Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/010fc9e1-b807-31cc-8993-e61e138caeff.roa
File:                     010fc9e1-b807-31cc-8993-e61e138caeff.roa (raw, json)
Hash identifier:          COhJzXx/zCpd63G55bG2R0sJMOea0P0JHCzbW53R6Uw=
Subject key identifier:   69:40:ED:47:53:94:6C:C6:CC:B0:39:CD:F4:AF:A2:70:C5:EE:26:A0
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F4328584E5900BA9D178AB18EEB0A2610
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/010fc9e1-b807-31cc-8993-e61e138caeff.roa
Signing time:             Tue 30 Jun 2026 21:56:55 +0000
ROA not before:           Tue 30 Jun 2026 21:56:55 +0000
ROA not after:            Mon 28 Sep 2026 21:56:55 +0000
asID:                     401152
IP address blocks:        166.0.122.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 02 Jul 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:59:00:ba:9d:17:8a:b1:8e:eb:0a:26:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Jun 30 21:56:55 2026 GMT
            Not After : Sep 28 21:56:55 2026 GMT
        Subject: CN=96100282-02cd-4bb9-b93c-d08a5358cfe7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:57:4c:a4:c8:a0:a6:7c:fa:e1:18:ce:8c:14:
                    8e:47:bb:6a:17:e9:d9:a0:bf:c8:32:89:dd:9c:13:
                    ba:c4:14:19:13:c6:4c:60:c0:be:ca:ea:16:f1:23:
                    ea:70:91:21:5c:34:46:d4:27:df:9b:fd:2b:2b:2a:
                    9d:2e:a9:61:a6:4f:a1:f3:0a:e8:67:db:b4:d8:79:
                    43:cc:da:67:06:3c:45:95:2f:76:96:5b:5d:6b:4f:
                    d8:48:9c:ef:02:18:b5:90:ec:72:ab:82:65:44:d6:
                    11:9e:42:f5:60:db:df:0d:7a:91:98:83:00:cf:95:
                    b0:d6:b7:73:f9:83:f2:c9:59:a9:5b:20:f3:ba:f8:
                    d3:04:b6:c1:c6:be:4e:71:4e:5d:bf:08:e3:f1:e8:
                    96:34:c8:d8:3d:c9:21:f7:22:16:08:ab:79:db:06:
                    2d:c8:e4:96:70:5c:88:5e:b1:02:f3:fb:7a:f3:ed:
                    99:05:4c:a3:01:c8:23:cf:93:95:6b:41:01:2c:5d:
                    99:6c:9a:cc:2c:69:d7:f6:81:38:98:9c:a9:4c:d7:
                    98:fe:b4:04:ac:2c:a0:30:86:d4:64:14:db:4a:ae:
                    3b:72:46:b4:9a:c2:d8:ef:15:86:28:8d:39:33:d7:
                    9f:d4:0b:2d:8c:dd:f2:ab:2b:15:06:32:c3:ad:06:
                    1b:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:40:ED:47:53:94:6C:C6:CC:B0:39:CD:F4:AF:A2:70:C5:EE:26:A0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/010fc9e1-b807-31cc-8993-e61e138caeff.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.0.122.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         37:01:b0:0d:02:0a:89:ea:a5:c1:19:b4:1f:ed:a8:51:61:9a:
