Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/74c66e80-7073-3988-a63b-86cdc1e03230.roa
File:                     74c66e80-7073-3988-a63b-86cdc1e03230.roa (raw, json)
Hash identifier:          Efj9wGLmavYakkZ6GLgx7lPJxceC/jG1sm9VwuwSJsQ=
Subject key identifier:   3B:BA:CA:90:4F:20:BF:AB:57:DC:20:27:89:FA:E0:E3:D0:0B:41:AC
Certificate issuer:       /CN=8511b8dc-74ba-47e5-af4a-7c4e6b777d92
Certificate serial:       010D0C9F4328584CD6D208E64CB07240A68ECA00
Authority key identifier: D7:F3:DF:A9:F7:40:F0:2B:51:D8:42:27:F2:DC:C2:E1:DF:60:75:0E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/74c66e80-7073-3988-a63b-86cdc1e03230.roa
Signing time:             Thu 12 Feb 2026 14:00:40 +0000
ROA not before:           Thu 12 Feb 2026 14:00:40 +0000
ROA not after:            Wed 13 May 2026 13:00:40 +0000
asID:                     4540
IP address blocks:        66.187.112.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Feb 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:d6:d2:08:e6:4c:b0:72:40:a6:8e:ca:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8511b8dc-74ba-47e5-af4a-7c4e6b777d92
        Validity
            Not Before: Feb 12 14:00:40 2026 GMT
            Not After : May 13 13:00:40 2026 GMT
        Subject: CN=5a8e8665-99b7-40a7-98ea-d26ca1f808d7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:1c:58:a4:42:85:68:d1:b6:72:f0:a9:b0:8f:
                    79:17:b2:59:f1:b7:15:f9:40:6e:2e:76:e6:1c:64:
                    d8:1e:04:30:23:4e:6b:b3:fa:4f:af:64:9b:30:f2:
                    2e:33:3d:00:29:06:a2:d7:46:e0:7a:05:ae:97:ae:
                    05:5b:25:f1:4f:64:1a:56:15:a7:79:41:f7:05:41:
                    be:42:87:89:5f:fb:5c:14:69:18:1f:ee:3b:8b:01:
                    e6:71:9a:76:5f:54:d8:08:80:6d:aa:81:6c:95:e6:
                    df:a2:47:f3:53:2a:b3:b9:48:a1:91:e6:62:3c:4e:
                    97:a9:f9:e9:19:4e:f3:be:eb:d5:96:0e:57:bd:d3:
                    0b:05:ea:a1:5a:e6:4f:bf:34:d4:92:a7:20:ed:e7:
                    68:e0:9d:2a:a0:7b:b6:78:8f:df:e2:89:c2:9d:66:
                    df:e6:3b:aa:d3:fb:fc:23:30:e7:50:0d:dc:cd:56:
                    76:47:59:a6:de:1a:44:d7:bc:84:47:97:64:c0:fe:
                    71:03:82:c9:27:fe:7d:fa:16:0a:ba:0e:bf:84:f4:
                    94:29:18:ef:f5:61:45:b0:8a:fc:4a:af:19:9e:62:
                    06:f1:1a:93:46:0e:37:0f:09:b3:85:b9:f5:95:c2:
                    c1:59:8f:ff:8f:d3:4e:07:27:08:fe:38:b4:a9:86:
                    25:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:BA:CA:90:4F:20:BF:AB:57:DC:20:27:89:FA:E0:E3:D0:0B:41:AC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/74c66e80-7073-3988-a63b-86cdc1e03230.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.crl

            X509v3 Authority Key Identifier:
                keyid:D7:F3:DF:A9:F7:40:F0:2B:51:D8:42:27:F2:DC:C2:E1:DF:60:75:0E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.187.112.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         78:28:49:ef:98:fd:43:ab:62:7a:c8:88:e0:e8:fe:de:fc:4c:
         0c:87:5c:a4:2f:d1:5d:44:8e:20:96:67:29:0f:cf:99:dc:b5:
         d8:be:5d:24:23:29:cb:fe:7c:0c:ae:8b:3e:7b:e1:c3:95:ae:
         f8:d5:2a:84:0e:23:62:ac:fd:04:1b:70:6f:3d:2c:39:64:6f:
         54:21:fb:62:3d:48:20:45:cc:b1:2e:03:63:88:db:dd:a4:af:
         dd:d4:55:80:7b:a6:32:ae:27:d1:48:ad:c9:e9:d1:80:9c:d8:
         6b:3d:45:84:a0:99:29:d0:64:39:35:d8:48:5e:6b:58:d1:0b:
         ce:c7:ee:88:20:71:da:ef:40:4b:41:91:26:7e:f2:af:3f:b2:
         a7:ea:a4:1d:7b:5d:b6:4c:cb:27:01:e5:7c:87:da:32:98:06:
         fe:be:5a:1d:fc:b9:fc:60:21:84:16:e9:88:1e:7e:66:72:77:
         78:4b:54:a7:41:9e:6a:8b:48:47:76:04:ac:10:6c:ea:ab:e1:
         8d:c5:f6:f2:05:42:e7:c6:c6:40:09:a5:5b:22:cf:19:a8:5c:
         0e:2a:be:fe:25:dc:fa:c6:fe:88:76:0e:a0:c0:af:75:c5:f7:
         e9:dc:f2:fb:2e:a4:d9:1d:cd:80:d9:78:6f:93:29:78:07:f8:
         1d:d2:c2:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 27 07:34:22 2026 by rpki-client