Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/bc6884d6-b11e-4280-9c4c-8177287d9869/25e8c331-89bc-33bd-9e1d-69d6af5e178f.roa
File:                     25e8c331-89bc-33bd-9e1d-69d6af5e178f.roa (raw, json)
Hash identifier:          tLhxYtpAhxJZg6ErAWjm7KxjnNBJC9PUP8UEupTQino=
Subject key identifier:   85:20:60:E6:21:D7:5A:8C:AC:EC:D0:56:34:3B:D2:D6:3D:6A:2F:83
Certificate issuer:       /CN=bc6884d6-b11e-4280-9c4c-8177287d9869
Certificate serial:       010D0C9F4328584D307F4577F534E47BDD989980
Authority key identifier: 15:C8:EE:BC:17:5F:6B:10:C3:DC:7A:CF:57:D4:D1:F3:90:0F:0E:87
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/bc6884d6-b11e-4280-9c4c-8177287d9869.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/bc6884d6-b11e-4280-9c4c-8177287d9869/25e8c331-89bc-33bd-9e1d-69d6af5e178f.roa
Signing time:             Mon 16 Mar 2026 16:56:49 +0000
ROA not before:           Mon 16 Mar 2026 16:56:49 +0000
ROA not after:            Sun 14 Jun 2026 16:56:49 +0000
asID:                     398324
IP address blocks:        66.132.186.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/bc6884d6-b11e-4280-9c4c-8177287d9869/bc6884d6-b11e-4280-9c4c-8177287d9869.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/bc6884d6-b11e-4280-9c4c-8177287d9869/bc6884d6-b11e-4280-9c4c-8177287d9869.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/bc6884d6-b11e-4280-9c4c-8177287d9869.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 21 Mar 2026 23:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:30:7f:45:77:f5:34:e4:7b:dd:98:99:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bc6884d6-b11e-4280-9c4c-8177287d9869
        Validity
            Not Before: Mar 16 16:56:49 2026 GMT
            Not After : Jun 14 16:56:49 2026 GMT
        Subject: CN=64ffcd68-cb6f-415e-811a-71f9ecb8929c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:19:9b:9c:f7:3e:85:b7:65:9b:17:93:af:64:
                    1b:7d:b4:8d:d2:95:36:fd:e8:db:fa:91:3c:ee:82:
                    23:23:af:2e:c5:1e:58:e5:69:fb:51:d6:55:ae:aa:
                    54:dc:cd:43:a3:b7:07:bd:14:7f:6b:0d:aa:70:d2:
                    55:41:a3:44:7e:47:c7:d1:6b:bd:e0:67:54:76:1f:
                    b5:c3:d9:23:45:30:48:2c:21:f4:93:6f:2b:61:a4:
                    80:b7:39:3e:a7:fa:56:b2:41:39:d2:fb:2c:7e:89:
                    e9:f3:1d:03:4b:a5:c6:15:f0:2a:09:cd:2e:68:fe:
                    32:73:1a:95:bc:72:3c:fa:9d:62:6b:87:4d:90:84:
                    f5:81:6f:90:96:c8:f7:49:49:7c:e3:b4:bc:16:32:
                    fe:fe:50:13:66:79:7f:0d:d3:7d:22:84:e7:c7:59:
                    97:c7:c4:03:2f:4b:48:1c:be:ed:4c:cc:8b:7e:f9:
                    3a:57:f1:d2:16:58:34:99:7b:fb:67:00:b9:fa:af:
                    b5:e9:60:da:6a:2d:8b:92:07:2f:93:b2:78:48:be:
                    d1:6b:25:ba:82:5a:1b:a1:3a:fb:5b:72:c4:f0:e7:
                    6b:00:a7:bf:b3:95:8c:7e:b2:30:70:35:60:71:a6:
                    25:95:f9:d0:4c:d6:ae:f9:25:19:42:cd:85:61:d3:
                    65:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:20:60:E6:21:D7:5A:8C:AC:EC:D0:56:34:3B:D2:D6:3D:6A:2F:83
