Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/54454855-b74f-31c2-8d07-9a5067d457b1.roa
File:                     54454855-b74f-31c2-8d07-9a5067d457b1.roa (raw, json)
Hash identifier:          2ntFxKfA5Rji57iZIqfDRBW7QUdQFHG597qJWZEI8t8=
Subject key identifier:   1B:D9:FB:D6:AC:64:E7:83:33:78:9B:9C:5E:92:4B:C3:E4:8B:44:62
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F4328584E31CF1DA422646CF510F36700
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/54454855-b74f-31c2-8d07-9a5067d457b1.roa
Signing time:             Tue 16 Jun 2026 21:00:12 +0000
ROA not before:           Tue 16 Jun 2026 21:00:12 +0000
ROA not after:            Mon 14 Sep 2026 21:00:12 +0000
asID:                     58061
IP address blocks:        166.1.216.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 18 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:31:cf:1d:a4:22:64:6c:f5:10:f3:67:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Jun 16 21:00:12 2026 GMT
            Not After : Sep 14 21:00:12 2026 GMT
        Subject: CN=3a1ecbda-4df0-4fe9-958c-67f5bc1f566d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:ec:f4:fd:8c:f9:fc:48:37:fe:6c:c0:d2:11:
                    8c:17:9f:45:73:d2:38:d6:48:9e:da:84:14:9e:20:
                    2c:37:b2:53:f4:aa:7f:a9:76:20:8d:d9:e3:f4:0e:
                    94:e9:3c:db:12:40:f7:42:4a:d1:9e:d5:6c:6d:20:
                    0d:94:7c:44:6b:01:28:99:8e:56:5b:7c:3c:eb:be:
                    2a:87:60:33:db:f7:d8:c1:10:4f:af:31:74:0f:fa:
                    fe:4d:69:04:39:72:15:e6:01:7d:04:f8:17:0a:43:
                    08:83:32:1f:87:69:6c:2b:63:9d:da:75:e3:b2:51:
                    0b:b9:a6:1d:bc:9d:75:36:a0:ac:21:08:50:dd:63:
                    45:f7:a2:a9:8f:6e:03:76:77:04:ee:6d:aa:67:78:
                    ee:4f:2c:ab:6e:4b:ea:de:63:e9:c2:b4:ae:af:39:
                    2b:22:52:bd:c5:a7:87:29:84:bb:8a:4c:0e:82:1c:
                    42:a0:9a:39:2c:a8:6f:e7:b6:90:f2:32:32:d0:fb:
                    fb:08:64:b5:38:f0:aa:52:23:31:e4:bf:45:9b:77:
                    58:0a:1d:6a:da:79:1f:08:3c:c7:04:ec:fb:68:18:
                    55:31:52:de:63:7a:94:e6:3d:7e:eb:0a:04:5e:58:
                    98:ca:c2:a9:db:5b:38:ac:90:0b:59:75:67:a0:71:
                    21:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:D9:FB:D6:AC:64:E7:83:33:78:9B:9C:5E:92:4B:C3:E4:8B:44:62
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/54454855-b74f-31c2-8d07-9a5067d457b1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.1.216.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a0:56:c5:0b:39:34:59:9b:2a:cd:96:43:1c:1b:ba:77:c7:9b:
         50:e1:65:6d:b9:ff:21:42:7a:1a:4c:8a:bc:c9:e9:1f:12:8a:
         df:20:cb:1d:7c:3a:7d:e9:7a:f7:63:78:c0:3a:4f:0f:68:12:
         38:e3:50:7a:e3:16:c4:3d:08:2a:13:5f:c1:e5:ed:da:b2:8d:
         93:1a:59:5c:bd:b9:75:4d:4a:03:b0:cc:d3:02:39:44:d0:6c:
         90:08:a9:27:7e:39:c1:22:73:24:3c:6c:1d:5b:26:1a:7c:e0:
         23:83:c6:8f:f8:fc:c9:50:15:88:a2:ea:f5:e4:0c:e2:b3:e4:
         72:5b:d7:bb:84:3d:7a:07:64:d8:0a:33:0e:f7:47:30:65:b7:
         72:a8:dc:52:a0:1c:13:ec:4f:da:69:ef:88:90:c7:3f:1d:8b:
         31:6d:5c:61:7b:fd:78:d3:2b:28:9e:cf:eb:50:09:83:30:0f:
         60:b9:9d:06:4c:c7:a4:0e:86:89:d1:f8:0e:10:9a:8c:b8:ae:
         db:3b:52:9e:00:1a:c6:0d:04:d5:ce:a4:d8:90:58:fe:9a:c8:
         42:62:71:37:14:1c:95:6f:62:b8:ff:0e:26:a2:71:2d:2a:87:
         6d:03:73:39:47:cc:f1:da:9a:a3:6f:5d:cb:3b:f3:4d:55:c2:
         92:52:43:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 14:54:03 2026 by rpki-client