:1a:ee:f0:5c:f8:65:9e:f9:
         8d:cf:e6:83:5e:aa:02:04:4f:47:5c:f1:fc:df:7f:98:e8:1d:
         e3:5c:02:82:39:a4:5f:6a:c7:65:81:80:dd:8f:3f:b9:6a:3a:
         e2:69:28:80:76:5b:83:5f:c9:05:39:44:eb:e4:c4:f6:ed:ef:
         b8:81:4d:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 08:00:08 2026 by rpki-client