Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/02ec2dc4-f35d-332b-984b-faa1b2af07d9.roa
File:                     02ec2dc4-f35d-332b-984b-faa1b2af07d9.roa (raw, json)
Hash identifier:          mlq54FOseFFMzp+d2sXjMQDbA6PEzB+KesJ5GNiqCfY=
Subject key identifier:   E6:E6:26:17:10:90:A2:38:B8:7A:34:82:98:F3:9F:9C:A7:0C:C6:82
Certificate issuer:       /CN=e201ba8b-eda4-4920-948d-160d561b0e16
Certificate serial:       010D0C9F4328584F94D5176223F92915534E9560
Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/02ec2dc4-f35d-332b-984b-faa1b2af07d9.roa
Signing time:             Thu 22 Oct 2026 01:04:26 +0000
ROA not before:           Thu 22 Oct 2026 01:04:26 +0000
ROA not after:            Wed 20 Jan 2027 02:04:26 +0000
asID:                     21769
IP address blocks:        66.78.32.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 28 Oct 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:94:d5:17:62:23:f9:29:15:53:4e:95:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16
        Validity
            Not Before: Oct 22 01:04:26 2026 GMT
            Not After : Jan 20 02:04:26 2027 GMT
        Subject: CN=f7550edb-a284-49ce-a61e-a3af39a323c6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:9e:f1:c1:30:ce:e3:95:1a:e7:f0:60:53:90:
                    80:43:a2:7f:25:2d:b0:37:c3:8b:9e:47:9b:1d:2a:
                    85:df:08:ce:96:41:25:ad:6b:56:71:11:8d:1d:b4:
                    f3:45:5f:1e:33:36:08:ae:8b:02:3c:0b:20:b9:4d:
                    1d:95:06:f2:74:52:06:57:d8:de:50:39:f1:eb:46:
                    d6:be:dd:a2:17:d2:05:a5:86:1e:dd:ba:ac:7b:2b:
                    39:5d:28:12:82:35:3b:c0:87:4b:8b:a5:8f:b9:9f:
                    fe:00:a1:13:9a:39:11:1d:eb:58:15:47:ed:44:5a:
                    ec:5e:3c:8d:63:39:4f:1f:01:46:ae:75:82:f9:0a:
                    aa:9c:44:86:1e:cc:c7:ff:cc:ae:a0:f9:5d:34:ea:
                    e5:3a:1d:9f:8d:b3:fa:24:1a:dc:57:f7:71:7a:f0:
                    49:56:87:e4:e2:f2:a0:57:bc:69:b2:6e:c9:fd:b9:
                    2a:3d:67:7c:a1:65:04:99:02:ac:34:21:b0:e7:cf:
                    bc:1a:0e:89:16:5a:36:24:f6:78:17:1c:3f:bb:8b:
                    68:f1:2b:ed:98:0b:88:e4:55:c0:8d:ad:7b:e7:50:
                    b0:d3:76:55:8b:a1:10:54:ca:a2:8c:d0:b7:e1:b5:
                    88:76:1c:02:e6:78:c7:66:29:c0:ae:c0:ed:ef:b2:
                    d3:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:E6:26:17:10:90:A2:38:B8:7A:34:82:98:F3:9F:9C:A7:0C:C6:82
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/02ec2dc4-f35d-332b-984b-faa1b2af07d9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl

            X509v3 Authority Key Identifier:
                keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.78.32.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5a:c5:5b:a0:7f:97:88:14:c1:f4:59:ef:f4:66:b9:36:c8:96:
         e1:05:e4:9b:82:aa:fd:2a:ce:85:27:2e:b7:96:62:5c:13:1f:
         4c:b8:8f:a6:be:e7:b9:b8:f4:2a:79:64:64:c1:8e:ce:f2:96:
         08:45:0a:31:67:1c:3e:eb:40:ec:12:3a:c2:b1:0a:b9:ea:26:
         d5:72:8e:2c:01:90:2c:40:94:0f:75:86:99:ba:f6:1c:3a:2e:
         ab:74:e7:29:29:c1:d5:88:e0:47:db:9f:f8:36:63:f4:35:43:
         f6:5e:c1:db:91:08:c0:13:d4:b2:e8:af:9b:00:3b:d6:02:53:
         bd:0b:64:40:61:2a:07:d2:ae:b7:22:1d:01:e8:79:48:9d:83:
         4b:0c:a4:2b:e5:3a:1c:db:ee:07:b7:f8:6a:5c:97:ea:71:bd:
         b7:db:a0:25:f6:66:0f:b5:87:10:8d:92:9f:22:cc:0d:13:ae:
         cb:1e:97:34:20:74:c4:71:2f:3f:e2:6d:00:1f:1e:7d:39:9b:
         df:2f:27:10:3c:01:bc:3c:98:aa:37:40:ef:e2:61:08:2a:77:
         64:e4:7b:7d:78:51:8b:d6:85:74:c9:54:51:0d:bb:3f:f6:a9:
         5e:6a:eb:d7:33:83:67:f1:86:80:29:6f:37:21:dc:5a:b2:9c:
         5b:63:ad:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 00:14:44 2026 by rpki-client