Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/57038aae-0855-31bf-abab-6d95d78129de.roa
File:                     57038aae-0855-31bf-abab-6d95d78129de.roa (raw, json)
Hash identifier:          sdRKTyyynJOEOmohKHPwBxdVgQqeF09w20v+shUCo14=
Subject key identifier:   33:28:87:20:29:A2:DD:88:81:52:22:0E:48:1B:63:C4:CC:76:A3:89
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F4328584D143D0A5C3D87494A83200080
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/57038aae-0855-31bf-abab-6d95d78129de.roa
Signing time:             Fri 06 Mar 2026 14:00:40 +0000
ROA not before:           Fri 06 Mar 2026 14:00:40 +0000
ROA not after:            Thu 04 Jun 2026 13:00:40 +0000
asID:                     5511
IP address blocks:        166.0.84.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 12 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:14:3d:0a:5c:3d:87:49:4a:83:20:00:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Mar  6 14:00:40 2026 GMT
            Not After : Jun  4 13:00:40 2026 GMT
        Subject: CN=d497f661-caff-4f9d-a6ad-bf658dba752b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:b9:2b:2f:86:b1:cd:8e:d7:f9:2d:f5:93:1c:
                    9a:20:63:b1:ca:f1:74:39:24:2a:29:fb:c8:0a:d5:
                    b0:93:49:e0:66:f6:3e:63:6d:db:51:0b:cf:8b:44:
                    37:9d:4c:19:d6:09:d4:b8:5c:36:d5:a5:8e:a2:12:
                    31:3a:90:59:3d:a9:1b:95:c2:54:08:25:08:0a:67:
                    a9:d5:8c:49:45:0b:fd:c3:74:99:c9:60:f0:0a:49:
                    57:24:11:5a:f5:56:36:2b:79:91:76:32:b5:3b:d1:
                    bf:c5:94:eb:c0:78:43:eb:d6:d7:31:ea:c9:78:7b:
                    27:6f:01:18:f5:44:7a:61:c4:34:af:88:07:b4:d8:
                    f9:7b:c0:98:20:b6:42:b4:a0:b0:80:cf:8a:64:e7:
                    3b:89:7d:de:4d:56:0a:51:d3:66:71:55:c3:9f:3a:
                    52:4f:11:fd:70:9a:74:a8:6b:52:fa:2a:b8:88:0c:
                    9b:70:2e:2f:46:0a:1c:28:ce:fc:23:c3:f0:40:52:
                    6d:cb:7a:ae:05:3b:90:22:00:1f:23:cd:4f:98:06:
                    82:93:46:85:40:53:69:0a:a0:04:64:7e:9f:da:86:
                    2e:69:0d:33:c5:39:d4:80:24:07:b1:3b:83:46:3b:
                    ff:a6:75:3b:20:94:82:af:1a:c8:b8:36:6e:90:bd:
                    b4:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:28:87:20:29:A2:DD:88:81:52:22:0E:48:1B:63:C4:CC:76:A3:89
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/57038aae-0855-31bf-abab-6d95d78129de.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.0.84.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         95:2c:30:f1:99:cf:e4:fb:7b:05:d8:54:d6:ae:1b:68:89:99:
         6a:05:b6:84:51:aa:58:ff:d0:17:98:dd:5f:9f:ab:e5:bc:bc:
         2c:f3:b2:bf:ed:92:a1:d5:e9:d5:6c:9e:69:89:a7:71:01:3b:
         82:ed:67:60:af:8f:ee:cf:b2:b0:e5:b0:39:48:01:c6:af:eb:
         47:fa:50:b7:5e:25:52:a6:4f:3d:72:52:db:f7:df:a6:6b:b2:
         a2:9d:7e:92:e1:87:31:8b:a7:f0:dd:4d:aa:99:df:1e:5a:99:
         28:14:ef:ae:8c:23:bd:dc:d3:69:be:2f:3c:09:0a:31:d1:ae:
         c5:95:27:22:5f:b6:35:39:88:01:45:ac:62:9c:41:b9:41:03:
         19:53:f1:38:97:ad:5e:9e:d8:ae:92:dc:6f:2f:79:ee:ef:f2:
         6a:99:13:45:5f:9d:9a:7f:64:5e:e0:f6:5c:78:b7:fc:8a:35:
         7e:5c:9a:67:96:db:4f:21:32:5c:f2:10:18:c3:10:b0:f4:b6:
         cb:c6:8a:fd:ee:24:60:40:8a:93:d2:d8:4c:4f:fa:72:d2:72:
         d7:73:09:00:07:86:87:7a:81:6c:54:15:6e:e5:ea:fa:cb:06:
         07:8b:ad:4a:47:af:3d:c9:2a:7a:b6:91:70:31:fb:ac:35:4a:
         89:1c:c8:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 10 11:26:10 2026 by rpki-client