Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e5ecaf10-47c4-46e7-bd37-9c05f198c961/c3d6533c-9dc2-388e-b466-22a8067ca530.roa
File:                     c3d6533c-9dc2-388e-b466-22a8067ca530.roa (raw, json)
Hash identifier:          FR7FMURqGEZASTAY055+i1n7GuGrIisi+sJFx1qA3ks=
Subject key identifier:   48:E2:FB:BC:6B:4F:14:18:3F:98:C4:A0:65:09:83:35:46:B4:AA:F0
Certificate issuer:       /CN=e5ecaf10-47c4-46e7-bd37-9c05f198c961
Certificate serial:       010D0C9F4328584DE41B2340EF8AF8B5A123E000
Authority key identifier: 70:B0:E3:CB:ED:1B:4C:49:56:BE:1F:FE:32:B2:09:03:9A:40:20:38
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e5ecaf10-47c4-46e7-bd37-9c05f198c961.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e5ecaf10-47c4-46e7-bd37-9c05f198c961/c3d6533c-9dc2-388e-b466-22a8067ca530.roa
Signing time:             Wed 20 May 2026 01:00:25 +0000
ROA not before:           Wed 20 May 2026 01:00:25 +0000
ROA not after:            Tue 18 Aug 2026 01:00:25 +0000
asID:                     2725
IP address blocks:        66.85.25.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e5ecaf10-47c4-46e7-bd37-9c05f198c961/e5ecaf10-47c4-46e7-bd37-9c05f198c961.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e5ecaf10-47c4-46e7-bd37-9c05f198c961/e5ecaf10-47c4-46e7-bd37-9c05f198c961.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e5ecaf10-47c4-46e7-bd37-9c05f198c961.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 May 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:e4:1b:23:40:ef:8a:f8:b5:a1:23:e0:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e5ecaf10-47c4-46e7-bd37-9c05f198c961
        Validity
            Not Before: May 20 01:00:25 2026 GMT
            Not After : Aug 18 01:00:25 2026 GMT
        Subject: CN=8ae1342e-2ef7-42a8-9411-a2a79844eb25
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:5c:f0:23:bd:19:79:cb:be:41:4c:cf:5d:f7:
                    bb:bf:8b:44:50:09:35:d2:4d:fb:f6:f2:2d:c6:ab:
                    ad:05:3f:08:45:ca:d7:f6:dd:54:4e:85:29:47:38:
                    06:a8:50:c4:46:f6:bf:f1:c1:ef:8e:a7:65:a9:07:
                    ca:62:09:76:06:e9:d3:7b:7e:26:c7:0a:ea:70:7b:
                    7c:7f:00:4c:69:e8:3c:26:92:91:8a:89:23:c1:02:
                    d0:af:3c:14:0a:50:e3:ef:c5:9d:fe:41:6e:2d:dc:
                    e1:80:32:6c:0c:c1:bc:21:2e:85:a6:56:87:8d:be:
                    8f:43:f2:88:06:49:ef:ab:c0:e4:dd:39:cb:ba:62:
                    0d:a6:3a:e0:46:f1:ec:66:61:fa:2a:2a:a8:db:c8:
                    6b:69:36:9f:32:7d:c3:fb:f2:75:60:e7:2d:53:6d:
                    f9:31:b7:3a:78:46:4b:f0:d3:21:42:2c:fb:5a:f3:
                    0a:8a:59:df:5d:ed:b4:f7:70:6b:d1:ea:17:b0:fa:
                    ef:d0:fd:5e:ac:26:82:5b:34:50:87:ea:87:af:31:
                    1f:b6:09:a1:48:d4:d3:44:96:68:e4:ee:30:ce:4c:
                    8f:de:21:7d:6d:15:0c:31:3e:f0:f9:d4:f9:15:79:
                    ab:35:60:e2:8e:17:b9:0b:de:74:a7:83:eb:5d:f4:
                    5a:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:E2:FB:BC:6B:4F:14:18:3F:98:C4:A0:65:09:83:35:46:B4:AA:F0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e5ecaf10-47c4-46e7-bd37-9c05f198c961/c3d6533c-9dc2-388e-b466-22a8067ca530.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e5ecaf10-47c4-46e7-bd37-9c05f198c961/e5ecaf10-47c4-46e7-bd37-9c05f198c961.crl

