Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/92d58d29-ff0b-3e00-8b38-6a309f795ad9.roa
File:                     92d58d29-ff0b-3e00-8b38-6a309f795ad9.roa (raw, json)
Hash identifier:          wjMaKIjVIbAqJSTIuIHxDaB/ovdhh6gMM3UjLIz/Mfg=
Subject key identifier:   C4:97:46:66:92:39:2B:70:AC:32:D3:E0:58:57:AB:8C:D5:7A:B2:B1
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584C794C6232DF8C24EC6AF97300
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/92d58d29-ff0b-3e00-8b38-6a309f795ad9.roa
Signing time:             Sat 10 Jan 2026 02:00:31 +0000
ROA not before:           Sat 10 Jan 2026 02:00:31 +0000
ROA not after:            Fri 10 Apr 2026 01:00:31 +0000
asID:                     398297
IP address blocks:        216.66.6.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 21 Feb 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:79:4c:62:32:df:8c:24:ec:6a:f9:73:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Jan 10 02:00:31 2026 GMT
            Not After : Apr 10 01:00:31 2026 GMT
        Subject: CN=97eabde5-8a35-49ad-b282-2f3a447fc75e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:ec:7a:34:19:22:42:c7:04:a3:08:60:47:75:
                    9b:e9:4a:99:30:df:48:59:b8:be:76:00:aa:af:ec:
                    7f:85:10:4f:30:07:3f:e2:78:c7:ff:ab:6e:64:b8:
                    98:79:48:31:d5:34:74:0b:7f:89:a7:b7:f8:67:ef:
                    9f:75:cb:12:67:69:95:a2:b2:f6:5e:33:5d:91:d8:
                    24:27:39:89:c7:5d:33:83:76:8f:1e:1c:17:c6:97:
                    40:69:9c:a3:4a:2b:93:10:a9:73:7c:ac:26:56:2f:
                    94:81:ee:79:8d:9b:36:9a:a5:2c:68:de:62:ad:b5:
                    8c:9a:a2:62:e3:f6:6e:cf:59:d2:ee:62:76:15:ff:
                    be:7e:b1:bd:c8:1b:c6:79:d6:4d:3d:cc:db:3f:95:
                    7e:30:79:4a:07:08:3e:18:68:85:f5:f8:fb:eb:e0:
                    67:73:82:6c:ce:a8:17:9f:1f:22:4d:86:ff:14:d0:
                    e9:e0:62:c3:5f:6e:e7:19:f9:3b:59:bf:fd:43:1c:
                    95:ad:dd:f2:ab:11:e1:8d:0e:bd:70:6b:cf:92:e7:
                    32:66:15:b4:8b:ce:f6:68:20:c6:62:47:38:e0:75:
                    5a:b3:ca:d8:06:9e:4f:db:bd:26:8b:6b:78:e9:67:
                    11:38:ee:6a:33:86:03:e9:dd:05:e3:26:c7:da:c2:
                    ab:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:97:46:66:92:39:2B:70:AC:32:D3:E0:58:57:AB:8C:D5:7A:B2:B1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/92d58d29-ff0b-3e00-8b38-6a309f795ad9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.66.6.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3a:2c:77:ab:5c:8a:8f:a5:1c:40:5a:38:28:23:0a:1e:45:96:
         bc:ba:9f:6b:9c:ac:6b:8c:de:64:bf:39:5f:75:53:1b:26:78:
         9f:22:45:6a:c9:71:2f:97:5f:2a:25:99:19:f8:2b:3c:06:04:
         ea:79:a6:0f:e9:b5:b7:4f:aa:aa:f5:bf:8b:7f:e1:ef:f6:88:
         9d:53:fe:0b:f3:e0:7c:c4:3b:6c:af:db:70:5f:81:ae:e1:ef:
         f2:14:5c:45:dc:85:48:c4:a3:89:d7:36:88:d1:cd:63:69:be:
         c3:db:06:72:93:0a:ae:ef:20:c0:69:91:48:82:0e:93:93:1c:
         8b:1b:c0:40:bc:56:cc:af:25:43:cc:d2:55:93:f3:40:4b:70:
         73:a5:2c:51:12:ce:82:e5:ae:5f:51:48:b0:12:2c:cb:22:42:
         b8:d7:e7:a2:33:e9:63:bb:2a:aa:9f:4e:1c:bd:9e:b0:9c:9b:
         d4:76:69:f3:39:25:da:93:76:2d:81:77:8d:43:25:f1:2d:9f:
         d5:c6:fd:4a:ba:74:8a:2e:16:66:b9:2c:85:eb:bd:30:42:53:
         ec:68:83:a4:63:20:47:44:5c:20:ab:b1:06:0c:a4:80:c4:48:
         ce:cb:52:d4:23:0b:fd:71:10:1c:0d:39:ef:6c:7c:22:f0:64:
         e9:21:ca:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 17:58:29 2026 by rpki-client