Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/5e523311-2811-33ce-8cb8-865b360a678f.roa
File:                     5e523311-2811-33ce-8cb8-865b360a678f.roa (raw, json)
Hash identifier:          JUABAwPdaI4itGNMQniPpL6EcG0E/wGUjqrmTt9G06k=
Subject key identifier:   E5:32:6E:4A:00:69:06:C3:5A:E8:24:63:F4:C3:55:AD:A7:DE:6E:99
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F4328584EC63C792FCE75E4BD16742050
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/5e523311-2811-33ce-8cb8-865b360a678f.roa
Signing time:             Sun 09 Aug 2026 01:00:12 +0000
ROA not before:           Sun 09 Aug 2026 01:00:12 +0000
ROA not after:            Sat 07 Nov 2026 02:00:12 +0000
asID:                     11798
IP address blocks:        166.0.161.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 24 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:c6:3c:79:2f:ce:75:e4:bd:16:74:20:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Aug  9 01:00:12 2026 GMT
            Not After : Nov  7 02:00:12 2026 GMT
        Subject: CN=42190438-fde6-49d8-a8e2-e98236423057
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:9f:cb:09:95:93:22:9a:2c:b5:a6:f0:e5:0a:
                    fd:e4:8e:8d:3b:54:52:c8:44:2d:f4:61:5b:2a:ea:
                    de:2b:0b:c1:a8:71:bb:92:86:6b:08:cc:1b:10:a6:
                    2d:e1:fe:62:bd:0c:c4:35:bd:d1:b1:42:ac:04:bf:
                    98:f6:87:61:05:2c:5a:cc:83:7d:b5:41:2b:ac:f3:
                    e8:91:7f:c6:8c:d1:94:41:29:f3:c1:e7:ee:a8:3b:
                    30:cf:17:03:e2:26:33:cc:14:5f:98:91:3a:bb:af:
                    1c:03:d4:65:25:70:d4:49:e5:8b:92:0d:f9:78:54:
                    ab:c9:87:ce:10:9d:a1:9c:61:ba:b0:6d:5e:50:b8:
                    48:58:21:bf:82:5a:cf:e4:f2:ed:94:89:e5:c1:4c:
                    10:a2:65:9b:85:36:38:11:65:48:0d:ce:b3:00:9a:
                    49:73:29:24:4e:c4:74:f5:a4:9e:28:c7:f1:ff:9f:
                    c4:0d:7e:a1:b1:bc:22:97:74:85:13:9b:cd:69:a9:
                    a0:86:fc:e0:fd:3c:4b:4b:d5:ce:e7:38:a8:90:fc:
                    b6:79:3d:b3:ad:a2:f0:8b:62:73:5a:cb:c6:10:ed:
                    a0:c8:ba:e9:31:ba:17:87:83:89:bf:ef:bc:04:93:
                    fb:1a:a5:9b:da:b2:0f:25:a3:a7:2f:f3:9a:72:0a:
                    0b:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:32:6E:4A:00:69:06:C3:5A:E8:24:63:F4:C3:55:AD:A7:DE:6E:99
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/5e523311-2811-33ce-8cb8-865b360a678f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.0.161.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         54:f4:9c:fb:42:18:0c:e0:2b:75:e3:83:ee:d6:4a:89:3f:a2:
         ce:ac:58:25:45:b8:44:d6:ee:23:de:5a:87:f8:28:18:a5:81:
         9f:9a:5d:c4:58:8d:64:c2:dc:57:2b:de:b8:89:2d:29:a9:4e:
         76:36:38:29:92:a9:58:2f:6c:fe:8d:9b:fb:79:50:c0:e1:0b:
         56:02:a4:ed:98:d9:51:78:41:b3:4d:e6:f3:bd:31:47:64:c1:
         cc:4c:05:f2:2c:49:1e:45:d9:40:27:9b:85:bc:d3:4c:4f:71:
         ad:8b:b6:44:eb:9c:06:9e:2b:6a:a6:8f:6e:a1:2a:7c:62:b1:
         2a:bc:d5:28:50:98:19:84:c4:08:f5:19:12:8d:13:83:f9:4d:
         ab:37:38:78:ea:d5:59:d6:f2:a3:5c:4b:cb:33:48:6f:2d:8d:
         cd:f5:b5:50:8b:2a:08:cd:49:7d:c0:55:c5:f4:9a:97:45:46:
         48:73:3e:13:8f:68:4f:2b:a6:dc:6f:ef:2d:a6:42:69:cc:5b:
         f1:5c:8c:ae:5e:a3:0e:c2:9f:b4:66:a6:ca:c9:f2:07:05:99:
         b7:86:08:4f:03:57:0a:53:35:53:6c:10:52:6f:2f:18:44:3d:
         ba:27:c0:c7:43:9a:c7:1e:50:01:48:1a:89:95:06:3f:7b:8c:
         54:c8:f5:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 11:40:29 2026 by rpki-client