Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/3e27d996-6b6c-3a80-b115-2ca54fd5cc35.roa
File:                     3e27d996-6b6c-3a80-b115-2ca54fd5cc35.roa (raw, json)
Hash identifier:          WBcwgyTI4Pi7v8Z07HuQuikTOlSMatdQbN22G4zImUY=
Subject key identifier:   8E:B8:DF:3F:A8:D0:F2:E5:D9:11:F5:2E:63:E7:53:BA:60:40:2E:C9
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F4328584F57682D62C8CDD7009E8AE380
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/3e27d996-6b6c-3a80-b115-2ca54fd5cc35.roa
Signing time:             Wed 30 Sep 2026 01:00:12 +0000
ROA not before:           Wed 30 Sep 2026 01:00:12 +0000
ROA not after:            Tue 29 Dec 2026 02:00:12 +0000
asID:                     263812
IP address blocks:        166.0.139.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 07 Nov 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:57:68:2d:62:c8:cd:d7:00:9e:8a:e3:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Sep 30 01:00:12 2026 GMT
            Not After : Dec 29 02:00:12 2026 GMT
        Subject: CN=6dd218c1-e19d-4f30-982a-3a9c265186b9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:6d:11:b2:90:d5:55:4b:25:bd:a8:26:e4:57:
                    9e:2e:53:0a:44:66:d6:93:99:20:c6:15:cd:cb:01:
                    76:71:3d:80:ac:d8:db:0b:a3:67:c6:84:59:22:78:
                    2a:bc:8e:2a:d4:0d:ef:d8:81:52:09:e6:94:fe:1c:
                    1f:bc:65:94:9b:a2:e8:c9:0c:b5:04:d8:4c:64:c4:
                    30:c2:9f:ba:2f:fb:3d:ad:2c:ba:ef:2c:80:b0:b0:
                    2e:b1:81:5f:e0:99:b2:4d:ae:c0:2f:9c:bf:93:5c:
                    6a:aa:6e:36:b0:b4:c2:24:4c:53:6b:b2:6c:f5:36:
                    18:80:8f:e1:82:8c:92:3c:b6:80:c1:17:65:65:d3:
                    54:91:8d:d5:85:57:25:04:d2:dd:5f:62:a5:96:d0:
                    68:ff:37:19:1d:41:a9:3b:2e:1d:85:b4:50:1e:38:
                    52:f2:75:f6:20:9f:dd:c5:c0:7b:25:95:40:e8:c3:
                    7d:77:27:b8:3b:e0:f5:b1:70:45:aa:3f:3c:eb:1b:
                    a3:82:3d:e0:fa:51:9e:a7:b4:62:1b:ff:77:17:74:
                    91:78:bd:a4:4e:33:9c:8f:d5:36:4a:a4:77:e6:27:
                    e0:b1:1b:5a:83:ab:e3:cf:f6:c6:c7:a7:24:1b:7e:
                    69:2b:f3:a0:21:e2:6b:eb:67:df:46:49:c6:5c:90:
                    67:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:B8:DF:3F:A8:D0:F2:E5:D9:11:F5:2E:63:E7:53:BA:60:40:2E:C9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/3e27d996-6b6c-3a80-b115-2ca54fd5cc35.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.0.139.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         14:13:c1:10:48:db:ed:22:59:eb:03:a0:a2:9d:4c:3c:e7:2f:
         a2:6e:6e:73:65:af:79:69:8c:ff:24:80:a6:b4:25:48:d4:d6:
         03:de:df:7c:b2:15:c0:47:16:cc:51:e5:1e:be:28:1d:21:d0:
         6f:99:32:d3:1c:44:3d:38:9b:94:c2:e9:93:3a:97:ee:3d:8e:
         e2:4e:55:0e:d2:60:2a:47:8c:10:b4:0b:79:97:6d:18:06:ad:
         e7:75:6f:58:04:89:b1:a2:35:83:c7:1a:c3:48:fc:09:ab:ff:
         73:02:3e:39:d6:17:5a:66:81:e4:ea:e3:51:51:29:e7:9a:e2:
         78:2d:bb:9a:a1:90:3c:72:bb:ae:fd:b8:95:b9:0d:b8:a5:72:
         53:29:75:45:3a:41:17:4e:6c:a1:87:7d:ad:04:c1:6f:df:3c:
         83:28:05:f1:64:6f:40:e3:bc:8a:40:9f:0e:41:58:e1:d4:22:
         8b:32:d4:18:55:2e:f1:e7:dc:4b:40:3a:f6:5e:db:ea:cb:48:
         7e:e1:5a:31:35:e5:6f:1e:f7:51:99:9c:34:37:46:f1:64:1f:
         a3:fb:6a:8a:55:84:44:4a:c4:ad:12:6d:e6:55:91:b5:7a:82:
         76:38:2f:f1:47:05:d5:04:eb:b9:06:1c:5d:f9:b1:e6:ce:6b:
         4c:99:ac:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 4 20:38:56 2026 by rpki-client