Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/dc7510aa-45f2-37ee-a135-8ccf04ece74f.roa
File:                     dc7510aa-45f2-37ee-a135-8ccf04ece74f.roa (raw, json)
Hash identifier:          FV3ALu+67fFBCJNpiRdj/DtU7gpMI6b2I5LDUp5uPVg=
Subject key identifier:   6D:4C:F4:E4:7A:B5:1A:9A:2B:68:14:17:E6:8E:58:30:88:4D:7E:C6
Certificate issuer:       /CN=da370214-1d61-48bf-84a0-a60096ccaae7
Certificate serial:       010D0C9F4328584DF5CE65788015828A3133D200
Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/dc7510aa-45f2-37ee-a135-8ccf04ece74f.roa
Signing time:             Tue 26 May 2026 09:10:29 +0000
ROA not before:           Tue 26 May 2026 09:10:29 +0000
ROA not after:            Mon 24 Aug 2026 09:10:29 +0000
asID:                     203075
IP address blocks:        66.253.101.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 04 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:f5:ce:65:78:80:15:82:8a:31:33:d2:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7
        Validity
            Not Before: May 26 09:10:29 2026 GMT
            Not After : Aug 24 09:10:29 2026 GMT
        Subject: CN=a78f2d34-6191-4e66-9044-cfe791f9e4cb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:3d:78:83:c7:d7:20:3a:bf:25:4e:dc:50:0c:
                    45:e0:78:25:29:fa:77:4a:e7:37:3b:73:ee:c0:e4:
                    5d:05:b0:1b:8e:1f:fb:a5:18:7f:e0:17:5c:10:85:
                    ff:3c:8d:6a:3a:fb:ee:79:36:03:55:30:15:b9:8e:
                    59:1c:a3:e2:32:3d:95:77:b8:ae:8f:35:16:d7:ee:
                    6f:10:a3:8e:ac:6d:42:53:33:9d:74:55:9e:e9:c7:
                    60:05:1a:40:03:c0:8d:d7:99:e8:fd:ef:83:5d:6f:
                    1c:ac:0f:6a:f5:93:77:92:58:0f:9b:03:f1:6a:49:
                    ac:1e:87:b4:ce:fe:45:f8:cf:88:71:cf:24:04:70:
                    35:a0:06:aa:f5:94:de:ef:fb:45:55:4e:12:75:c6:
                    6a:ec:45:f6:1a:4f:c2:0c:f4:11:f5:55:ec:db:6f:
                    91:e7:86:55:9b:40:e1:bf:1c:3d:a0:8e:84:09:14:
                    ce:34:93:47:42:af:3f:b3:85:7b:80:d5:86:16:e6:
                    1b:34:f4:35:6c:43:70:a8:af:de:a3:b7:82:99:e8:
                    65:05:a1:ff:e7:af:57:af:62:62:c5:0a:82:fc:f1:
                    e8:4e:a4:b3:c6:d0:af:4b:04:9e:b4:57:95:1f:79:
                    a3:72:2b:63:ec:33:dd:61:36:63:39:c8:83:73:7c:
                    f5:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:4C:F4:E4:7A:B5:1A:9A:2B:68:14:17:E6:8E:58:30:88:4D:7E:C6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/dc7510aa-45f2-37ee-a135-8ccf04ece74f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl

            X509v3 Authority Key Identifier:
                keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.253.101.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         28:12:dc:63:e9:0b:cf:16:55:43:2f:a8:5a:f9:94:54:30:2e:
         db:47:d2:a1:ca:38:0d:16:85:06:1f:7d:7a:ca:5d:a1:9a:d1:
         92:c1:9b:e7:bf:0d:6b:64:f4:24:9f:9f:16:72:98:28:8e:50:
         c3:ab:fa:9a:87:54:b7:c2:f8:c8:b9:f9:6d:61:31:c3:dd:e4:
         8a:1a:c8:fd:cc:11:9b:99:70:a2:86:f4:e8:27:c7:11:90:29:
         cb:e8:39:7f:24:00:3c:73:04:c5:07:0e:bf:32:29:f7:ad:03:
         4c:16:d4:1a:37:7a:04:b1:b3:c2:2e:f8:9f:f0:8a:4e:27:8b:
         74:6a:26:59:65:93:43:2f:eb:5b:cd:ab:81:83:62:f2:3a:6d:
         95:3d:04:c1:3f:63:fe:17:a1:d4:60:3f:26:b6:41:b1:6b:a9:
         7a:04:33:fb:8e:af:80:0b:36:60:04:c0:85:cb:c0:97:b1:e2:
         05:9b:01:a7:40:c1:1b:c9:3f:17:0f:cd:03:dc:cf:46:da:3d:
         b6:cd:b2:d1:0a:b6:03:49:de:b5:80:63:b8:8a:47:e5:b0:28:
         c3:38:05:63:d0:00:4d:48:6d:bc:8f:c9:c3:9d:d1:f7:56:4d:
         eb:94:b7:82:3d:7c:2f:59:16:2c:c3:f0:26:c4:77:96:13:6c:
         c0:54:92:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 3 09:19:16 2026 by rpki-client