Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/70b491ba-5507-36ed-97d1-864053a80150.roa
File:                     70b491ba-5507-36ed-97d1-864053a80150.roa (raw, json)
Hash identifier:          tatQ7jcpg1EfANvuCc//FDV3WF3frlZ35aJOEo0MmE0=
Subject key identifier:   F5:42:F2:9C:A1:54:EE:AD:29:B4:5D:46:28:54:AB:64:37:0F:EC:A1
Certificate issuer:       /CN=24fa05bf-5b46-4a55-bd55-4891d21cb24f
Certificate serial:       010D0C9F4328584DFBD5EFDF24486839445AC880
Authority key identifier: F7:6F:8C:D8:57:DC:73:3D:90:CF:C1:F9:F3:DF:C0:38:A5:E8:74:80
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/70b491ba-5507-36ed-97d1-864053a80150.roa
Signing time:             Thu 28 May 2026 13:00:12 +0000
ROA not before:           Thu 28 May 2026 13:00:12 +0000
ROA not after:            Wed 26 Aug 2026 13:00:12 +0000
asID:                     394437
IP address blocks:        66.249.111.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/24fa05bf-5b46-4a55-bd55-4891d21cb24f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/24fa05bf-5b46-4a55-bd55-4891d21cb24f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 02 Jun 2026 05:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:fb:d5:ef:df:24:48:68:39:44:5a:c8:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=24fa05bf-5b46-4a55-bd55-4891d21cb24f
        Validity
            Not Before: May 28 13:00:12 2026 GMT
            Not After : Aug 26 13:00:12 2026 GMT
        Subject: CN=b3e40574-faaa-4813-a06f-27b18ced56e6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:65:e5:2a:69:10:7d:fa:2e:fe:93:c3:32:8c:
                    5f:cd:39:36:19:47:e4:b3:db:65:d1:e2:e6:b3:64:
                    11:8e:b0:87:05:d9:ec:d2:3b:cb:7e:db:12:e6:0a:
                    ed:8c:f1:f8:41:8e:64:76:0b:b3:7e:0d:b0:53:25:
                    a6:a2:45:91:35:85:ea:09:41:39:02:7e:c2:74:23:
                    35:35:cc:a1:c4:01:68:cb:41:11:db:4d:25:e7:8a:
                    e1:57:dc:af:ac:ac:74:56:eb:a1:26:de:23:08:8f:
                    89:1b:d1:de:6a:40:66:a4:2f:01:2b:c3:cd:9b:cf:
                    45:2b:29:cb:03:3e:be:6f:59:4b:71:82:d0:c5:4f:
                    c4:68:d0:7d:28:a5:69:9b:cf:19:f0:90:10:d4:a3:
                    c5:f6:73:d8:3c:78:da:32:26:ed:56:95:b1:bf:90:
                    c8:27:79:32:2c:d7:91:82:61:17:70:c0:4d:f6:b8:
                    29:63:73:5e:b7:01:ec:a3:15:df:03:92:da:c5:b7:
                    88:1b:c6:97:31:83:e3:c5:fa:24:63:ea:bc:df:75:
                    99:8f:9e:9d:92:f4:f1:39:ad:a7:85:6c:70:13:af:
                    2a:af:93:9b:4a:e8:d2:cc:52:ab:f1:7c:39:2d:88:
                    95:b0:07:c2:a8:ec:c0:24:11:17:48:e5:e5:38:a5:
                    b2:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:42:F2:9C:A1:54:EE:AD:29:B4:5D:46:28:54:AB:64:37:0F:EC:A1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/70b491ba-5507-36ed-97d1-864053a80150.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/24fa05bf-5b46-4a55-bd55-4891d21cb24f.crl

            X509v3 Authority Key Identifier:
                keyid:F7:6F:8C:D8:57:DC:73:3D:90:CF:C1:F9:F3:DF:C0:38:A5:E8:74:80

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.249.111.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         36:8d:79:8d:43:d2:a2:b8:e5:b6:4b:f5:de:d4:cf:bd:e0:9d:
         ac:67:f0:c5:57:61:68:70:5c:73:fe:73:ef:36:0c:fc:06:d5:
         35:ec:c8:3f:f2:09:02:43:be:64:5d:d6:5f:ac:6e:e8:bb:c1:
         96:00:1f:65:c8:2d:d0:0b:50:55:30:4d:93:f7:23:66:b7:85:
         ea:38:14:4c:e6:4b:83:62:24:a1:5e:f4:2b:ba:cb:15:35:1a:
         64:ad:64:f1:a6:5e:cb:20:a9:44:ad:01:62:ee:bc:0b:58:b2:
         c8:68:ac:bd:59:69:be:df:ae:58:ac:79:2f:9d:b9:20:76:9a:
         30:6f:bb:28:58:6a:15:16:5e:04:fd:aa:ca:2e:b2:a9:64:cd:
         f2:1a:c4:4a:e5:ae:c2:27:fc:a8:6a:02:c5:1f:1c:ee:71:c5:
         29:4c:cf:47:a4:87:bc:fe:5f:e1:41:24:7e:a9:eb:7f:28:42:
         31:ad:d1:69:ae:0b:18:98:cd:95:cc:2c:91:99:ad:1a:5c:23:
         de:9e:ef:eb:63:19:f1:2b:72:f4:e3:2e:f9:ea:33:ea:0c:e5:
         ce:e4:f0:9e:c5:73:92:3e:30:a5:53:94:3e:32:bd:31:86:c5:
         11:e4:23:11:6a:38:84:e8:00:c7:a6:f0:24:fe:22:17:4a:e2:
         1b:09:33:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 31 02:39:12 2026 by rpki-client