Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/0f4f0abc-f0b3-39a3-a829-ee39d4a4c5b0.roa
File:                     0f4f0abc-f0b3-39a3-a829-ee39d4a4c5b0.roa (raw, json)
Hash identifier:          90h5JmLItlQjh8w2QWHYLhgCu4ft385UqomZlrr4XPc=
Subject key identifier:   15:E6:91:9A:FE:95:99:71:12:59:37:E4:AD:F0:41:48:AC:0D:F1:01
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F4328584DAE4FD068EC0AF663EC733EF0
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/0f4f0abc-f0b3-39a3-a829-ee39d4a4c5b0.roa
Signing time:             Thu 30 Apr 2026 18:33:03 +0000
ROA not before:           Thu 30 Apr 2026 18:33:03 +0000
ROA not after:            Wed 29 Jul 2026 18:33:03 +0000
asID:                     44559
IP address blocks:        166.1.212.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 05 May 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:ae:4f:d0:68:ec:0a:f6:63:ec:73:3e:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Apr 30 18:33:03 2026 GMT
            Not After : Jul 29 18:33:03 2026 GMT
        Subject: CN=8cebdcdf-9559-4db6-895e-45856dd9225d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:27:4f:21:f8:13:2f:5f:5d:8f:8c:3b:fb:d1:
                    66:78:27:9f:6b:95:a2:19:0a:fd:76:45:b8:cd:84:
                    c6:8f:b1:35:48:ee:fc:2c:e3:05:a5:f5:ff:2a:95:
                    30:cf:6e:b7:2e:68:df:14:b1:d7:01:b5:b3:fa:b8:
                    74:c0:ab:97:38:9d:0c:19:63:01:17:70:69:97:0f:
                    59:b2:b6:a4:17:d1:31:1c:eb:8c:6e:5e:a3:1f:1b:
                    5f:72:86:a6:19:ff:99:b8:47:2f:ee:b9:ba:51:b3:
                    df:67:57:df:26:e9:f6:f9:bf:46:2f:94:ce:8a:fe:
                    1a:da:50:0e:16:6a:9d:9f:e8:fc:ab:30:4c:d8:53:
                    4b:be:e9:4a:e0:36:51:95:b3:f6:27:a2:f5:ff:93:
                    98:ce:61:0f:7d:fd:f3:78:57:ef:d7:cc:af:a6:97:
                    c4:c2:11:d5:0e:a6:d1:bc:41:a9:a3:3d:af:d4:dc:
                    73:fd:60:dd:54:94:23:b9:e5:c6:a8:2f:8e:5e:b4:
                    7f:de:1f:45:fd:34:28:ed:45:5a:3a:77:e5:c8:a2:
                    fc:30:bc:51:0c:36:57:ec:76:76:16:fd:35:e8:4b:
                    40:a5:d1:d1:0d:fe:1a:5a:a4:31:ed:d3:c0:ba:ae:
                    d8:d8:93:9e:a2:b4:15:23:a4:97:3c:c6:94:a6:43:
                    01:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:E6:91:9A:FE:95:99:71:12:59:37:E4:AD:F0:41:48:AC:0D:F1:01
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/0f4f0abc-f0b3-39a3-a829-ee39d4a4c5b0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.1.212.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7b:1b:b3:da:ef:20:57:be:f4:18:51:3d:0c:47:8b:4a:b6:22:
         be:f2:99:12:03:61:e9:b4:2c:df:e4:cf:b7:1a:2f:4f:05:ef:
         47:3e:bf:53:a8:1a:e8:d5:04:0f:f8:62:40:f2:b9:1d:a7:42:
         69:8d:0b:d4:bf:0e:69:40:ef:d9:40:03:cd:0e:c5:35:00:99:
         fa:68:ad:56:7a:e1:4b:2c:79:84:a2:e5:48:30:2c:0d:2e:83:
         d4:5a:ae:04:88:ba:6f:43:12:5a:b7:95:05:31:ae:7b:66:93:
         2f:f5:51:4d:5b:1d:ce:11:4a:80:d1:f1:81:71:10:55:69:27:
         c9:b0:fd:2a:46:36:1a:6d:6c:e6:ca:3a:33:14:0f:b0:70:3c:
         85:ec:96:ec:9d:45:76:96:f4:5e:42:ac:58:32:80:05:3c:c8:
         eb:8f:e3:ab:4c:65:00:d9:8f:c0:e6:58:c5:64:81:08:9e:f9:
         62:e8:d1:e1:50:54:ff:d8:6b:f9:56:51:62:e0:10:56:86:7f:
         83:79:33:09:0a:3a:88:7b:34:c9:b1:ca:4d:0a:63:8f:48:51:
         2d:82:64:98:82:be:5b:df:f4:a0:c2:d1:65:88:10:81:27:fc:
         2f:ea:28:79:aa:4f:22:91:52:6c:9f:e0:80:e3:ad:15:61:8c:
         a8:d3:eb:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 2 23:09:59 2026 by rpki-client