Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/99dcdccb-926b-4c77-aab5-f4b177f65fe0/9b2bd2c5-86cc-3c12-915b-e27eb94cb0db.roa
File:                     9b2bd2c5-86cc-3c12-915b-e27eb94cb0db.roa (raw, json)
Hash identifier:          w47RYRdI1ep8IobWLVJWjAIJ9nqCOAGAtUJhWD3rs40=
Subject key identifier:   8B:88:D3:08:FB:1E:98:6D:6D:AD:D1:55:4E:06:09:7C:1C:D2:67:B1
Certificate issuer:       /CN=99dcdccb-926b-4c77-aab5-f4b177f65fe0
Certificate serial:       010D0C9F4328584F70882014A50404EA23BA6640
Authority key identifier: E8:C4:6F:57:93:A5:94:56:2B:5C:EB:31:F5:FA:45:B8:CF:69:2B:75
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/99dcdccb-926b-4c77-aab5-f4b177f65fe0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/99dcdccb-926b-4c77-aab5-f4b177f65fe0/9b2bd2c5-86cc-3c12-915b-e27eb94cb0db.roa
Signing time:             Fri 09 Oct 2026 01:00:12 +0000
ROA not before:           Fri 09 Oct 2026 01:00:12 +0000
ROA not after:            Thu 07 Jan 2027 02:00:12 +0000
asID:                     397130
IP address blocks:        66.179.150.0/24 maxlen: 24
                          66.228.80.0/24 maxlen: 24
                          66.228.81.0/24 maxlen: 24
                          66.228.82.0/24 maxlen: 24
                          66.228.83.0/24 maxlen: 24
                          148.59.91.0/24 maxlen: 24
                          148.227.174.0/24 maxlen: 24
                          156.67.60.0/24 maxlen: 24
                          162.33.183.0/24 maxlen: 24
                          162.33.191.0/24 maxlen: 24
                          162.223.123.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/99dcdccb-926b-4c77-aab5-f4b177f65fe0/99dcdccb-926b-4c77-aab5-f4b177f65fe0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/99dcdccb-926b-4c77-aab5-f4b177f65fe0/99dcdccb-926b-4c77-aab5-f4b177f65fe0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/99dcdccb-926b-4c77-aab5-f4b177f65fe0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 16 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:70:88:20:14:a5:04:04:ea:23:ba:66:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=99dcdccb-926b-4c77-aab5-f4b177f65fe0
        Validity
            Not Before: Oct  9 01:00:12 2026 GMT
            Not After : Jan  7 02:00:12 2027 GMT
        Subject: CN=3274979d-4b26-4832-ba9b-be10d720bd6d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:10:74:45:d2:66:b0:3e:ee:56:d2:28:f4:d1:
                    db:ef:79:44:b6:9b:d4:8c:47:a8:93:ea:e9:aa:17:
                    d1:39:4a:9c:f4:44:e3:c4:9b:f8:35:3c:fa:28:b6:
                    cf:c3:53:9f:3f:3a:d0:13:13:5d:45:77:75:d3:b7:
                    1f:0c:ff:7c:3a:c2:6c:3a:c0:d9:6a:bf:a5:81:5d:
                    bb:c2:db:0d:6b:67:66:e4:4a:b3:8d:42:8f:e9:2c:
                    bb:0b:00:bd:05:ad:63:60:eb:56:1d:8a:26:87:da:
                    b8:72:43:f7:a5:90:cf:db:50:d0:9a:73:d6:8c:d1:
                    81:75:3b:f3:56:5f:86:27:60:8d:69:32:71:80:f5:
                    ad:a0:04:59:25:52:30:bc:de:17:b5:50:a7:7d:39:
                    27:99:8a:e9:16:f3:93:08:bb:1a:63:af:8f:f8:1e:
                    e7:b4:50:12:d8:ca:35:b5:d7:b8:a1:01:12:30:5e:
                    60:88:1e:d6:74:99:3c:35:4e:a3:e4:d8:9b:30:3b:
                    77:d1:37:b4:8d:2c:0a:00:17:7c:4e:fa:2c:73:a8:
                    d0:a6:46:20:4c:03:b4:51:f7:1a:1c:b4:96:70:6a:
                    0f:bf:68:00:4f:a9:6c:0f:ae:14:ec:1c:62:b4:75:
                    76:a5:bb:ac:e6:02:d4:2f:27:36:45:99:ed:0f:08:
                    61:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:88:D3:08:FB:1E:98:6D:6D:AD:D1:55:4E:06:09:7C:1C:D2:67:B1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/99dcdccb-926b-4c77-aab5-f4b177f65fe0/9b2bd2c5-86cc-3c12-915b-e27eb94cb0db.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/99dcdccb-926b-4c77-aab5-f4b177f65fe0/99dcdccb-926b-4c77-aab5-f4b177f65fe0.crl

            X509v3 Authority Key Identifier:
                keyid:E8:C4:6F:57:93:A5:94:56:2B:5C:EB:31:F5:FA:45:B8:CF:69:2B:75

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/99dcdccb-926b-4c77-aab5-f4b177f65fe0.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.179.150.0/24
                  66.228.80.0/22
                  148.59.91.0/24
                  148.227.174.0/24
                  156.67.60.0/24
                  162.33.183.0/24
                  162.33.191.0/24
                  162.223.123.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         46:5f:67:a8:82:93:98:08:3f:6c:be:33:1d:6c:83:f0:b9:b5:
         e6:8a:7d:39:73:83:2d:7d:8b:f9:75:a7:03:91:ea:c5:c3:26:
         16:64:ae:ac:d9:e4:42:d2:46:ad:d8:ee:bd:f7:fd:8a:60:08:
         40:f3:05:44:86:f6:55:a7:5e:48:e7:99:11:cc:02:44:6a:7a:
         90:81:e6:d4:55:ef:1a:4c:3a:a3:ad:08:eb:86:6a:12:0d:98:
         73:65:bc:ea:99:91:29:e4:28:df:c4:ea:4e:ef:f9:7e:17:a8:
         ae:29:91:46:2e:02:1b:b9:47:51:8b:ee:7b:38:1d:91:7e:b3:
         47:ea:0e:d8:82:ff:b5:25:05:6e:76:00:86:57:de:96:80:9a:
         9a:3e:74:46:b6:d9:44:98:79:ae:c7:2f:36:a6:dd:da:4a:03:
         eb:ea:09:7b:06:d8:ea:99:4f:5d:39:64:7e:96:58:7a:a5:3e:
         4a:54:50:6a:83:df:44:5c:89:f4:63:96:e6:cb:be:9f:8b:90:
         d4:01:ba:7a:3d:de:59:46:d4:05:79:1a:1f:33:c7:c4:4a:7f:
         ff:00:19:a2:e6:2f:76:fd:34:91:7d:12:27:ae:06:42:e5:01:
         f8:7e:73:47:07:4c:e3:b2:de:87:2e:06:b9:ca:5f:74:92:31:
         18:0d:8f:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 03:27:42 2026 by rpki-client