Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a3e9a4c0-b88b-4cf5-8603-f2d09cfb5fa7/27f758ef-5e16-3cc2-8633-28286481977f.roa
File:                     27f758ef-5e16-3cc2-8633-28286481977f.roa (raw, json)
Hash identifier:          Ff3F9BeQ73wKe8OaY1Hafsw8Cfy0PyQXugvINb1GsbI=
Subject key identifier:   D0:FF:5A:F8:32:CD:CA:85:EA:0D:A0:56:6F:75:C3:88:0D:CB:A0:7B
Certificate issuer:       /CN=a3e9a4c0-b88b-4cf5-8603-f2d09cfb5fa7
Certificate serial:       010D0C9F4328584EE0C21B66FE0789CDAB6FAB00
Authority key identifier: F0:72:8F:90:47:1D:B0:2A:06:1E:98:29:13:9A:46:03:BD:8C:58:92
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a3e9a4c0-b88b-4cf5-8603-f2d09cfb5fa7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a3e9a4c0-b88b-4cf5-8603-f2d09cfb5fa7/27f758ef-5e16-3cc2-8633-28286481977f.roa
Signing time:             Tue 18 Aug 2026 13:00:12 +0000
ROA not before:           Tue 18 Aug 2026 13:00:12 +0000
ROA not after:            Mon 16 Nov 2026 14:00:12 +0000
asID:                     22709
IP address blocks:        66.110.240.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a3e9a4c0-b88b-4cf5-8603-f2d09cfb5fa7/a3e9a4c0-b88b-4cf5-8603-f2d09cfb5fa7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a3e9a4c0-b88b-4cf5-8603-f2d09cfb5fa7/a3e9a4c0-b88b-4cf5-8603-f2d09cfb5fa7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a3e9a4c0-b88b-4cf5-8603-f2d09cfb5fa7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Sep 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:e0:c2:1b:66:fe:07:89:cd:ab:6f:ab:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a3e9a4c0-b88b-4cf5-8603-f2d09cfb5fa7
        Validity
            Not Before: Aug 18 13:00:12 2026 GMT
            Not After : Nov 16 14:00:12 2026 GMT
        Subject: CN=cdfa0440-1d6d-4195-b653-ad4f52f89f36
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:bb:c8:f9:34:b4:1e:0d:23:b4:6f:fd:0c:25:
                    8d:03:9a:94:81:af:20:3a:c7:2b:6c:e7:5e:1b:27:
                    6d:3b:0c:b8:ca:27:c0:5e:56:d6:5c:7b:17:fa:0b:
                    20:21:eb:06:4b:ec:83:8a:50:4b:a3:03:1d:40:ef:
                    2b:c2:03:82:9c:ca:fe:04:b1:d9:e3:6c:cc:a0:7e:
                    d0:eb:e9:a9:1d:5d:14:ee:d0:8a:14:42:91:4b:d4:
                    78:3a:45:05:a7:e3:8e:19:f0:c2:81:d2:fe:a4:8a:
                    5c:56:a4:6c:9e:13:4b:cd:3f:55:ce:63:4f:17:c4:
                    c5:5a:d5:2b:ad:e9:4f:44:8e:bd:93:bb:e5:34:85:
                    22:fc:6b:92:61:14:2e:19:ed:de:0e:ed:2f:ac:45:
                    f2:40:c6:a4:57:28:39:f4:ec:30:aa:e1:db:df:80:
                    39:19:1e:f4:03:a8:2e:26:07:f3:4f:49:2a:06:ac:
                    e2:3d:e3:df:33:5b:81:1c:66:fd:1a:37:f5:00:51:
                    7a:15:80:96:f4:97:1c:28:33:73:38:bb:a5:1b:c3:
                    32:6c:d5:f9:ca:06:cf:93:a7:a4:6a:84:87:e2:fb:
                    b0:84:8c:45:25:07:b1:2a:8a:fe:76:fb:88:67:08:
                    82:f0:b3:25:83:c4:5c:a2:f0:cc:89:5e:85:99:f7:
                    52:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:FF:5A:F8:32:CD:CA:85:EA:0D:A0:56:6F:75:C3:88:0D:CB:A0:7B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a3e9a4c0-b88b-4cf5-8603-f2d09cfb5fa7/27f758ef-5e16-3cc2-8633-28286481977f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a3e9a4c0-b88b-4cf5-8603-f2d09cfb5fa7/a3e9a4c0-b88b-4cf5-8603-f2d09cfb5fa7.crl

            X509v3 Authority Key Identifier:
                keyid:F0:72:8F:90:47:1D:B0:2A:06:1E:98:29:13:9A:46:03:BD:8C:58:92

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a3e9a4c0-b88b-4cf5-8603-f2d09cfb5fa7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.110.240.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         84:99:d7:6a:e3:bb:4b:a5:7b:55:66:ce:29:52:d9:b9:0a:bd:
         69:09:fc:f4:fc:cb:12:30:61:21:83:74:ec:5e:46:05:ca:7a:
         56:9b:f0:fe:2a:0a:a4:72:49:58:75:55:37:32:6d:d8:37:ba:
         d2:c5:e3:53:88:24:da:20:7a:1d:ef:d6:b3:8a:ea:61:76:e6:
         33:98:8c:0c:d2:f8:1d:df:e6:b1:92:df:00:ef:32:1b:e2:09:
         8c:6b:dc:e5:35:1a:0f:4f:ee:10:1a:33:e9:f7:f6:7e:b3:8a:
         47:b2:3d:f3:12:f4:13:e1:db:da:95:8f:fb:67:23:90:06:c7:
         41:a8:da:72:7d:1e:b4:99:9d:23:b8:f4:b8:b0:17:34:66:48:
         7f:23:e0:53:dc:e0:ec:56:33:73:93:58:ef:c1:7b:b1:03:8b:
         f8:ae:4d:7b:ab:5b:8d:bb:7f:8b:1a:90:4b:b0:df:8c:bf:0f:
         56:c0:e9:d7:f2:fe:d4:07:1d:e4:13:34:fa:78:e3:97:40:0d:
         28:19:34:48:eb:4b:21:56:b9:b5:dd:29:19:83:b5:c0:65:2d:
         25:be:24:26:36:19:57:e2:14:99:93:02:92:29:ea:36:4f:c8:
         95:4f:97:f0:a8:5e:ad:25:f6:23:03:cb:8b:f4:99:8c:34:9a:
         d5:b2:d4:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 23:11:36 2026 by rpki-client