Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/778b5db1-9a5b-3cc7-b65a-067b51700ef2.roa
File:                     778b5db1-9a5b-3cc7-b65a-067b51700ef2.roa (raw, json)
Hash identifier:          hgRXDljOo4TiXLDYYj4FwXyFRRzTQorU79zKKyoKvD4=
Subject key identifier:   BF:BF:3F:D5:7E:06:11:21:68:2D:2E:15:CC:BD:0B:E2:88:74:BA:47
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F4328584DABAF826C80DC73A601481580
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/778b5db1-9a5b-3cc7-b65a-067b51700ef2.roa
Signing time:             Wed 29 Apr 2026 19:58:26 +0000
ROA not before:           Wed 29 Apr 2026 19:58:26 +0000
ROA not after:            Tue 28 Jul 2026 19:58:26 +0000
asID:                     401152
IP address blocks:        166.1.130.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 05 May 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:ab:af:82:6c:80:dc:73:a6:01:48:15:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Apr 29 19:58:26 2026 GMT
            Not After : Jul 28 19:58:26 2026 GMT
        Subject: CN=1c89692a-9ad6-46be-9e6a-9836b9358d61
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:50:d7:be:44:dc:77:b8:31:ee:2f:8a:ae:3b:
                    91:bb:12:39:1c:dc:22:42:ba:e0:fe:bf:89:04:42:
                    81:8a:f8:5a:1d:cc:62:6f:a6:66:26:cf:86:18:c6:
                    04:05:08:e8:ef:b7:f3:e0:2a:7f:18:a4:df:03:59:
                    b3:ab:a9:1a:fb:54:1f:2e:ec:8a:7d:4b:bd:f8:03:
                    73:99:e8:9b:e9:73:77:5a:cc:36:8b:c7:2c:7e:ab:
                    9d:e7:98:7a:be:36:9d:97:ef:9f:fd:3c:ba:92:2d:
                    22:e8:62:75:14:b5:8a:d6:52:cf:37:ad:1b:3b:6d:
                    d2:22:da:9b:ae:9a:9d:ba:02:55:8a:9c:cf:94:75:
                    e5:ce:8e:b8:78:1d:44:04:51:72:05:01:39:a3:a9:
                    9d:9b:bf:36:32:15:2d:b7:c4:f6:a0:58:cb:11:f4:
                    35:0d:3b:3f:29:02:fd:2a:fb:4e:ea:9e:81:5d:63:
                    7a:29:a3:b5:2d:bf:ac:e6:7a:ed:e8:95:3f:d3:34:
                    b5:98:74:05:33:bd:b4:ed:7f:72:73:d1:b2:66:1c:
                    0f:7d:e0:09:21:fa:ce:b0:6d:a8:8a:46:c2:d9:1f:
                    c5:d5:cc:cf:7f:7c:93:9d:5e:b0:d0:6d:fe:7e:99:
                    36:c3:6a:5d:64:ab:c0:b0:b1:62:6b:4b:74:26:9a:
                    a0:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:BF:3F:D5:7E:06:11:21:68:2D:2E:15:CC:BD:0B:E2:88:74:BA:47
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/778b5db1-9a5b-3cc7-b65a-067b51700ef2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.1.130.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         57:ba:59:f4:27:dc:ce:c5:4a:67:6b:9b:80:19:37:91:15:50:
         54:9d:53:e1:70:a5:cd:73:51:df:7e:95:05:4c:66:f7:0c:80:
         31:2e:f2:3a:ac:ef:a3:16:d0:6e:dc:a4:04:c1:d2:5b:e3:a9:
         e1:0c:5d:7f:c3:4e:f1:01:8f:6d:68:1b:1a:cb:37:5a:bc:0c:
         0a:f9:cc:92:fa:67:19:c3:2b:8f:fd:b0:bd:f6:9a:e9:28:ab:
         33:9a:c1:2a:e4:ea:e9:6b:00:fc:0d:a9:4b:18:2a:6f:88:0e:
         34:cb:72:8e:84:4a:d4:4b:43:da:3c:86:2a:ee:13:73:7a:a4:
         6c:9c:17:4b:69:f5:be:6a:a0:60:dc:25:06:89:d8:19:11:84:
         05:27:c5:7c:03:a8:89:be:07:92:11:0e:af:21:ff:69:bb:f7:
         6a:e9:87:38:65:47:d9:74:42:91:52:70:b8:68:3f:ad:88:2d:
         e7:83:dd:43:6b:db:fc:5f:31:d3:38:2b:e2:5b:4c:9d:08:77:
         db:08:12:69:ce:e0:0b:fa:78:04:a3:cb:96:b4:96:9c:78:48:
         94:37:70:b5:f2:fa:3f:df:3a:10:77:4e:ad:be:91:94:30:e4:
         fe:60:ee:66:8e:dc:bf:f0:c5:ee:25:01:34:ff:f0:ab:36:60:
         2b:db:7f:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 2 23:08:30 2026 by rpki-client