Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/3ba7f959-678f-370c-9ffa-93e67ba4f501.roa
File:                     3ba7f959-678f-370c-9ffa-93e67ba4f501.roa (raw, json)
Hash identifier:          orOzK9fusPEGOoKci6+eRLseWiJg2P9lOe99+lwvx9s=
Subject key identifier:   C2:8F:A2:44:54:A2:D1:B2:97:42:06:9C:E9:72:F1:5E:88:3D:B5:F7
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F4328584DABAF82D7D0DA715C977DAFC0
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/3ba7f959-678f-370c-9ffa-93e67ba4f501.roa
Signing time:             Wed 29 Apr 2026 19:58:26 +0000
ROA not before:           Wed 29 Apr 2026 19:58:26 +0000
ROA not after:            Tue 28 Jul 2026 19:58:26 +0000
asID:                     401152
IP address blocks:        166.1.232.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 05 May 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:ab:af:82:d7:d0:da:71:5c:97:7d:af:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Apr 29 19:58:26 2026 GMT
            Not After : Jul 28 19:58:26 2026 GMT
        Subject: CN=0668940d-1dff-4a21-bd6b-d0708a853ceb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:2d:15:6b:8a:c1:08:e9:af:bb:61:3d:3e:72:
                    01:96:d0:6f:42:c6:1b:12:7c:94:44:81:b1:d1:35:
                    12:a8:da:d8:83:80:18:62:2d:69:bb:34:88:d5:c9:
                    67:ad:06:27:f4:d0:51:f4:e5:17:fc:cd:a6:44:df:
                    55:ae:84:75:7e:f6:d4:ae:0e:00:31:4e:97:bf:91:
                    9e:34:c3:94:25:89:41:9e:3f:2b:50:42:83:b6:0c:
                    cf:f6:a0:9b:65:4f:db:41:fb:40:e7:8e:f1:b5:c2:
                    4a:19:bf:d2:a0:f8:a5:78:0d:2c:75:cb:03:3c:cf:
                    80:bc:17:b4:86:7c:62:d2:a7:76:77:e7:a0:90:be:
                    8f:ec:73:53:98:bb:26:d9:73:ae:3e:7a:a3:6f:aa:
                    b2:de:62:e7:b0:6d:5c:d4:b8:d5:a9:b4:6b:0d:3f:
                    44:43:d4:a8:4c:08:a3:c1:ef:7f:bd:b8:6f:7b:d3:
                    35:d9:ed:1a:80:db:8d:06:cf:b2:58:70:6f:ce:78:
                    a4:b6:bd:5b:3a:c8:67:2b:99:55:0c:85:60:34:28:
                    fd:55:ed:64:7a:3e:74:71:34:ff:53:3f:50:58:be:
                    5e:65:b4:e5:b6:c9:02:53:86:ee:e9:b9:0c:15:04:
                    e5:a4:30:62:24:ec:27:4c:81:2d:02:f7:40:13:0b:
                    91:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:8F:A2:44:54:A2:D1:B2:97:42:06:9C:E9:72:F1:5E:88:3D:B5:F7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/3ba7f959-678f-370c-9ffa-93e67ba4f501.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.1.232.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         25:55:41:92:c5:9e:48:ab:ae:86:26:f5:9a:b2:c6:66:9b:c2:
