Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/75dd82fa-31b6-38fc-a045-64ec9b083506.roa
File:                     75dd82fa-31b6-38fc-a045-64ec9b083506.roa (raw, json)
Hash identifier:          BXsY0bNrZgGirwqHSko1KgjJXS6K6HvtWZJNJuvPIfI=
Subject key identifier:   27:E9:DF:6D:D3:2C:66:07:8E:4C:4F:E9:4B:CE:71:8F:DF:CA:4D:A2
Certificate issuer:       /CN=da370214-1d61-48bf-84a0-a60096ccaae7
Certificate serial:       010D0C9F4328584EAE22C531D92735D2DE54E0C0
Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/75dd82fa-31b6-38fc-a045-64ec9b083506.roa
Signing time:             Fri 31 Jul 2026 09:49:13 +0000
ROA not before:           Fri 31 Jul 2026 09:49:13 +0000
ROA not after:            Thu 29 Oct 2026 09:49:13 +0000
asID:                     3257
IP address blocks:        66.92.6.0/23 maxlen: 24
                          66.92.26.0/23 maxlen: 24
                          66.92.32.0/23 maxlen: 24
                          66.92.34.0/24 maxlen: 24
                          66.92.40.0/22 maxlen: 24
                          66.92.44.0/23 maxlen: 24
                          66.92.47.0/24 maxlen: 24
                          66.92.48.0/23 maxlen: 24
                          66.92.51.0/24 maxlen: 24
                          66.92.52.0/24 maxlen: 24
                          66.92.56.0/23 maxlen: 24
                          66.92.63.0/24 maxlen: 24
                          66.92.65.0/24 maxlen: 24
                          66.92.66.0/23 maxlen: 24
                          66.92.158.0/24 maxlen: 24
                          66.92.162.0/24 maxlen: 24
                          66.92.166.0/23 maxlen: 24
                          66.92.169.0/24 maxlen: 24
                          66.92.177.0/24 maxlen: 24
                          66.92.179.0/24 maxlen: 24
                          66.92.182.0/24 maxlen: 24
                          66.92.188.0/23 maxlen: 24
                          66.92.190.0/24 maxlen: 24
                          66.92.192.0/24 maxlen: 24
                          66.92.201.0/24 maxlen: 24
                          66.92.215.0/24 maxlen: 24
                          66.92.221.0/24 maxlen: 24
                          66.92.222.0/24 maxlen: 24
                          66.92.244.0/24 maxlen: 24
                          66.92.248.0/24 maxlen: 24
                          66.92.252.0/24 maxlen: 24
                          66.92.254.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 27 Aug 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:ae:22:c5:31:d9:27:35:d2:de:54:e0:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7
        Validity
            Not Before: Jul 31 09:49:13 2026 GMT
            Not After : Oct 29 09:49:13 2026 GMT
        Subject: CN=3c4b6c6e-0fb9-4e44-adde-6c823b418224
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:87:0c:68:1b:56:4a:f0:e6:2c:c9:ce:e7:35:
                    c0:77:bc:ea:87:df:17:68:57:ce:9a:9c:24:6b:4f:
                    db:15:47:fa:9d:80:8a:31:c7:f8:ce:6a:15:4f:ca:
                    e0:50:fc:ab:99:33:f6:8d:c7:ee:f6:a3:51:9b:78:
                    4b:9b:7e:0c:9e:2b:fb:85:61:33:02:4d:6b:03:39:
                    6a:1b:3d:54:47:e8:9d:e0:95:ca:15:02:a1:d0:d6:
                    f4:3e:36:58:da:b5:33:31:2e:d8:e6:35:57:83:3e:
                    ca:8b:d7:54:e7:51:a6:39:9e:8b:a0:b0:0e:ee:cc:
                    27:c7:9a:fd:e2:4f:59:66:41:47:a1:c3:b4:78:76:
                    db:52:3e:cf:56:bb:e0:78:a9:f6:0c:ac:26:59:fa:
                    f8:50:1f:ec:0f:74:09:43:bf:54:dc:52:da:d7:ae:
                    ac:ef:e0:e8:99:f3:2e:c3:21:1c:7f:2a:20:b4:2f:
                    c3:2a:c1:53:07:f7:9c:ee:aa:20:9b:a6:b6:d3:82:
                    23:47:a9:e4:45:39:29:37:63:9c:aa:46:4b:92:97:
                    19:de:8e:ab:35:0d:b4:85:28:73:a0:f5:c9:db:19:
                    11:67:dc:91:4d:db:4e:c2:ee:ed:26:65:51:32:65:
                    e4:c8:eb:a3:fc:5f:02:3d:aa:dd:4c:c6:ff:f0:5b:
                    74:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:E9:DF:6D:D3:2C:66:07:8E:4C:4F:E9:4B:CE:71:8F:DF:CA:4D:A2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/75dd82fa-31b6-38fc-a045-64ec9b083506.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl

            X509v3 Authority Key Identifier:
                keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.92.6.0/23
                  66.92.26.0/23
                  66.92.32.0-66.92.34.255
                  66.92.40.0-66.92.45.255
                  66.92.47.0-66.92.49.255
                  66.92.51.0-66.92.52.255
                  66.92.56.0/23
                  66.92.63.0/24
                  66.92.65.0-66.92.67.255
                  66.92.158.0/24
                  66.92.162.0/24
                  66.92.166.0/23
                  66.92.169.0/24
                  66.92.177.0/24
                  66.92.179.0/24
                  66.92.182.0/24
                  66.92.188.0-66.92.190.255
                  66.92.192.0/24
                  66.92.201.0/24
                  66.92.215.0/24
                  66.92.221.0-66.92.222.255
                  66.92.244.0/24
                  66.92.248.0/24
                  66.92.252.0/24
                  66.92.254.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         54:11:48:82:04:0e:41:14:5e:67:19:15:d5:3e:b8:e0:31:d8:
         ee:c1:37:f9:72:2e:db:b7:bf:9f:1f:cd:35:e6:1c:02:f6:23:
         3d:85:91:a7:ea:87:38:aa:fd:32:18:8a:ec:5b:a9:aa:94:dc:
         a0:03:3e:7e:0b:a3:81:5f:99:a3:dc:24:fd:89:f0:b9:f3:f1:
         05:ce:f0:73:d1:ae:5c:a1:31:7f:a1:7a:ef:82:fc:7d:92:bc:
         1f:c1:d0:d9:11:4a:1b:ec:84:1d:2d:39:59:51:ec:5f:b0:80:
         cc:84:0b:12:3f:d9:c1:a9:27:65:64:e7:1b:68:a9:ab:6b:e1:
         88:7e:6c:07:cc:27:55:13:f2:78:33:79:ab:9b:bd:05:68:99:
         fa:86:0d:3e:e7:09:36:3a:b4:49:64:ae:ea:ca:b9:5b:d4:e9:
         19:8d:5e:de:01:06:70:bc:6b:d5:5e:05:46:4e:2a:5e:87:75:
         fa:94:ac:77:5a:10:21:03:32:97:43:bc:fb:c5:99:4b:3a:e6:
         f6:ed:37:ba:ba:08:35:3b:42:17:79:4d:09:f2:a2:a0:48:f8:
         bb:a5:e0:14:a6:df:87:44:17:20:f1:30:f2:ce:ce:c3:0a:fb:
         a3:2a:14:58:81:bf:3a:ad:a6:75:d2:e4:38:74:3e:94:6b:1c:
         d1:c4:82:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 26 15:53:01 2026 by rpki-client