Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e5db199d-9dc8-4b83-b53b-b092f0d6e78e/43de3b5f-7fe5-32cd-b732-8ba98f51db84.roa
File:                     43de3b5f-7fe5-32cd-b732-8ba98f51db84.roa (raw, json)
Hash identifier:          icbQiPYRuGdPKVcbfbJ8K2+j5h0bgemhNKRvOW6F6jQ=
Subject key identifier:   CD:20:ED:49:69:6A:EF:7D:B6:43:58:92:1F:92:B7:B3:1E:29:8D:50
Certificate issuer:       /CN=e5db199d-9dc8-4b83-b53b-b092f0d6e78e
Certificate serial:       010D0C9F4328584DE15086AF51B60F6FE46A8580
Authority key identifier: 93:40:47:E4:F1:10:78:69:FD:0C:88:F4:8E:77:C9:8A:2D:6A:A8:CB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e5db199d-9dc8-4b83-b53b-b092f0d6e78e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e5db199d-9dc8-4b83-b53b-b092f0d6e78e/43de3b5f-7fe5-32cd-b732-8ba98f51db84.roa
Signing time:             Tue 19 May 2026 01:00:24 +0000
ROA not before:           Tue 19 May 2026 01:00:24 +0000
ROA not after:            Mon 17 Aug 2026 01:00:24 +0000
asID:                     29900
IP address blocks:        66.146.240.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e5db199d-9dc8-4b83-b53b-b092f0d6e78e/e5db199d-9dc8-4b83-b53b-b092f0d6e78e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e5db199d-9dc8-4b83-b53b-b092f0d6e78e/e5db199d-9dc8-4b83-b53b-b092f0d6e78e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e5db199d-9dc8-4b83-b53b-b092f0d6e78e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 May 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:e1:50:86:af:51:b6:0f:6f:e4:6a:85:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e5db199d-9dc8-4b83-b53b-b092f0d6e78e
        Validity
            Not Before: May 19 01:00:24 2026 GMT
            Not After : Aug 17 01:00:24 2026 GMT
        Subject: CN=912144d6-60d2-4aab-900a-9322e74ae47d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:f6:f6:f9:a4:f7:70:28:0c:dc:fb:79:04:61:
                    9a:cd:a2:b0:ae:b0:71:61:42:8f:5d:d3:b5:58:de:
                    e4:df:8f:db:a8:98:6b:9c:fe:23:c1:35:65:62:45:
                    7c:2c:54:c6:9e:07:39:23:94:7c:26:13:0a:d9:cd:
                    f9:f2:18:b9:dd:f6:c8:5e:14:e2:56:ee:41:8d:b0:
                    37:30:a1:c3:8d:2c:fc:70:63:a6:a5:3f:05:f2:3e:
                    45:44:20:05:6a:ef:4d:dc:7b:7b:95:a4:98:68:e1:
                    6b:a7:e1:48:24:f1:e6:25:4d:00:fa:ed:49:ff:ab:
                    cb:f8:80:f4:fd:e1:9e:52:39:4b:ff:a0:8e:72:a2:
                    98:99:1a:71:37:e1:78:f1:13:8f:34:77:3b:3d:ff:
                    98:97:27:44:0d:17:32:3d:e8:56:b1:e5:3d:a9:5a:
                    4a:cf:d3:8d:91:81:b5:03:12:d2:7b:fd:bf:3b:2b:
                    94:f0:cf:e4:58:09:c3:8d:e7:e7:03:59:bc:51:bb:
                    b7:4a:9a:48:d0:57:93:c7:e0:19:29:f1:f8:93:4f:
                    8d:e3:bf:a0:6f:92:79:b3:e4:f8:cd:f0:d1:31:c7:
                    d5:12:35:94:17:28:8a:66:38:fa:52:ec:cd:c0:52:
                    32:23:3e:bf:e7:e9:e8:8c:37:0c:6b:d7:6e:98:46:
                    f8:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:20:ED:49:69:6A:EF:7D:B6:43:58:92:1F:92:B7:B3:1E:29:8D:50
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e5db199d-9dc8-4b83-b53b-b092f0d6e78e/43de3b5f-7fe5-32cd-b732-8ba98f51db84.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e5db199d-9dc8-4b83-b53b-b092f0d6e78e/e5db199d-9dc8-4b83-b53b-b092f0d6e78e.crl

            X509v3 Authority Key Identifier:
                keyid:93:40:47:E4:F1:10:78:69:FD:0C:88:F4:8E:77:C9:8A:2D:6A:A8:CB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e5db199d-9dc8-4b83-b53b-b092f0d6e78e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.146.240.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3e:05:8f:87:3f:35:76:ff:99:55:c9:9e:c6:81:9b:db:8f:90:
         71:e4:71:d6:da:25:47:64:ee:0b:8e:06:2c:91:11:e1:9b:c7:
         49:ce:f1:51:85:54:8c:f2:a9:84:72:bd:f9:02:c3:70:04:eb:
         a1:db:c1:26:0d:da:b6:33:88:6e:b2:98:5c:c1:08:46:70:ea:
         8a:5a:04:ba:4f:e8:b3:35:30:ce:03:68:e0:a6:0f:42:bb:9f:
         78:21:1f:e1:22:cf:c2:74:15:61:66:8f:f1:bb:21:eb:37:a6:
         4e:46:8e:7c:26:40:39:08:60:fe:15:8d:19:1f:79:ed:dc:a5:
         ac:73:2d:d1:94:f6:ea:0e:8b:fe:82:da:5c:7c:b2:4b:37:3a:
         12:9a:1f:37:75:49:d3:fb:c7:ff:25:ac:4b:b7:fe:d6:c9:9a:
         2e:f1:2e:89:e6:07:c1:ac:53:22:ee:00:0a:3b:15:a6:29:b0:
         1a:92:f9:9a:11:1c:c1:28:73:0f:f0:37:15:e5:a5:24:3a:21:
         52:53:a3:57:07:12:75:84:98:4a:40:9b:56:b0:c3:4f:08:f2:
         5e:b7:41:37:60:cd:07:c4:32:37:d9:be:b9:c9:d8:30:dc:6a:
         41:67:75:38:f3:38:ab:ce:48:5e:aa:fa:ed:8f:b6:b4:6c:8f:
         62:22:fb:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 22 18:30:12 2026 by rpki-client