            X509v3 Authority Key Identifier:
                keyid:70:B0:E3:CB:ED:1B:4C:49:56:BE:1F:FE:32:B2:09:03:9A:40:20:38

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e5ecaf10-47c4-46e7-bd37-9c05f198c961.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.85.25.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         00:7a:56:f0:0a:0a:71:e8:cf:4d:62:c9:ea:6b:7c:3b:7b:6d:
         e4:ff:17:5c:29:ad:be:5a:6c:40:de:05:5b:26:1b:2b:c3:a2:
         53:e2:9b:36:53:46:67:96:30:14:cf:3d:40:aa:93:62:9f:51:
         40:a4:bb:99:66:f0:1a:30:3e:1c:e1:39:07:a9:dc:11:2c:65:
         de:ea:74:9b:6c:29:84:bd:43:b3:39:80:4a:90:a8:78:2e:09:
         32:07:59:bc:88:41:02:5d:48:08:7e:a4:7e:99:0c:3e:8b:e7:
         c8:a2:6f:e0:de:51:89:5e:ef:2e:b3:27:6c:67:38:d5:5e:f7:
         ac:90:93:e7:c4:2f:54:6c:18:a4:96:29:ca:a1:9c:e7:a7:b9:
         61:04:a7:2e:03:49:28:fa:fb:a7:aa:bf:44:ff:a4:ee:a4:63:
         5c:93:6f:81:21:1e:b4:02:aa:50:32:4c:13:fb:9a:06:92:43:
         a7:9e:fd:5e:08:7e:22:47:19:60:5a:8c:03:a0:e5:ba:b2:2f:
         cb:6b:2a:d0:0b:ed:8b:4d:d7:79:2e:33:fe:02:3c:fa:fd:39:
         f2:7d:3c:e3:8e:79:18:db:c8:3e:92:55:50:38:b2:bb:26:fc:
         f5:69:56:d6:d5:14:35:ef:c7:48:58:ea:e7:44:a3:f1:06:2f:
         a1:0d:1d:4d
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3kGyNA74r4taEj4AAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZTVlY2FmMTAtNDdjNC00NmU3LWJkMzctOWMwNWYxOThj
OTYxMB4XDTI2MDUyMDAxMDAyNVoXDTI2MDgxODAxMDAyNVowLzEtMCsGA1UEAxMk
OGFlMTM0MmUtMmVmNy00MmE4LTk0MTEtYTJhNzk4NDRlYjI1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgFzwI70Zecu+QUzPXfe7v4tEUAk10k379vIt
xqutBT8IRcrX9t1UToUpRzgGqFDERva/8cHvjqdlqQfKYgl2BunTe34mxwrqcHt8
fwBMaeg8JpKRiokjwQLQrzwUClDj78Wd/kFuLdzhgDJsDMG8IS6FplaHjb6PQ/KI
Bknvq8Dk3TnLumINpjrgRvHsZmH6Kiqo28hraTafMn3D+/J1YOctU235Mbc6eEZL
8NMhQiz7WvMKilnfXe2093Br0eoXsPrv0P1erCaCWzRQh+qHrzEftgmhSNTTRJZo
5O4wzkyP3iF9bRUMMT7w+dT5FXmrNWDijhe5C950p4PrXfRaDQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFEji+7xrTxQYP5jEoGUJgzVGtKrwMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9lNWVj
YWYxMC00N2M0LTQ2ZTctYmQzNy05YzA1ZjE5OGM5NjEvYzNkNjUzM2MtOWRjMi0z
ODhlLWI0NjYtMjJhODA2N2NhNTMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvZTVlY2FmMTAtNDdjNC00NmU3LWJk
MzctOWMwNWYxOThjOTYxL2U1ZWNhZjEwLTQ3YzQtNDZlNy1iZDM3LTljMDVmMTk4
Yzk2MS5jcmwwHwYDVR0jBBgwFoAUcLDjy+0bTElWvh/+MrIJA5pAIDgwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS9lNWVjYWYxMC00N2M0LTQ2ZTctYmQzNy05YzA1
ZjE5OGM5NjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQlUZMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAB6VvAKCnHoz01iyeprfDt7beT/F1wprb5abEDeBVsmGyvDolPimzZT
RmeWMBTPPUCqk2KfUUCku5lm8BowPhzhOQep3BEsZd7qdJtsKYS9Q7M5gEqQqHgu
CTIHWbyIQQJdSAh+pH6ZDD6L58iib+DeUYle7y6zJ2xnONVe96yQk+fEL1RsGKSW
KcqhnOenuWEEpy4DSSj6+6eqv0T/pO6kY1yTb4EhHrQCqlAyTBP7mgaSQ6ee/V4I
fiJHGWBajAOg5bqyL8trKtAL7YtN13kuM/4CPPr9OfJ9POOOeRjbyD6SVVA4srsm
/PVpVtbVFDXvx0hY6udEo/EGL6ENHU0=
-----END CERTIFICATE-----
Generated at Thu May 21 19:36:46 2026 by rpki-client