Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/2a5f16a2-59f2-43d6-9783-b59c3b9ad843/da57a7df-abe5-3f9b-b7e2-22ebc929ff91.roa
File:                     da57a7df-abe5-3f9b-b7e2-22ebc929ff91.roa (raw, json)
Hash identifier:          Vah8FvPfcQpE1oX4U4vKN0Jd1wQAfJjYRv6nkcJIWXc=
Subject key identifier:   18:E2:08:75:DD:12:B5:59:E2:F2:82:B8:36:E3:FF:16:D9:BB:4E:E6
Certificate issuer:       /CN=2a5f16a2-59f2-43d6-9783-b59c3b9ad843
Certificate serial:       010D0C9F4328584DF7E8A86A71EB8F7C904C5380
Authority key identifier: 4A:16:A5:F3:FC:17:30:6E:A0:0F:DF:47:75:67:99:FB:0A:AA:65:4F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/2a5f16a2-59f2-43d6-9783-b59c3b9ad843.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/2a5f16a2-59f2-43d6-9783-b59c3b9ad843/da57a7df-abe5-3f9b-b7e2-22ebc929ff91.roa
Signing time:             Wed 27 May 2026 03:15:01 +0000
ROA not before:           Wed 27 May 2026 03:15:01 +0000
ROA not after:            Tue 25 Aug 2026 03:15:01 +0000
asID:                     834
IP address blocks:        66.117.159.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/2a5f16a2-59f2-43d6-9783-b59c3b9ad843/2a5f16a2-59f2-43d6-9783-b59c3b9ad843.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/2a5f16a2-59f2-43d6-9783-b59c3b9ad843/2a5f16a2-59f2-43d6-9783-b59c3b9ad843.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/2a5f16a2-59f2-43d6-9783-b59c3b9ad843.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 29 May 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:f7:e8:a8:6a:71:eb:8f:7c:90:4c:53:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a5f16a2-59f2-43d6-9783-b59c3b9ad843
        Validity
            Not Before: May 27 03:15:01 2026 GMT
            Not After : Aug 25 03:15:01 2026 GMT
        Subject: CN=ea63db79-a9e2-4b27-a626-133c92d3fb99
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:5c:14:16:08:c4:ef:31:a0:97:77:72:78:f0:
                    d0:c6:26:d6:66:c1:7b:d8:93:5f:3d:a7:7e:e3:b5:
                    42:bb:0b:18:66:2d:fa:bf:f2:25:fd:b5:c0:0a:99:
                    e9:e5:1d:7b:5c:59:24:17:27:11:a9:34:38:18:34:
                    65:3d:29:57:2d:ca:c6:c8:26:a5:30:35:d4:23:5b:
                    c4:e6:7a:19:70:5c:11:7d:1c:94:8a:62:b6:7d:43:
                    41:ea:81:ed:b9:70:12:ae:2e:ff:18:6e:11:77:c1:
                    5a:56:59:17:89:94:9e:5b:78:03:66:b5:57:7c:42:
                    e1:8c:e9:c4:91:31:e4:d5:cc:a2:d2:29:ce:df:ed:
                    27:d3:33:81:b8:79:e9:7f:aa:2a:73:16:fe:b2:bd:
                    f2:01:a0:bf:13:00:bb:ac:b2:f4:be:3d:8b:4c:82:
                    e4:52:03:86:e6:45:d8:ac:42:13:ca:4d:0d:92:ee:
                    cb:33:07:e1:b8:53:9b:dd:da:47:42:b0:f4:7c:53:
                    02:24:c4:ab:74:92:86:c3:ea:b4:f6:b9:61:24:91:
                    1b:a3:ea:06:4e:b4:9a:b1:9c:31:21:a1:c6:8d:2b:
                    22:a4:5e:9a:d2:86:3f:be:c8:ae:75:ce:07:90:61:
                    3d:62:7b:6f:ca:ae:66:47:cc:b4:45:d1:44:bf:20:
                    83:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:E2:08:75:DD:12:B5:59:E2:F2:82:B8:36:E3:FF:16:D9:BB:4E:E6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/2a5f16a2-59f2-43d6-9783-b59c3b9ad843/da57a7df-abe5-3f9b-b7e2-22ebc929ff91.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/2a5f16a2-59f2-43d6-9783-b59c3b9ad843/2a5f16a2-59f2-43d6-9783-b59c3b9ad843.crl

            X509v3 Authority Key Identifier:
                keyid:4A:16:A5:F3:FC:17:30:6E:A0:0F:DF:47:75:67:99:FB:0A:AA:65:4F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/2a5f16a2-59f2-43d6-9783-b59c3b9ad843.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.117.159.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         20:1c:0b:57:ae:77:1e:19:44:b1:df:a2:7e:14:8b:6b:ce:ca:
         00:98:d5:2c:61:44:4e:01:5f:4b:41:62:83:bb:5d:70:c9:a9:
         c7:45:60:82:c6:6e:8a:b8:b3:1c:d9:85:32:7b:2b:19:a9:6d:
         68:3a:81:fb:61:a0:2b:2c:9a:e1:cc:c8:12:9b:fe:09:d4:0c:
         3a:55:9f:57:3a:11:45:45:1e:80:1d:fa:bf:7b:1d:86:aa:ad:
         47:46:57:7c:96:40:b4:ae:2a:c7:09:e9:29:6e:a7:f9:2e:51:
         d5:82:8f:fb:a4:1b:d9:fc:ba:08:74:72:9b:98:c3:dd:b3:80:
         5a:c3:d9:e5:a6:e3:7f:d8:49:cc:40:9a:60:54:ed:1c:09:f5:
         54:6b:24:dc:5e:e6:52:37:25:7d:5c:d7:78:03:bd:07:25:10:
         d9:33:6a:9a:91:93:2c:e8:54:32:93:78:4a:d7:e0:89:dc:bf:
         f7:1c:5b:ec:62:b4:5d:5b:f4:6a:3a:ae:cf:ac:b7:88:65:56:
         7b:44:79:ed:9f:4a:e7:5a:28:f1:96:85:3d:49:f7:ad:25:88:
         88:16:9a:6e:27:e4:00:e3:93:8f:a2:84:bf:ea:47:29:58:f7:
         98:73:85:4b:54:97:b5:31:f5:8d:09:c2:f5:ce:28:b5:5e:93:
         82:54:07:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 28 13:36:40 2026 by rpki-client