Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/ec4d4aa5-028c-3f8e-aede-8b4e82f78503.roa
File:                     ec4d4aa5-028c-3f8e-aede-8b4e82f78503.roa (raw, json)
Hash identifier:          6DNgo/Ivft5l8qeK+Bz4sR4HSqXyBxTIX1yMOYBFvps=
Subject key identifier:   6A:FD:81:0E:E0:F0:A2:A7:FD:36:83:88:67:89:A6:76:94:3B:DA:CD
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584EE7BCC09E904630BB05676C40
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/ec4d4aa5-028c-3f8e-aede-8b4e82f78503.roa
Signing time:             Fri 21 Aug 2026 01:00:12 +0000
ROA not before:           Fri 21 Aug 2026 01:00:12 +0000
ROA not after:            Thu 19 Nov 2026 02:00:12 +0000
asID:                     701
IP address blocks:        66.236.163.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 14 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:e7:bc:c0:9e:90:46:30:bb:05:67:6c:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Aug 21 01:00:12 2026 GMT
            Not After : Nov 19 02:00:12 2026 GMT
        Subject: CN=678b7891-cd3c-442c-9569-96afc48be14a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:3a:45:cb:6d:58:e1:d4:56:b9:03:c8:4e:0a:
                    e1:86:03:13:02:91:19:77:2f:c5:fd:08:58:46:11:
                    c9:1b:93:5e:91:f5:b9:d1:30:21:5e:1b:8d:f8:38:
                    f4:ba:b5:29:28:3a:05:30:c9:0f:62:eb:e5:e7:e3:
                    51:3a:f1:ee:4a:40:99:5c:ca:a8:34:5a:8b:05:62:
                    67:2e:74:b2:5b:47:5d:2b:f5:38:1c:dc:c9:f8:77:
                    23:65:bc:95:dc:d1:1f:a7:be:60:b3:03:66:a1:f6:
                    1c:e1:df:5e:b6:3f:86:21:9b:5e:13:58:53:33:61:
                    8a:ae:27:c5:94:b7:be:59:c0:4a:e6:c2:b0:fb:1e:
                    cf:81:81:44:e8:54:5e:3d:c8:6e:23:37:ba:50:7f:
                    bc:f1:6e:23:9c:82:51:a3:87:02:46:be:31:78:12:
                    b5:45:c7:52:9f:34:ac:60:ee:4b:5f:11:d9:1b:58:
                    c2:e7:b0:71:53:0b:f8:f0:13:5f:b5:cf:cc:bc:91:
                    3e:89:1b:a2:e8:64:50:a8:2f:d4:dd:61:47:07:30:
                    9f:fa:35:a7:6b:10:f8:2f:dc:40:34:c7:a6:65:63:
                    16:c1:e7:66:4a:6a:2e:bd:f3:d0:03:10:1a:5c:3d:
                    be:e6:eb:c6:8a:8a:97:28:c8:d0:63:34:92:b1:68:
                    bd:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:FD:81:0E:E0:F0:A2:A7:FD:36:83:88:67:89:A6:76:94:3B:DA:CD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/ec4d4aa5-028c-3f8e-aede-8b4e82f78503.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.236.163.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9e:45:a0:a5:d7:96:90:23:84:bc:d2:49:ef:ae:3b:67:a7:43:
         33:ad:d5:f2:df:d6:e8:b4:a5:9b:3c:dc:de:52:07:39:bc:8f:
         7f:81:c5:46:32:9d:00:b6:27:28:cb:84:85:10:a6:1a:f1:87:
         3b:e9:c9:89:bf:cd:70:65:12:af:7f:33:3d:3d:a5:2c:b1:f9:
         85:bd:2e:18:75:e5:8a:ba:a1:23:ae:ad:a0:5f:58:74:2c:10:
         85:fb:5e:dd:d0:66:a7:d2:52:b1:e5:36:cf:4d:6d:08:22:7c:
         8b:c2:11:f5:39:7c:51:2e:84:3c:a3:18:4b:cd:ca:d1:5e:b8:
         8c:d0:30:c3:ef:bf:d7:a6:00:40:c6:5d:c6:b0:9a:8e:57:51:
         48:a0:70:8e:d2:bf:de:ad:f6:fc:aa:1c:8a:78:a1:64:30:df:
         ac:32:fa:29:ba:54:10:70:5a:70:34:b2:6e:15:49:5d:b2:72:
         61:09:84:62:93:2a:b9:2e:4f:37:86:a1:06:d9:7b:f3:22:67:
         13:87:0d:8d:e6:88:9d:68:24:0a:62:b4:08:1f:48:3a:b4:d8:
         32:6d:63:17:a1:78:ff:fd:23:2f:4f:5a:fc:48:9d:9a:9d:5d:
         c9:4f:19:6f:56:ba:52:64:d8:63:c4:19:b8:25:ea:7c:1f:ad:
         48:43:73:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 13 15:47:46 2026 by rpki-client