Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/6343a1a9-e10e-3062-b184-56930c7355f8.roa
File:                     6343a1a9-e10e-3062-b184-56930c7355f8.roa (raw, json)
Hash identifier:          XCf8ytzfRbdCy4Y0MmEE5gclkMzsK1A1ZcKoLPtAGJM=
Subject key identifier:   83:06:D4:4A:89:8D:29:E1:A1:29:5D:AE:0F:ED:E8:6B:70:27:F5:D8
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F4328584CEB0ABDB461B499BE75B09B80
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/6343a1a9-e10e-3062-b184-56930c7355f8.roa
Signing time:             Thu 19 Feb 2026 19:51:14 +0000
ROA not before:           Thu 19 Feb 2026 19:51:14 +0000
ROA not after:            Wed 20 May 2026 18:51:14 +0000
asID:                     401152
IP address blocks:        166.0.126.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 26 Feb 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:eb:0a:bd:b4:61:b4:99:be:75:b0:9b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Feb 19 19:51:14 2026 GMT
            Not After : May 20 18:51:14 2026 GMT
        Subject: CN=8f7fc943-4e75-42ce-907e-2604c17974a8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:ac:c8:51:e4:9b:ea:03:60:c2:fd:c3:78:be:
                    2a:d6:08:a8:bf:5a:d8:93:90:84:e9:d1:16:82:59:
                    ce:d8:71:2e:0f:ae:91:29:6f:38:d0:09:27:87:df:
                    14:e1:2f:47:77:7c:80:ca:d5:13:b8:ce:49:10:81:
                    1a:1b:8e:89:57:c3:6f:d9:ea:33:d1:b0:70:dc:9a:
                    eb:dd:34:16:57:39:49:cd:ae:07:b7:07:82:e4:29:
                    b3:dd:4d:99:d0:05:05:0e:88:f9:1f:5f:95:b8:63:
                    e8:a8:4a:2f:ed:72:75:22:2d:63:f6:b4:5c:6e:06:
                    7d:05:c1:26:1d:a1:2e:86:c0:f6:5c:39:8a:cb:b7:
                    14:1b:e5:0d:ef:fb:4e:8c:d6:0f:d6:4b:93:60:f0:
                    a6:00:14:4a:43:d9:38:ad:20:44:a8:40:e1:cb:43:
                    a8:a4:2a:08:6e:0c:3e:2c:fc:06:18:0c:8e:4e:dc:
                    49:10:47:af:1c:7b:b5:3d:3b:ec:5c:24:3a:6e:02:
                    29:e4:92:cc:2e:25:b2:6b:1d:89:1b:38:50:00:30:
                    82:61:02:ee:aa:48:bf:c0:70:f6:48:fd:36:85:f7:
                    b5:51:d6:3f:e6:e4:8b:2e:f6:af:31:14:3b:92:b6:
                    2e:51:5a:92:d0:94:09:dd:01:41:3d:47:96:6d:89:
                    6e:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:06:D4:4A:89:8D:29:E1:A1:29:5D:AE:0F:ED:E8:6B:70:27:F5:D8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/6343a1a9-e10e-3062-b184-56930c7355f8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.0.126.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         22:fe:4f:12:71:ff:c9:e5:21:65:ad:3b:28:2d:cb:94:f3:d7:
         af:83:de:eb:13:1f:af:e2:03:31:c2:7f:50:97:78:b1:c7:02:
         0f:5d:18:ca:c3:da:74:60:79:4b:db:28:1c:a5:69:d3:0a:37:
         e3:e8:4c:02:f5:26:47:0b:42:39:29:a1:32:f8:cf:b5:c3:f3:
         31:ac:c0:f9:e3:fb:22:13:0e:94:f8:73:95:10:41:ef:e8:75:
         ad:67:e0:f4:12:8c:f2:28:00:39:1f:ce:ff:cf:66:5a:ad:53:
         ad:4d:69:ca:87:4e:46:93:4d:f1:20:07:bd:da:b6:2e:19:8a:
         7b:d1:44:5f:9b:4d:24:fe:40:0e:95:9e:c2:cb:d6:2c:4a:e1:
         50:3c:30:48:c9:43:09:37:87:5d:b6:aa:29:73:15:9d:58:57:
         4c:1d:31:a0:f0:26:0e:1b:63:fa:87:50:94:97:62:dc:5d:f0:
         51:b2:9a:27:a3:f8:8f:fc:ff:28:b6:77:76:92:a0:0b:31:80:
         88:86:91:21:e1:9d:13:4b:88:54:a1:0e:82:13:3d:5c:87:8a:
         4a:45:b3:f8:95:b9:c2:77:bb:90:c1:f9:db:a7:2a:60:26:aa:
         2f:3d:d0:6b:91:9e:11:b3:e8:f9:00:e0:0a:cc:08:07:50:af:
         9a:51:4b:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 24 07:42:19 2026 by rpki-client