Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24558553-b258-484a-bd6f-5e8b36c98065/f238559b-00ef-3471-8eaa-f968448004a9.roa
File:                     f238559b-00ef-3471-8eaa-f968448004a9.roa (raw, json)
Hash identifier:          SFatKjDkzXiWguLF7eYiBATPrhj9t2uGX3jZeqxZBP4=
Subject key identifier:   0D:C1:D6:A0:D8:B7:D6:95:72:3E:92:63:EB:E1:08:CA:08:AF:7D:D4
Certificate issuer:       /CN=24558553-b258-484a-bd6f-5e8b36c98065
Certificate serial:       010D0C9F4328584F549DA9F4FD9928FCFF02E6C0
Authority key identifier: 9E:01:D5:E4:F7:85:25:4D:C3:43:2A:E2:94:E9:43:3B:49:7A:F5:8B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24558553-b258-484a-bd6f-5e8b36c98065.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24558553-b258-484a-bd6f-5e8b36c98065/f238559b-00ef-3471-8eaa-f968448004a9.roa
Signing time:             Tue 29 Sep 2026 01:00:12 +0000
ROA not before:           Tue 29 Sep 2026 01:00:12 +0000
ROA not after:            Mon 28 Dec 2026 02:00:12 +0000
asID:                     16992
IP address blocks:        66.37.145.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24558553-b258-484a-bd6f-5e8b36c98065/24558553-b258-484a-bd6f-5e8b36c98065.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24558553-b258-484a-bd6f-5e8b36c98065/24558553-b258-484a-bd6f-5e8b36c98065.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24558553-b258-484a-bd6f-5e8b36c98065.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:54:9d:a9:f4:fd:99:28:fc:ff:02:e6:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=24558553-b258-484a-bd6f-5e8b36c98065
        Validity
            Not Before: Sep 29 01:00:12 2026 GMT
            Not After : Dec 28 02:00:12 2026 GMT
        Subject: CN=2475157b-e54a-4403-8402-1d716b478544
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:88:c8:57:86:4d:a8:0d:a0:fb:d5:71:da:6c:
                    77:32:63:53:92:18:86:e1:95:d8:69:5f:19:f9:07:
                    0a:4e:e6:04:97:2f:a5:96:ee:b5:14:ee:cb:18:24:
                    8a:b7:b0:ce:d5:f1:2a:62:7e:9e:36:b7:77:02:3d:
                    a6:03:9a:f7:56:b2:30:9e:c4:e6:bc:5e:3d:e7:4e:
                    93:4a:03:bb:99:82:57:a8:0a:10:df:b9:30:91:36:
                    a1:d7:b5:b3:1a:99:0f:20:70:bc:1a:42:da:87:c3:
                    6f:eb:40:04:0e:dc:2b:60:00:16:45:7e:a3:7b:8b:
                    12:ed:4c:55:1c:49:2c:ef:22:6d:d6:8a:4d:2a:9e:
                    f7:91:d0:23:d4:a1:c4:f7:87:a2:e4:f8:71:ec:7d:
                    06:ac:bd:e4:c0:25:e8:d4:8b:20:5a:17:42:94:13:
                    72:22:a7:b4:0c:b2:e8:10:8f:c8:5f:c3:ed:67:b1:
                    d9:5f:bb:a3:d7:40:66:2a:45:85:9f:3f:86:64:be:
                    e9:13:f7:57:2d:b0:c3:3e:a5:05:05:2e:8b:68:8a:
                    11:cd:cb:62:7a:61:a1:ec:c0:b7:07:95:b6:1a:c9:
                    e7:92:8c:67:2b:03:d3:12:90:4e:67:69:28:31:70:
                    70:75:76:a8:34:f2:c6:8f:91:81:8b:aa:91:9e:52:
                    94:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:C1:D6:A0:D8:B7:D6:95:72:3E:92:63:EB:E1:08:CA:08:AF:7D:D4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24558553-b258-484a-bd6f-5e8b36c98065/f238559b-00ef-3471-8eaa-f968448004a9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24558553-b258-484a-bd6f-5e8b36c98065/24558553-b258-484a-bd6f-5e8b36c98065.crl

            X509v3 Authority Key Identifier:
                keyid:9E:01:D5:E4:F7:85:25:4D:C3:43:2A:E2:94:E9:43:3B:49:7A:F5:8B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24558553-b258-484a-bd6f-5e8b36c98065.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.37.145.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2a:1e:3b:94:b5:f9:ca:e3:ec:39:4a:7c:ed:22:9c:28:e3:20:
         ec:c7:6a:cd:11:71:30:34:01:7a:e9:d6:62:83:0d:65:98:10:
         d0:f9:53:91:d6:59:c0:10:9c:f8:14:37:68:99:2d:38:c6:e0:
         7f:42:a7:44:14:4c:4f:e9:32:6a:b8:6c:2d:e9:3a:8a:88:62:
         98:cd:e9:66:37:80:cc:36:01:37:bf:e4:16:3d:a8:ca:3c:4b:
         bf:d2:77:b2:73:0c:bd:c2:6c:c4:63:f0:f1:2a:97:a0:3e:bd:
         04:c2:a6:46:83:b1:26:96:44:d6:89:b9:40:2a:55:b3:4e:1a:
         37:71:8a:bb:36:17:52:ba:e4:11:b7:18:0e:1a:af:1a:4f:65:
         86:02:17:36:ff:0f:ed:a6:12:29:9c:a1:22:64:9d:b1:c9:b9:
         68:9f:c6:d1:6d:27:e9:e6:05:25:02:5d:8e:fc:30:23:2b:da:
         d5:70:6c:2a:42:bb:e1:27:e9:18:f7:29:79:ec:3c:32:f3:dc:
         55:e7:32:96:fd:fd:f9:b2:53:ab:83:a4:1e:3c:87:ce:b7:ba:
         8f:fd:2e:dd:f3:67:ab:97:a4:88:d2:93:e0:92:a3:d6:12:c4:
         12:66:d8:98:6a:3b:fe:9d:00:b3:28:d5:52:ca:ae:37:e2:14:
         64:45:85:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 08:58:57 2026 by rpki-client