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/bc6884d6-b11e-4280-9c4c-8177287d9869/25e8c331-89bc-33bd-9e1d-69d6af5e178f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/bc6884d6-b11e-4280-9c4c-8177287d9869/bc6884d6-b11e-4280-9c4c-8177287d9869.crl

            X509v3 Authority Key Identifier:
                keyid:15:C8:EE:BC:17:5F:6B:10:C3:DC:7A:CF:57:D4:D1:F3:90:0F:0E:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/bc6884d6-b11e-4280-9c4c-8177287d9869.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.132.186.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         10:cf:29:4b:43:55:e2:ab:26:1e:72:4a:22:43:f6:f7:bf:2b:
         fc:72:4b:e8:ef:dc:d2:b6:c3:5a:33:9c:f3:dc:bf:31:ea:4d:
         4a:cb:2c:84:1b:31:3d:10:0f:65:e3:d9:3e:21:97:3a:b7:0c:
         2a:da:63:e3:08:ad:76:b9:78:7c:9a:e0:60:ba:35:94:f0:7c:
         fd:8c:ae:90:03:38:da:09:9b:8b:66:49:3e:f8:21:c7:5b:6e:
         3e:42:80:51:92:20:e1:0a:f5:17:f0:ac:44:13:d8:09:b6:f0:
         2c:b8:d8:84:22:72:31:50:b2:dc:ee:ae:ef:e6:f9:08:ef:01:
         d1:d5:ad:29:f5:a2:8a:58:5b:97:07:6d:2b:bf:86:f4:9f:28:
         8e:84:3b:b9:3f:9f:6a:c7:70:fc:ea:65:da:56:05:de:8e:d8:
         bb:74:68:4f:b4:a0:65:4b:a5:7d:88:a7:7f:cc:4f:88:b6:08:
         d3:1c:8d:9b:d0:68:a5:79:ad:07:48:69:94:a9:84:a7:8d:8a:
         9a:55:38:a6:c0:0a:fd:b1:f1:f4:c3:18:08:50:04:52:5c:7d:
         02:c5:04:71:60:e0:6f:9e:70:3e:9d:63:80:e8:ea:1b:87:69:
         ad:7e:15:1e:13:78:89:e0:6d:7a:d5:b4:fb:23:4d:0c:a1:cf:
         be:7f:85:fe
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0wf0V39TTke92YmYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYmM2ODg0ZDYtYjExZS00MjgwLTljNGMtODE3NzI4N2Q5
ODY5MB4XDTI2MDMxNjE2NTY0OVoXDTI2MDYxNDE2NTY0OVowLzEtMCsGA1UEAxMk
NjRmZmNkNjgtY2I2Zi00MTVlLTgxMWEtNzFmOWVjYjg5MjljMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkhmbnPc+hbdlmxeTr2QbfbSN0pU2/ejb+pE8
7oIjI68uxR5Y5Wn7UdZVrqpU3M1Do7cHvRR/aw2qcNJVQaNEfkfH0Wu94GdUdh+1
w9kjRTBILCH0k28rYaSAtzk+p/pWskE50vssfonp8x0DS6XGFfAqCc0uaP4ycxqV
vHI8+p1ia4dNkIT1gW+Qlsj3SUl847S8FjL+/lATZnl/DdN9IoTnx1mXx8QDL0tI
HL7tTMyLfvk6V/HSFlg0mXv7ZwC5+q+16WDaai2Lkgcvk7J4SL7RayW6globoTr7
W3LE8OdrAKe/s5WMfrIwcDVgcaYllfnQTNau+SUZQs2FYdNlSwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFIUgYOYh11qMrOzQVjQ70tY9ai+DMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9iYzY4
ODRkNi1iMTFlLTQyODAtOWM0Yy04MTc3Mjg3ZDk4NjkvMjVlOGMzMzEtODliYy0z
M2JkLTllMWQtNjlkNmFmNWUxNzhmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvYmM2ODg0ZDYtYjExZS00MjgwLTlj
NGMtODE3NzI4N2Q5ODY5L2JjNjg4NGQ2LWIxMWUtNDI4MC05YzRjLTgxNzcyODdk
OTg2OS5jcmwwHwYDVR0jBBgwFoAUFcjuvBdfaxDD3HrPV9TR85APDocwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC9iYzY4ODRkNi1iMTFlLTQyODAtOWM0Yy04MTc3
Mjg3ZDk4NjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQoS6MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABDPKUtDVeKrJh5ySiJD9ve/K/xyS+jv3NK2w1oznPPcvzHqTUrLLIQb
MT0QD2Xj2T4hlzq3DCraY+MIrXa5eHya4GC6NZTwfP2MrpADONoJm4tmST74Icdb
bj5CgFGSIOEK9RfwrEQT2Am28Cy42IQicjFQstzuru/m+QjvAdHVrSn1oopYW5cH
bSu/hvSfKI6EO7k/n2rHcPzqZdpWBd6O2Lt0aE+0oGVLpX2Ip3/MT4i2CNMcjZvQ
aKV5rQdIaZSphKeNippVOKbACv2x8fTDGAhQBFJcfQLFBHFg4G+ecD6dY4Do6huH
aa1+FR4TeIngbXrVtPsjTQyhz75/hf4=
-----END CERTIFICATE-----
Generated at Thu Mar 19 16:45:48 2026 by rpki-client