         61:78:eb:82:e4:bc:57:e8:ca:66:34:42:ec:ed:07:73:ec:ff:
         38:e2:ed:56:6c:b0:3f:95:7e:0b:9a:23:a4:72:99:41:4a:62:
         9c:0d:78:c7:cd:27:0c:d0:07:d0:83:43:fa:73:61:35:c0:3f:
         93:1e:94:b7:7b:6d:aa:c9:1d:d1:c9:8c:11:6c:f3:1a:cb:45:
         87:07:d4:8b:e6:1e:57:0d:13:60:42:82:5e:0e:36:98:68:ad:
         a6:87:68:7d:68:e7:ef:5a:c4:15:75:55:5b:02:64:58:b2:1f:
         db:82:24:c2:d1:bd:0e:d1:de:08:16:64:ac:26:bd:34:95:d2:
         3f:76:49:07:56:98:2d:10:52:15:b2:02:07:d9:d6:63:ce:59:
         03:81:59:0d:be:3c:da:89:f0:f3:b4:64:02:4d:fd:a7:ac:d4:
         7f:d4:d7:e8:2f:4c:1c:2e:c8:9f:0c:7c:44:e4:41:3a:92:dd:
         4b:ae:7e:d2:c0:f6:34:17:e5:43:b6:a9:ee:a2:33:f0:ed:fd:
         1f:6e:81:4b:4d:f8:4f:9a:91:ea:0f:84:dc:a3:29:a8:59:ef:
         64:a9:77:b2:5d:60:ea:93:89:51:d0:3c:bb:da:8b:d0:5b:cc:
         ec:f4:5e:35
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5ZALqdF4qxjusKJhAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjZkZWEyYTUtODM3ZC00NmQ4LThmOGUtOTQ0N2VjZTIw
YzA5MB4XDTI2MDYzMDIxNTY1NVoXDTI2MDkyODIxNTY1NVowLzEtMCsGA1UEAxMk
OTYxMDAyODItMDJjZC00YmI5LWI5M2MtZDA4YTUzNThjZmU3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlVdMpMigpnz64RjOjBSOR7tqF+nZoL/IMond
nBO6xBQZE8ZMYMC+yuoW8SPqcJEhXDRG1Cffm/0rKyqdLqlhpk+h8wroZ9u02HlD
zNpnBjxFlS92lltda0/YSJzvAhi1kOxyq4JlRNYRnkL1YNvfDXqRmIMAz5Ww1rdz
+YPyyVmpWyDzuvjTBLbBxr5OcU5dvwjj8eiWNMjYPckh9yIWCKt52wYtyOSWcFyI
XrEC8/t68+2ZBUyjAcgjz5OVa0EBLF2ZbJrMLGnX9oE4mJypTNeY/rQErCygMIbU
ZBTbSq47cka0msLY7xWGKI05M9ef1AstjN3yqysVBjLDrQYbdwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGlA7UdTlGzGzLA5zfSvonDF7iagMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRl
YTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3ZWNlMjBjMDkvMDEwZmM5ZTEtYjgwNy0z
MWNjLTg5OTMtZTYxZTEzOGNhZWZmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjZkZWEyYTUtODM3ZC00NmQ4LThm
OGUtOTQ0N2VjZTIwYzA5LzY2ZGVhMmE1LTgzN2QtNDZkOC04ZjhlLTk0NDdlY2Uy
MGMwOS5jcmwwHwYDVR0jBBgwFoAUw4ati/QZSzWUJJuQup2AEcIIcckwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRlYTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3
ZWNlMjBjMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQApgB6MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADcBsA0CConqpcEZtB/tqFFhmmF464LkvFfoymY0QuztB3Ps/zji7VZs
sD+VfguaI6RymUFKYpwNeMfNJwzQB9CDQ/pzYTXAP5MelLd7barJHdHJjBFs8xrL
RYcH1IvmHlcNE2BCgl4ONphoraaHaH1o5+9axBV1VVsCZFiyH9uCJMLRvQ7R3ggW
ZKwmvTSV0j92SQdWmC0QUhWyAgfZ1mPOWQOBWQ2+PNqJ8PO0ZAJN/aes1H/U1+gv
TBwuyJ8MfETkQTqS3UuuftLA9jQX5UO2qe6iM/Dt/R9ugUtN+E+akeoPhNyjKahZ
72Spd7JdYOqTiVHQPLvai9BbzOz0XjU=
-----END CERTIFICATE-----
Generated at Wed Jul 1 01:34:32 2026 by rpki-client