Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f/4e7576ac-adb9-3cf2-aa74-de5b4bb54df0.roa
File:                     4e7576ac-adb9-3cf2-aa74-de5b4bb54df0.roa (raw, json)
Hash identifier:          XQaj9Eb0NerObVPYUb+ULbJWjB3WnCITGN9kILiUh/o=
Subject key identifier:   A9:DE:5F:33:5D:5F:EE:81:24:BF:97:EE:FE:9A:32:24:6D:78:CF:E2
Certificate issuer:       /CN=3aba2284-9d24-4b6f-bc96-aa407d7a426f
Certificate serial:       010D0C9F4328584EB9AC4FBE2AA532914D405F00
Authority key identifier: B5:BE:EE:25:A1:3A:DA:9E:A2:53:19:6E:15:87:43:3E:67:0B:53:58
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f/4e7576ac-adb9-3cf2-aa74-de5b4bb54df0.roa
Signing time:             Tue 04 Aug 2026 13:00:12 +0000
ROA not before:           Tue 04 Aug 2026 13:00:12 +0000
ROA not after:            Mon 02 Nov 2026 14:00:12 +0000
asID:                     16740
IP address blocks:        66.39.221.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f/3aba2284-9d24-4b6f-bc96-aa407d7a426f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f/3aba2284-9d24-4b6f-bc96-aa407d7a426f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Aug 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:b9:ac:4f:be:2a:a5:32:91:4d:40:5f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3aba2284-9d24-4b6f-bc96-aa407d7a426f
        Validity
            Not Before: Aug  4 13:00:12 2026 GMT
            Not After : Nov  2 14:00:12 2026 GMT
        Subject: CN=aa2c8a6f-e677-4fa5-ac34-afef2b8e5c5b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:7d:fa:0f:17:a1:b7:4d:28:1d:1a:e1:b8:49:
                    fd:7c:6d:b8:32:6c:ee:e5:f8:f7:48:3b:01:35:4c:
                    de:e8:e8:e2:8a:6f:77:42:9d:ad:15:96:b7:fc:d5:
                    89:9f:be:ae:69:62:47:2d:07:51:11:ac:a4:f0:2c:
                    7a:f3:fe:c8:fe:2f:f1:da:83:bf:ef:77:9c:d0:5d:
                    a6:79:c1:fd:5e:a6:c3:ee:a9:4e:77:cf:4c:cc:1d:
                    b6:d9:81:68:85:ba:57:f6:fb:24:2c:53:3e:31:b3:
                    f2:8e:ad:aa:2e:94:14:6c:ca:e7:17:8d:55:79:bb:
                    40:f0:b7:81:78:d0:da:14:5c:3e:74:fc:4b:9c:3f:
                    71:7f:9d:20:b1:73:75:7f:d0:73:f5:8b:e8:47:fd:
                    75:e0:cf:d2:ee:37:1b:20:db:fd:78:0e:b9:ee:fb:
                    00:5b:cc:aa:7b:b2:ba:9f:3d:c6:c9:96:c7:92:da:
                    0b:a6:ab:fd:a1:92:3b:96:c0:70:00:17:d2:7c:83:
                    ed:7d:e7:96:30:3c:82:f1:15:f3:b1:75:ec:ee:49:
                    c7:2e:7f:63:b4:f0:7c:9e:df:18:89:55:96:56:16:
                    5a:05:97:f2:22:f0:a9:60:13:dd:27:3e:87:3e:a7:
                    0e:7e:ae:8c:02:fc:f7:7b:83:b8:e6:b4:a6:ce:96:
                    2c:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:DE:5F:33:5D:5F:EE:81:24:BF:97:EE:FE:9A:32:24:6D:78:CF:E2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f/4e7576ac-adb9-3cf2-aa74-de5b4bb54df0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f/3aba2284-9d24-4b6f-bc96-aa407d7a426f.crl

            X509v3 Authority Key Identifier:
                keyid:B5:BE:EE:25:A1:3A:DA:9E:A2:53:19:6E:15:87:43:3E:67:0B:53:58

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.39.221.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         80:97:da:75:3b:42:a9:e2:93:40:5d:89:f8:50:2b:35:81:db:
         87:c4:3e:13:8a:d2:b3:dd:27:0b:16:96:ea:50:ad:83:c0:7b:
         2d:92:5b:02:78:7e:93:07:ee:fe:75:e6:ab:82:cb:68:07:a1:
         9b:a4:61:68:fb:84:b9:98:ff:4d:8a:dc:4c:ec:19:d3:48:41:
         a1:ec:3d:12:48:f5:f4:3c:dc:f1:5d:d4:f5:c8:14:b5:82:2d:
         95:57:e5:30:d8:57:5a:44:83:11:fd:b4:32:e8:8d:3a:05:7d:
         9e:c4:cf:0c:8a:f5:45:34:45:1f:87:b3:8b:38:7b:35:f8:db:
         6c:47:15:df:82:d3:db:c4:5e:88:1e:15:4c:48:93:3b:7c:2b:
         4a:e6:43:b1:70:fd:ea:8a:ec:76:9c:f1:de:69:fc:cb:0b:ec:
         33:d9:df:4d:6b:09:73:4a:da:3f:0a:8f:50:f3:5e:c2:21:b2:
         23:cc:0a:01:9e:0b:ce:cd:47:0e:ea:b4:f1:f4:ed:b9:fe:f0:
         15:74:e6:8e:29:7a:19:88:af:d8:a1:d4:c4:b6:b7:a6:89:ff:
         a8:50:11:f5:31:62:cc:a0:f3:10:21:63:18:58:45:9c:4d:de:
         18:cd:c7:ed:4b:ce:b1:46:7c:92:7f:a0:d0:e2:77:76:b4:19:
         c3:01:9a:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 04:41:39 2026 by rpki-client