Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/2c4ca209-22a9-3554-b674-81a9094629b1.roa
File:                     2c4ca209-22a9-3554-b674-81a9094629b1.roa (raw, json)
Hash identifier:          zvbTFEe9EbaspgZFk4V/g9YoT1xSm0OtlsWzkBxidsI=
Subject key identifier:   BC:BE:D4:C8:56:0D:70:98:8A:29:A4:03:2C:F6:45:27:4F:8F:94:49
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F4328584E6ECED6B1166F1BE14DDDC600
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/2c4ca209-22a9-3554-b674-81a9094629b1.roa
Signing time:             Wed 08 Jul 2026 17:24:11 +0000
ROA not before:           Wed 08 Jul 2026 17:24:11 +0000
ROA not after:            Tue 06 Oct 2026 17:24:11 +0000
asID:                     401152
IP address blocks:        166.1.65.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 10 Jul 2026 08:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:6e:ce:d6:b1:16:6f:1b:e1:4d:dd:c6:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Jul  8 17:24:11 2026 GMT
            Not After : Oct  6 17:24:11 2026 GMT
        Subject: CN=c8f7ace5-aec0-49da-bf16-ed0e36a97e71
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:87:04:4b:97:2d:48:29:dd:3d:be:d8:ea:2b:
                    e7:e0:5b:c8:32:a1:f8:4b:e9:60:93:84:36:f9:d2:
                    b3:5b:c6:95:ee:09:ec:72:61:86:56:6d:54:d9:fc:
                    e4:43:a3:e4:75:f6:a7:27:3e:b6:00:72:44:91:e0:
                    5a:47:34:8a:14:1e:a1:36:68:d9:f9:b7:1f:12:2b:
                    23:12:2d:49:a6:8e:7a:fa:10:95:b0:64:2c:20:a9:
                    1a:3e:f0:4d:b2:a0:da:07:c0:16:bc:c9:bd:7a:81:
                    8a:70:49:c8:72:cc:e9:f7:1b:83:12:3b:81:38:9d:
                    49:8a:ca:dc:db:b0:aa:0f:9f:f8:fd:3d:a5:86:83:
                    ee:89:60:ba:9b:d8:aa:4c:97:c3:56:8f:87:27:8b:
                    b8:7a:77:91:cd:39:ba:d9:80:41:bb:43:0f:3e:01:
                    46:f1:2c:fb:39:5e:6c:c6:cf:5c:22:ae:60:0b:f0:
                    01:fa:41:83:07:59:63:01:1d:39:54:2a:6d:89:56:
                    94:47:37:00:a6:65:ba:57:a6:ea:17:20:76:99:8f:
                    7e:aa:a6:79:42:83:10:0d:76:34:8a:70:69:4d:6f:
                    c4:39:8d:05:83:7b:70:18:c3:7b:b3:f1:f3:e4:ca:
                    ab:b0:7a:ff:e7:49:96:fa:3e:31:d1:b2:5d:5c:fb:
                    19:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:BE:D4:C8:56:0D:70:98:8A:29:A4:03:2C:F6:45:27:4F:8F:94:49
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/2c4ca209-22a9-3554-b674-81a9094629b1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.1.65.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4a:fa:69:f8:63:53:95:59:85:d1:33:27:c2:8a:83:7d:1c:4b:
         33:6b:92:d7:01:b6:b7:62:e9:1d:97:ae:ad:8b:5a:c9:a1:3f:
         3b:e4:45:d0:3c:64:7c:c9:c5:7f:df:2f:c9:04:d4:ff:09:9b:
         3b:af:ce:dc:2d:39:62:50:2a:e9:7a:e8:a8:a2:e2:fb:0a:7b:
         df:5f:2d:77:19:7b:03:86:ef:a7:62:cd:26:3d:4c:37:48:33:
         cb:f8:23:4b:ff:dc:c3:63:fc:31:f0:25:d8:e7:85:5e:26:9c:
         c6:eb:67:ca:ed:48:89:5d:d8:bb:0d:20:5f:9f:54:0e:f4:95:
         f0:da:a1:ee:50:11:16:4e:f1:12:b6:f5:a3:8b:6f:33:eb:fe:
         58:14:75:09:a6:19:a4:77:5f:75:9d:20:08:52:ee:eb:87:6a:
         b6:44:03:5e:54:4b:23:b9:15:c0:03:3a:00:89:be:00:5d:b5:
         36:3b:61:8f:c0:f9:9e:5f:e9:36:94:8e:7f:4c:e6:e2:e1:ac:
         ff:00:8b:65:c0:40:b7:4b:0e:08:e5:7d:7d:1f:8a:f3:92:6f:
         9e:70:39:b4:19:0e:6c:a6:62:26:14:8b:7f:2c:01:d7:f4:5f:
         92:7c:66:ae:fc:4a:17:13:e5:00:1c:fc:ca:c1:68:14:51:03:
         86:bd:51:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 9 08:59:31 2026 by rpki-client