Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/952fc911-563c-3efb-8490-26653b9269bd.roa
File:                     952fc911-563c-3efb-8490-26653b9269bd.roa (raw, json)
Hash identifier:          UkETZV+MUH08ud+SDs3MQXVNjUhVcmmdMx8utRBD7U8=
Subject key identifier:   99:EC:CA:F9:B1:B6:DC:65:B8:37:F3:30:B8:66:51:09:EA:52:F7:E6
Certificate issuer:       /CN=e201ba8b-eda4-4920-948d-160d561b0e16
Certificate serial:       010D0C9F4328584DE9B0C0714B567B3D823D8E00
Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/952fc911-563c-3efb-8490-26653b9269bd.roa
Signing time:             Fri 22 May 2026 01:00:24 +0000
ROA not before:           Fri 22 May 2026 01:00:24 +0000
ROA not after:            Thu 20 Aug 2026 01:00:24 +0000
asID:                     214054
IP address blocks:        66.78.39.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 07 Jun 2026 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:e9:b0:c0:71:4b:56:7b:3d:82:3d:8e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16
        Validity
            Not Before: May 22 01:00:24 2026 GMT
            Not After : Aug 20 01:00:24 2026 GMT
        Subject: CN=ed1d918c-38c4-4507-9e1e-6ca02e9abc70
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:7a:40:11:5f:0d:78:35:75:bc:61:b6:fe:6c:
                    28:28:25:21:13:11:d1:78:52:c2:c8:fe:43:f0:cf:
                    68:9f:90:ee:53:29:0e:8b:76:2e:a1:dc:4b:4c:71:
                    a9:a2:02:71:06:67:24:8a:11:55:c1:a9:52:33:b7:
                    e5:31:d8:20:8c:d3:c0:89:25:b1:71:54:0e:c1:93:
                    99:d9:20:7a:df:fe:47:0a:b2:2e:28:f3:b2:1f:93:
                    15:10:fe:1a:2a:b9:09:4c:14:34:79:68:46:0a:40:
                    a6:38:d5:75:cf:68:a8:ea:15:80:cd:72:5e:7c:b8:
                    9f:6c:99:08:c0:5b:88:d1:44:fa:4f:c7:04:31:00:
                    47:d2:17:d9:52:28:bd:56:86:de:bb:e1:62:f1:48:
                    c6:e3:94:a4:7c:c4:17:91:9e:35:81:6d:54:61:e8:
                    24:67:15:5f:b0:cf:76:44:16:16:e1:dc:88:fd:c4:
                    e1:a4:26:6f:2b:13:eb:c2:8d:52:9e:e9:a1:3f:b9:
                    b4:35:25:13:e9:95:63:09:50:a5:0f:88:66:73:e5:
                    fa:fb:2c:45:0e:b4:cd:7e:88:7c:81:b0:3c:f9:92:
                    e4:3d:62:04:18:b3:15:02:69:93:cb:02:5f:e9:7d:
                    a6:a7:7b:af:00:97:10:44:ef:87:e1:95:21:3f:02:
                    84:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:EC:CA:F9:B1:B6:DC:65:B8:37:F3:30:B8:66:51:09:EA:52:F7:E6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/952fc911-563c-3efb-8490-26653b9269bd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl

            X509v3 Authority Key Identifier:
                keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.78.39.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         50:75:97:49:37:44:92:db:11:a5:d5:e5:c8:f4:86:dd:03:c1:
         5d:f5:ec:ad:8b:67:17:ca:dc:b8:09:6f:83:dd:31:fb:3e:be:
         fb:cb:7c:95:ce:a0:76:f9:fb:d0:82:0c:f1:37:79:b8:c3:aa:
         9a:58:60:2f:20:14:c4:8f:cf:b0:d1:8e:61:f8:13:33:3d:b8:
         46:6a:b7:c8:fd:7e:f3:48:94:b0:d3:8c:b1:64:10:a8:17:58:
         6d:62:2c:80:d2:0d:a2:e7:f9:26:1f:93:df:29:6d:08:f7:5d:
         c4:51:b8:c8:0d:8d:35:4e:5e:65:1b:02:55:16:54:6c:47:d8:
         44:29:18:2b:71:ef:5f:f8:bc:01:95:72:d0:7b:78:6e:46:66:
         4e:94:fc:01:a6:a3:11:d6:eb:1e:de:06:0b:a9:fd:63:36:ee:
         0e:46:b8:df:1c:85:0f:ed:43:54:48:50:7d:45:ab:49:ef:a7:
         08:ee:3a:d3:00:38:d6:ad:d7:77:4c:d3:47:d0:dd:a4:31:06:
         4a:68:4f:ee:b6:a4:75:df:5a:21:da:b6:61:f2:16:5c:9c:5e:
         b0:9c:56:06:9c:98:d0:3a:73:f5:c1:1b:b0:90:04:84:af:f4:
         15:0c:1e:68:11:89:7c:44:9f:9a:32:cd:64:04:2c:6b:73:f3:
         cb:eb:1c:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 11:55:35 2026 by rpki-client