Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6887eee0-416a-404d-ad65-190613613018/cec44da2-ca0e-33ef-9a98-9c57f77f9e2e.roa
File:                     cec44da2-ca0e-33ef-9a98-9c57f77f9e2e.roa (raw, json)
Hash identifier:          n/ZUGZc9XhEbylFxdZs11YQHEDhH5OkzuYiUWHjaU4s=
Subject key identifier:   00:0F:57:92:4E:08:F5:92:1A:2A:D5:60:C6:75:7E:5D:9B:3A:9B:00
Certificate issuer:       /CN=6887eee0-416a-404d-ad65-190613613018
Certificate serial:       010D0C9F4328584F698D66AA793DE8DD49A7AB40
Authority key identifier: 7B:5C:D2:6F:07:D1:24:31:AF:CF:CE:8F:F0:9A:EB:8A:04:A2:06:D5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6887eee0-416a-404d-ad65-190613613018.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6887eee0-416a-404d-ad65-190613613018/cec44da2-ca0e-33ef-9a98-9c57f77f9e2e.roa
Signing time:             Tue 06 Oct 2026 13:00:13 +0000
ROA not before:           Tue 06 Oct 2026 13:00:13 +0000
ROA not after:            Mon 04 Jan 2027 14:00:13 +0000
asID:                     2914
IP address blocks:        66.33.22.0/24 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6887eee0-416a-404d-ad65-190613613018/6887eee0-416a-404d-ad65-190613613018.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6887eee0-416a-404d-ad65-190613613018/6887eee0-416a-404d-ad65-190613613018.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6887eee0-416a-404d-ad65-190613613018.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 08 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:69:8d:66:aa:79:3d:e8:dd:49:a7:ab:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6887eee0-416a-404d-ad65-190613613018
        Validity
            Not Before: Oct  6 13:00:13 2026 GMT
            Not After : Jan  4 14:00:13 2027 GMT
        Subject: CN=f2f9a12b-83b4-4a7c-942b-cf29bb50393d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:16:92:92:77:67:2c:27:88:53:97:89:36:92:
                    1c:cc:7c:a0:63:5f:7d:5a:12:c7:98:47:7b:a5:ad:
                    0e:76:64:2a:a1:c1:ed:76:09:8d:92:6e:b4:23:7e:
                    8f:cf:bb:3b:b4:8b:45:ad:c0:32:df:c0:b7:ce:fa:
                    4f:bb:83:e5:07:b9:bc:cb:df:11:b9:1e:68:e9:1d:
                    26:09:73:85:0e:0c:b6:58:e3:b5:6f:54:cf:35:79:
                    ac:a9:e8:f9:b1:dd:55:ba:4c:98:09:4a:38:04:b5:
                    c6:13:12:a6:62:d9:83:7c:68:9d:0b:fa:2e:eb:69:
                    2c:99:67:9e:9f:5a:4a:a7:3c:06:ff:24:8a:f2:b9:
                    a2:c3:bd:65:e4:e1:3f:66:93:9e:f4:02:2f:2a:73:
                    1d:8e:b4:5f:10:9a:d1:dc:e4:ae:a2:9b:98:1c:09:
                    40:fb:bd:6a:f5:89:b8:83:c8:d8:69:a8:3c:ae:cb:
                    ef:56:38:c6:a4:e0:30:66:84:1d:35:ce:f6:8c:b7:
                    3b:78:44:20:0c:f5:af:7e:69:b2:61:f5:6d:96:d1:
                    5a:90:bc:6f:0a:2c:41:96:36:c4:7b:77:a9:38:e5:
                    c9:83:3c:d6:3b:f5:31:a4:a3:ae:65:5a:11:ef:df:
                    3e:44:28:5f:a0:b4:1a:fe:b3:db:e2:b9:2a:10:8c:
                    1d:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:0F:57:92:4E:08:F5:92:1A:2A:D5:60:C6:75:7E:5D:9B:3A:9B:00
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6887eee0-416a-404d-ad65-190613613018/cec44da2-ca0e-33ef-9a98-9c57f77f9e2e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6887eee0-416a-404d-ad65-190613613018/6887eee0-416a-404d-ad65-190613613018.crl

            X509v3 Authority Key Identifier:
                keyid:7B:5C:D2:6F:07:D1:24:31:AF:CF:CE:8F:F0:9A:EB:8A:04:A2:06:D5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6887eee0-416a-404d-ad65-190613613018.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.33.22.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0a:34:8c:c9:16:48:d1:1c:00:bd:d4:28:76:0a:4f:98:e2:a1:
         8d:39:19:41:04:f3:36:98:7d:c7:cd:78:e3:92:1b:89:51:4b:
         02:6f:e7:d2:61:2c:52:f9:4b:39:1e:a0:9a:be:30:be:da:86:
         df:dd:2e:40:5e:a2:9d:69:89:7c:b3:c0:e8:de:d3:6d:ad:28:
         6f:93:51:51:5d:7c:a9:c9:67:5a:b4:2e:0f:a2:b2:1b:20:bc:
         98:2d:42:bf:a6:02:bd:86:fd:48:6d:41:fd:8a:d1:d3:42:97:
         d3:da:76:fc:0e:32:3e:76:06:12:5a:1a:47:2e:64:61:02:c2:
         3d:4f:d4:f8:62:0b:18:2c:0e:50:ce:23:8f:52:0b:6b:20:16:
         dd:2d:90:c8:d8:2c:44:a8:ac:46:03:30:17:9d:4f:fa:cb:f5:
         ef:33:ad:29:7e:3b:17:33:2a:04:63:92:86:ae:d4:95:06:20:
         ab:63:23:0b:e4:0b:56:07:0d:76:27:6e:b6:31:cf:d5:2c:db:
         85:07:c7:52:2a:5a:02:f3:8c:f9:0e:0b:7d:d1:a8:83:50:0c:
         64:04:e5:55:ff:ce:6f:6b:97:48:9f:f8:73:42:4f:d8:a4:77:
         21:57:05:25:b4:6c:f7:98:80:9e:cd:fe:c8:b9:d6:95:3a:ab:
         85:aa:a2:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 7 04:30:00 2026 by rpki-client