Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/e64afb51-cca7-34fe-a330-7a74a1cd25ce.roa
File:                     e64afb51-cca7-34fe-a330-7a74a1cd25ce.roa (raw, json)
Hash identifier:          4V7qcwYVJNd/9Z615gFEulcflblXdcQMtoAX4NyiR3w=
Subject key identifier:   56:84:D6:A3:2A:0C:06:DA:3F:8A:EC:58:05:5C:80:E9:55:47:B5:BF
Certificate issuer:       /CN=28103d71-6a1e-4497-9178-fb6f75de4a67
Certificate serial:       010D0C9F4328584EB8475E632C5858EA0AB34020
Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/e64afb51-cca7-34fe-a330-7a74a1cd25ce.roa
Signing time:             Tue 04 Aug 2026 01:00:12 +0000
ROA not before:           Tue 04 Aug 2026 01:00:12 +0000
ROA not after:            Mon 02 Nov 2026 02:00:12 +0000
asID:                     20001
IP address blocks:        66.146.233.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Sep 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:b8:47:5e:63:2c:58:58:ea:0a:b3:40:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67
        Validity
            Not Before: Aug  4 01:00:12 2026 GMT
            Not After : Nov  2 02:00:12 2026 GMT
        Subject: CN=521754b8-9ef3-46e7-8b81-19258343c306
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:17:c0:b7:53:1e:33:72:4e:1c:5e:fd:47:f1:
                    99:2c:57:76:17:39:ab:52:ff:b8:45:39:c2:30:ec:
                    ba:30:c7:b0:da:94:c6:12:6b:06:48:19:c3:d7:62:
                    aa:4a:af:f2:11:77:92:8c:c0:0c:58:80:b9:57:4a:
                    e4:67:5a:09:fd:de:ea:32:4a:64:c2:f6:9f:f5:49:
                    19:3d:60:0d:45:54:ff:6c:6c:4d:71:53:e6:71:06:
                    1e:26:ef:8f:76:48:c0:8e:a8:49:71:66:06:31:79:
                    de:1d:9f:f0:bf:01:40:80:58:aa:c0:b3:87:24:fa:
                    01:26:6b:7d:88:b6:45:71:e4:52:75:22:ae:36:6b:
                    43:07:a5:07:41:c7:9f:89:8d:18:71:68:5a:45:9d:
                    68:09:73:de:b2:c4:bb:64:a0:c2:02:90:00:23:c7:
                    a7:1e:f2:8d:da:a7:7f:99:7b:ba:ac:f9:85:cb:83:
                    c2:0e:1b:d6:fb:32:3a:4c:71:7d:9c:77:2e:5b:9a:
                    97:19:7f:39:94:67:b9:40:65:c0:c5:51:fb:f6:ed:
                    d1:b6:43:36:15:59:5e:e2:11:f2:10:46:c4:da:32:
                    90:69:48:b0:e8:d7:b4:34:cd:3b:be:50:e6:13:b8:
                    7c:4a:45:4e:68:2a:d9:96:95:ea:f8:4b:32:d3:3f:
                    8a:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:84:D6:A3:2A:0C:06:DA:3F:8A:EC:58:05:5C:80:E9:55:47:B5:BF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/e64afb51-cca7-34fe-a330-7a74a1cd25ce.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl

            X509v3 Authority Key Identifier:
                keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.146.233.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         23:bd:c3:98:01:b4:df:ed:f5:44:6d:66:82:e9:ab:61:01:3f:
         04:2a:ae:e6:ac:81:96:ec:1f:b6:79:5f:f5:61:30:ba:05:20:
         6b:29:40:50:0d:93:d2:5e:5c:a4:54:41:6b:3d:73:fb:cc:c5:
         e1:ca:86:0f:0e:78:b5:4b:cc:cc:bd:d9:17:cb:a5:3f:12:9a:
         9d:0e:d0:e8:15:e6:21:eb:6c:22:a1:b5:b8:5b:05:33:0e:76:
         90:db:65:46:5c:d1:a6:3a:8b:88:78:33:79:51:79:2c:c0:20:
         9c:8b:bb:cb:d9:18:fd:7e:b1:77:cd:e5:02:34:a6:9b:d3:fe:
         48:bd:cd:93:d7:b5:13:ad:fd:c8:7d:95:26:6e:43:ed:22:e5:
         f0:2a:03:36:d6:01:3a:2b:35:a1:bd:b9:81:c7:34:7f:77:f5:
         c7:60:ab:04:16:c2:cd:c4:7a:f1:08:7d:85:d2:47:34:cd:2d:
         2b:a2:7d:57:43:ba:c9:19:cc:d7:16:ce:a5:ec:a0:83:b4:b4:
         37:7e:bc:37:fa:f9:a5:a5:3e:9f:c7:c9:c4:88:b5:97:ac:8f:
         96:6a:5f:50:32:7a:90:45:e8:8d:94:06:13:10:45:69:f2:1c:
         7f:67:e5:1c:3f:04:ce:e7:c5:02:7f:b5:91:ba:6b:ce:ad:b0:
         bd:e8:09:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 16:44:04 2026 by rpki-client