Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/2c4bedad-c8e4-37be-a4e4-38ba77694658.roa
File:                     2c4bedad-c8e4-37be-a4e4-38ba77694658.roa (raw, json)
Hash identifier:          PvCoikHuXmCo9Ke2RN62kdsk+il9B+gfsVRo2lS0kgE=
Subject key identifier:   85:C2:64:BA:BE:09:F5:52:5F:71:22:11:27:F8:BB:FA:5F:3C:B2:D2
Certificate issuer:       /CN=788d2b41-bb64-40d8-b274-ba4704d79ddf
Certificate serial:       010D0C9F4328584C8046E6BBB5F2EC6FE5758A80
Authority key identifier: AD:09:AD:0B:C2:D8:78:51:C9:9F:A7:31:63:47:B8:D6:6C:D6:E5:35
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/2c4bedad-c8e4-37be-a4e4-38ba77694658.roa
Signing time:             Mon 12 Jan 2026 14:00:40 +0000
ROA not before:           Mon 12 Jan 2026 14:00:40 +0000
ROA not after:            Sun 12 Apr 2026 13:00:40 +0000
asID:                     13445
IP address blocks:        66.114.160.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/788d2b41-bb64-40d8-b274-ba4704d79ddf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/788d2b41-bb64-40d8-b274-ba4704d79ddf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Feb 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:80:46:e6:bb:b5:f2:ec:6f:e5:75:8a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=788d2b41-bb64-40d8-b274-ba4704d79ddf
        Validity
            Not Before: Jan 12 14:00:40 2026 GMT
            Not After : Apr 12 13:00:40 2026 GMT
        Subject: CN=9eea4a65-eb65-47fc-af30-289dc7a74fde
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:96:e4:88:fd:44:f0:e7:f1:6c:ce:78:23:58:
                    df:97:88:a2:56:8c:de:0e:9f:8f:05:5f:d4:a7:a5:
                    d9:de:8b:a4:29:1d:71:f1:f7:d5:91:fb:3b:d2:15:
                    7e:36:af:69:d9:df:4c:4f:b3:41:9a:58:4b:cc:22:
                    d2:1c:56:cf:80:47:f6:e7:f2:84:1a:45:e5:75:fe:
                    6c:4d:1e:5b:ab:d2:c3:b2:04:81:b3:53:af:7b:02:
                    e1:2a:1e:a9:b2:96:fd:e3:de:66:c7:b9:f1:f5:c5:
                    2f:6b:51:c3:e0:02:10:a2:49:02:31:79:27:cc:6c:
                    8a:b2:e4:47:ce:2e:f2:da:f8:66:99:5f:08:29:e8:
                    22:91:6c:75:a7:91:c4:0a:b2:bf:74:da:b7:60:b2:
                    91:36:f3:9d:52:51:da:e6:29:33:6b:6f:14:8e:33:
                    68:c1:57:1c:da:31:84:59:dd:01:0e:77:b5:03:6a:
                    04:9f:b9:57:25:c9:45:82:10:9b:4c:bc:aa:be:8f:
                    6f:dc:54:b4:d1:0e:bf:b2:8b:4e:88:70:57:a4:91:
                    2f:13:b7:57:1e:40:53:78:37:2a:74:26:f9:2d:7b:
                    1e:08:6d:2d:1c:b6:e0:d2:97:02:10:6b:52:4c:92:
                    25:67:8f:9e:f8:26:9d:d4:bf:1d:23:3d:f3:d5:a7:
                    b3:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:C2:64:BA:BE:09:F5:52:5F:71:22:11:27:F8:BB:FA:5F:3C:B2:D2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/2c4bedad-c8e4-37be-a4e4-38ba77694658.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/788d2b41-bb64-40d8-b274-ba4704d79ddf.crl

            X509v3 Authority Key Identifier:
                keyid:AD:09:AD:0B:C2:D8:78:51:C9:9F:A7:31:63:47:B8:D6:6C:D6:E5:35

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.114.160.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         75:54:77:34:fc:85:db:31:cd:e2:34:f4:cd:ba:99:4b:1d:9c:
         fa:6d:77:36:c6:6d:9b:fb:4b:3d:55:07:22:fa:52:b2:cd:18:
         d4:3a:89:cb:4e:e9:ff:4d:f8:b4:e9:10:d0:d8:6d:0d:e3:90:
         ac:99:d7:9d:4e:89:1b:be:af:74:2e:00:1e:7d:a9:24:12:f9:
         21:d3:24:54:7d:16:14:55:75:ec:d0:00:f5:dd:98:78:41:c6:
         ad:f7:b7:1c:ef:3a:6e:1a:fd:45:4f:76:3a:3e:96:87:f4:40:
         48:dd:c1:df:b6:f6:cc:a7:15:7a:5d:40:db:96:7b:82:3c:df:
         bc:ac:96:b9:4e:3e:0d:5f:85:78:15:f2:83:1a:ca:9d:fa:f0:
         14:6f:d6:a3:13:61:b2:12:1a:94:67:b3:02:6d:b9:8c:ae:6d:
         fd:59:50:f9:49:9b:42:6c:cf:4a:5b:09:a7:1b:29:2e:0b:b6:
         8e:72:80:bb:11:b5:57:b5:16:07:95:0b:0e:fe:50:14:54:2f:
         d2:6c:f6:26:40:e1:c4:50:2e:7f:f0:0f:1f:12:e9:da:87:24:
         c7:5d:58:b9:34:25:18:53:7b:00:ca:85:9a:02:7a:a6:64:81:
         87:79:3c:5f:39:9f:db:82:5f:7c:b7:b8:d4:b0:7d:65:a5:05:
         81:52:25:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 26 10:43:48 2026 by rpki-client