Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/3bdfb4c2-eb37-3bef-b666-c4ac4be5eb9a.roa
File:                     3bdfb4c2-eb37-3bef-b666-c4ac4be5eb9a.roa (raw, json)
Hash identifier:          cysZ8khBfZ+hjBRqeoQUt9uoD+zDFFS+UrcqnS6wO30=
Subject key identifier:   A4:CD:AC:0B:9C:52:59:54:8D:8A:25:04:E7:06:CD:16:86:B2:15:EC
Certificate issuer:       /CN=28103d71-6a1e-4497-9178-fb6f75de4a67
Certificate serial:       010D0C9F4328584EB84710E01C7FC610EE703E40
Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/3bdfb4c2-eb37-3bef-b666-c4ac4be5eb9a.roa
Signing time:             Tue 04 Aug 2026 01:00:12 +0000
ROA not before:           Tue 04 Aug 2026 01:00:12 +0000
ROA not after:            Mon 02 Nov 2026 02:00:12 +0000
asID:                     20001
IP address blocks:        66.146.232.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Sep 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:b8:47:10:e0:1c:7f:c6:10:ee:70:3e:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67
        Validity
            Not Before: Aug  4 01:00:12 2026 GMT
            Not After : Nov  2 02:00:12 2026 GMT
        Subject: CN=4c12716b-0143-4d90-a585-ed247c675f49
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:1d:cd:e3:05:b1:c4:86:e4:f0:97:54:27:e9:
                    29:5b:4a:d1:45:8b:ab:c2:8d:e2:c5:1c:69:88:ca:
                    f7:41:df:7b:51:2a:f3:e7:26:00:b3:e9:cf:ff:99:
                    02:b2:51:9a:e6:86:61:33:69:43:05:ed:21:11:48:
                    62:0e:44:b1:85:45:d0:54:d0:3a:67:b3:64:96:7f:
                    1c:71:c4:fb:d1:b9:98:f7:bf:72:e0:7c:2d:ce:29:
                    2b:8d:0e:6b:2e:9c:13:0e:40:6c:e1:15:a9:43:5d:
                    d7:a6:85:ed:ad:e7:23:34:38:9a:30:f5:68:7a:8f:
                    cf:bb:4c:84:8a:7b:24:f6:7e:ee:1c:f6:f2:82:bd:
                    ac:d0:74:6b:a9:4c:60:75:ae:c7:81:57:19:01:02:
                    10:d4:d5:37:90:7f:d7:3f:9e:e4:e1:8d:8d:d8:a2:
                    55:e9:57:62:6e:bd:0d:3a:b4:f9:4b:cf:27:dd:b8:
                    30:f3:f3:0d:ba:0a:5b:94:eb:7b:52:d1:ae:e5:e7:
                    89:68:92:46:45:ef:b6:f8:88:06:1d:ca:4b:db:39:
                    5d:60:38:95:16:c9:c7:74:9a:cf:26:47:f1:c5:76:
                    c7:1c:15:87:31:03:c8:3f:fe:10:74:ba:4b:77:71:
                    10:8f:97:02:6c:49:b3:fc:d4:bc:69:b5:29:21:03:
                    eb:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:CD:AC:0B:9C:52:59:54:8D:8A:25:04:E7:06:CD:16:86:B2:15:EC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/3bdfb4c2-eb37-3bef-b666-c4ac4be5eb9a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl

            X509v3 Authority Key Identifier:
                keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.146.232.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c5:b3:fc:e8:7d:77:3f:87:e3:d4:88:55:a9:91:e1:1c:24:57:
         fb:78:f4:15:f6:7f:82:22:d1:de:f5:d9:00:c7:d4:33:fa:c1:
         c2:25:73:d6:27:fe:9f:7a:e3:4a:ad:f6:27:a1:8c:6e:fe:aa:
         ea:6d:7b:4f:95:93:ab:03:64:0c:4f:4a:58:02:4c:51:e2:b0:
         a2:1e:5f:f9:3a:d7:c8:39:79:6a:70:53:40:76:a1:f7:8b:a2:
         bc:99:98:01:a2:77:44:81:0c:26:6f:db:13:a7:af:3e:d7:7d:
         46:3c:f5:59:9b:9c:fb:b5:44:80:7a:e0:d8:59:1f:0b:91:43:
         a3:2f:74:c4:87:44:2b:86:46:14:e8:3d:3a:4c:50:c1:66:51:
         10:92:27:5f:8e:8c:c7:25:65:95:a9:04:51:c3:ae:87:df:c6:
         73:18:4d:c3:37:29:fa:5d:83:07:cd:4d:fc:7e:e6:ae:75:ab:
         3f:bd:58:e3:3e:49:1b:c7:b2:09:e5:8f:3a:67:44:d7:df:f5:
         bf:46:6c:6a:df:a3:2d:6f:a1:09:65:c9:34:7f:0c:da:df:75:
         66:ad:aa:d7:e6:9a:b4:cc:0d:a1:25:f0:d5:f5:2c:52:08:e6:
         a5:dd:07:43:54:53:e4:26:77:dc:45:1a:a1:2a:bb:94:d3:ca:
         1d:de:c8:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 01:04:19 2026 by rpki-client