Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/10d2fad9-d85a-38ed-9b0e-bf0954f24155.roa
File:                     10d2fad9-d85a-38ed-9b0e-bf0954f24155.roa (raw, json)
Hash identifier:          FuZ13LRSI9wFXNTHfZJM3gc3PDntXMVYsDv4mqWYx8c=
Subject key identifier:   C2:0E:D2:A1:E7:67:6C:5E:42:69:74:86:12:1D:49:07:E2:63:29:30
Certificate issuer:       /CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a
Certificate serial:       010D0C9F4328584D8D8FEE3605209E4822672E00
Authority key identifier: 49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/10d2fad9-d85a-38ed-9b0e-bf0954f24155.roa
Signing time:             Sun 19 Apr 2026 01:00:23 +0000
ROA not before:           Sun 19 Apr 2026 01:00:23 +0000
ROA not after:            Sat 18 Jul 2026 01:00:23 +0000
asID:                     23473
IP address blocks:        66.253.158.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 09 May 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:8d:8f:ee:36:05:20:9e:48:22:67:2e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a
        Validity
            Not Before: Apr 19 01:00:23 2026 GMT
            Not After : Jul 18 01:00:23 2026 GMT
        Subject: CN=3c238554-0583-499c-997a-b5664ed412ac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:5e:76:f5:b0:6a:63:32:cf:8e:a9:c8:2b:90:
                    ee:6d:48:f6:5d:f7:c2:60:42:c1:af:d8:c9:c1:e0:
                    b1:6a:2b:0d:f1:45:35:e8:3e:4f:01:f9:4f:59:96:
                    cd:a5:2b:a8:2c:8d:54:29:f3:bb:46:60:86:28:bf:
                    97:dd:04:88:e0:74:f4:4f:f6:9f:26:02:75:13:5d:
                    ee:85:d4:9c:85:04:e6:15:71:c2:87:e5:45:3f:dd:
                    94:c9:7f:45:43:fe:e7:52:ec:f0:6b:9d:a5:c7:e9:
                    a3:37:e8:2a:39:6f:97:16:2e:97:96:28:e7:43:93:
                    2e:a0:1c:31:4b:27:6c:db:27:91:c1:5c:07:94:ae:
                    85:00:c0:75:0f:65:52:a8:11:df:89:d5:9a:ba:56:
                    4a:2e:97:7f:6a:f4:3a:c3:0d:79:2a:c7:7b:67:4e:
                    ba:97:59:f4:95:bc:7d:8c:6c:67:ce:44:52:7f:a2:
                    74:1c:35:77:1a:01:28:7f:23:9c:15:3f:32:de:d9:
                    44:9f:37:6d:d5:6b:95:78:f5:88:a0:29:55:da:2c:
                    a4:a4:07:23:4c:4d:36:5f:5f:49:a1:ea:0b:19:ac:
                    9d:9b:03:5a:94:83:4c:f8:a4:e9:7d:72:ba:87:1b:
                    fa:4c:63:98:cd:14:9e:b6:68:15:29:b9:d3:3c:c5:
                    c6:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:0E:D2:A1:E7:67:6C:5E:42:69:74:86:12:1D:49:07:E2:63:29:30
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/10d2fad9-d85a-38ed-9b0e-bf0954f24155.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl

            X509v3 Authority Key Identifier:
                keyid:49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.253.158.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         31:9f:e3:c3:0f:63:08:a1:58:8f:8c:a9:f0:e2:e9:0f:a8:9f:
         f3:8e:98:82:94:01:3e:99:99:da:4f:c3:6f:ef:00:43:7a:d4:
         b2:9e:28:33:3b:39:4d:e7:6a:81:62:50:d8:65:56:c7:46:74:
         ed:9a:4b:b1:1d:55:25:26:6b:33:dc:ea:0f:89:2e:eb:b1:c1:
         70:0a:b3:98:df:25:a9:e9:c3:e2:0f:ea:d9:e7:d8:23:eb:d7:
         90:c3:9e:dc:a8:a2:40:1e:df:20:b4:54:21:c1:ac:fe:94:58:
         4d:4c:df:8b:17:f6:45:9c:fd:2d:74:38:77:39:b1:44:33:b4:
         06:51:1d:5f:68:bc:fe:74:c8:2b:80:f3:f3:01:a3:2d:1e:98:
         96:82:40:1c:48:db:fb:92:6f:f1:a5:49:2b:a0:95:54:cf:9f:
         7a:06:12:df:6b:ee:03:59:52:c3:6c:e9:96:fe:53:72:5f:27:
         18:9d:8d:95:11:89:31:c8:84:7c:9b:58:1f:aa:c0:7a:de:3b:
         c2:f1:18:8c:dd:ea:dd:b0:1e:a4:32:7e:54:73:42:1e:24:81:
         6d:6e:8f:1e:39:a6:75:20:22:1d:b1:60:dc:9a:57:9e:f6:96:
         fc:07:4f:6e:93:fc:63:97:14:1b:90:19:19:71:2a:20:0b:37:
         0b:2d:1b:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 7 03:13:47 2026 by rpki-client