         78:1f:55:56:ee:bd:ff:2c:c3:49:d6:16:cf:13:91:97:e0:b0:
         ee:e2:74:b8:b6:1b:1b:74:57:61:00:8d:a3:37:d2:b4:76:68:
         cd:c2:52:d3:9e:f1:07:23:78:e8:c9:fc:32:32:33:45:6a:ec:
         1f:26:47:5d:d4:a1:e4:c7:ef:95:4f:a9:c4:8b:f8:b0:dd:22:
         e5:16:18:ec:2e:d2:19:9b:11:dd:b8:f5:73:10:8c:c3:7a:9b:
         00:e0:d5:9a:ed:3f:bf:ad:65:15:a7:c7:f7:f5:73:6e:c9:82:
         9d:fd:44:a6:c8:5e:04:d7:76:53:a7:63:1e:2d:b2:f3:37:77:
         a3:69:dd:d7:16:ff:72:17:25:e4:5e:29:65:09:a9:63:fc:b8:
         d8:f6:85:7f:0d:af:00:5a:84:8e:0b:5f:0c:a6:b1:84:e5:10:
         8d:05:16:33:21:d4:2c:0c:34:95:08:8b:8a:d9:4f:36:9e:ab:
         7f:85:f0:cd:98:9a:c4:3f:58:f6:08:46:c3:8f:70:ad:bc:d0:
         fc:05:f7:49:8f:f6:4b:f2:a7:16:70:ba:b2:2f:f1:c8:de:00:
         20:d2:47:01:45:92:9d:fb:27:f1:fa:6b:4e:47:55:fd:c0:ae:
         0b:cf:d9:59
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2rr4LX0NpxXJd9r8AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjZkZWEyYTUtODM3ZC00NmQ4LThmOGUtOTQ0N2VjZTIw
YzA5MB4XDTI2MDQyOTE5NTgyNloXDTI2MDcyODE5NTgyNlowLzEtMCsGA1UEAxMk
MDY2ODk0MGQtMWRmZi00YTIxLWJkNmItZDA3MDhhODUzY2ViMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlC0Va4rBCOmvu2E9PnIBltBvQsYbEnyURIGx
0TUSqNrYg4AYYi1puzSI1clnrQYn9NBR9OUX/M2mRN9VroR1fvbUrg4AMU6Xv5Ge
NMOUJYlBnj8rUEKDtgzP9qCbZU/bQftA547xtcJKGb/SoPileA0sdcsDPM+AvBe0
hnxi0qd2d+egkL6P7HNTmLsm2XOuPnqjb6qy3mLnsG1c1LjVqbRrDT9EQ9SoTAij
we9/vbhve9M12e0agNuNBs+yWHBvzniktr1bOshnK5lVDIVgNCj9Ve1kej50cTT/
Uz9QWL5eZbTltskCU4bu6bkMFQTlpDBiJOwnTIEtAvdAEwuRpQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMKPokRUotGyl0IGnOly8V6IPbX3MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRl
YTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3ZWNlMjBjMDkvM2JhN2Y5NTktNjc4Zi0z
NzBjLTlmZmEtOTNlNjdiYTRmNTAxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjZkZWEyYTUtODM3ZC00NmQ4LThm
OGUtOTQ0N2VjZTIwYzA5LzY2ZGVhMmE1LTgzN2QtNDZkOC04ZjhlLTk0NDdlY2Uy
MGMwOS5jcmwwHwYDVR0jBBgwFoAUw4ati/QZSzWUJJuQup2AEcIIcckwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRlYTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3
ZWNlMjBjMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQApgHoMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACVVQZLFnkirroYm9ZqyxmabwngfVVbuvf8sw0nWFs8TkZfgsO7idLi2
Gxt0V2EAjaM30rR2aM3CUtOe8QcjeOjJ/DIyM0Vq7B8mR13UoeTH75VPqcSL+LDd
IuUWGOwu0hmbEd249XMQjMN6mwDg1ZrtP7+tZRWnx/f1c27Jgp39RKbIXgTXdlOn
Yx4tsvM3d6Np3dcW/3IXJeReKWUJqWP8uNj2hX8NrwBahI4LXwymsYTlEI0FFjMh
1CwMNJUIi4rZTzaeq3+F8M2YmsQ/WPYIRsOPcK280PwF90mP9kvypxZwurIv8cje
ACDSRwFFkp37J/H6a05HVf3ArgvP2Vk=
-----END CERTIFICATE-----
Generated at Sat May 2 23:09:12 2026 by rpki-client