Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/59f5126e-72cf-3651-9a57-181267472a62.roa
File:                     59f5126e-72cf-3651-9a57-181267472a62.roa (raw, json)
Hash identifier:          aUu2TNpU6jgtDvh909PCDrrxtlyuGlg0fiFl+BnNbKk=
Subject key identifier:   44:31:B5:F9:41:30:81:C9:E9:53:B0:7E:49:10:E4:49:7E:16:4F:A2
Certificate issuer:       /CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Certificate serial:       010D0C9F4328584D1F4A21F53706B6803D249880
Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/59f5126e-72cf-3651-9a57-181267472a62.roa
Signing time:             Tue 10 Mar 2026 13:00:41 +0000
ROA not before:           Tue 10 Mar 2026 13:00:41 +0000
ROA not after:            Mon 08 Jun 2026 13:00:41 +0000
asID:                     395096
IP address blocks:        204.174.66.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Mar 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:1f:4a:21:f5:37:06:b6:80:3d:24:98:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24
        Validity
            Not Before: Mar 10 13:00:41 2026 GMT
            Not After : Jun  8 13:00:41 2026 GMT
        Subject: CN=4a76ad41-f149-4c79-a7c7-def270241c34
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:7e:1e:48:39:b2:53:71:f7:4d:02:a3:7e:f0:
                    78:58:4f:fe:1a:e8:c6:34:27:a5:fc:b9:0f:47:c9:
                    93:b3:04:4e:18:51:a3:5a:38:aa:31:94:f8:0f:ed:
                    8b:12:c1:80:ab:8d:b1:6a:cc:89:5a:81:ba:89:b7:
                    d5:d7:ae:2b:da:b0:a4:07:77:50:f5:ed:f5:a8:35:
                    ec:3f:42:63:c5:d1:88:30:ca:d4:f0:95:30:0b:8e:
                    96:16:e0:f2:04:ff:88:c9:34:81:4d:98:25:a2:c5:
                    c3:a8:d7:34:77:1a:71:6b:a4:14:1a:04:3c:9c:e5:
                    ea:36:2d:70:b8:0b:d7:77:8f:2a:92:8a:a7:e7:02:
                    28:04:f8:eb:e0:f6:e3:10:7f:3f:82:7e:0e:8d:b1:
                    6b:3c:ae:74:0f:d6:6a:d2:9f:0a:00:a0:95:7e:b2:
                    3d:7a:04:c5:ca:90:e4:be:a0:c9:02:32:a0:3a:15:
                    ad:29:d6:d3:f9:87:97:4d:f4:7b:f7:65:7d:f8:d4:
                    9c:8b:f9:1c:fb:c2:d1:35:ee:7e:9d:17:a6:68:49:
                    37:06:9f:f0:ca:43:8b:1a:9e:e6:8a:69:2b:c9:b7:
                    97:d0:3c:eb:6b:c5:9b:b3:d7:e8:9e:7f:d1:b0:a0:
                    16:14:fb:5d:c7:6f:6b:1c:2a:1c:96:c0:b8:28:a9:
                    80:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:31:B5:F9:41:30:81:C9:E9:53:B0:7E:49:10:E4:49:7E:16:4F:A2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/59f5126e-72cf-3651-9a57-181267472a62.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl

            X509v3 Authority Key Identifier:
                keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.174.66.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         75:31:47:db:92:e3:43:e6:e4:2f:d3:4c:92:9b:a6:d9:53:2e:
         8e:43:ce:c6:ee:b7:4a:f4:4c:c6:84:dd:a3:19:14:d1:d4:11:
         02:37:0d:cf:d6:e7:de:ed:0e:d3:38:1a:79:4d:5b:21:ec:89:
         78:a1:b8:ee:68:2b:9a:27:81:df:be:48:39:4b:a7:47:b2:d1:
         89:15:83:4f:ab:6b:23:dc:8a:b7:21:4b:27:5b:1d:81:84:a4:
         f9:7f:51:ed:ae:9f:b7:b1:0e:7f:8f:ee:2f:fd:23:df:1b:8d:
         81:77:50:82:4d:f1:77:6c:10:15:e5:c0:00:a3:c3:cb:dd:53:
         ad:4a:c1:2d:3e:21:82:8e:ac:2c:1e:be:f4:74:4f:7d:ca:08:
         2c:62:1e:da:de:97:be:ea:66:ef:19:a1:ab:ad:1a:d5:4b:cd:
         26:7b:3a:74:f4:82:1b:76:39:26:92:c4:07:f1:1a:b1:cc:cc:
         3e:33:74:2d:ae:55:14:1a:7f:08:73:a9:a9:86:f6:a4:54:18:
         63:90:ec:b0:b8:9a:21:43:bc:f2:7a:29:3e:41:77:17:e7:e0:
         7b:90:16:72:c1:41:cf:12:7a:a0:d5:4c:79:87:ec:e5:34:67:
         2b:d0:e8:a5:fe:50:42:e3:1d:32:27:ec:fa:50:0f:5a:44:2a:
         0d:8a:70:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 23:55:42 2026 by rpki-client