Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/8458ec01-9c47-31ef-8fe3-397dbe9f8363.roa
File:                     8458ec01-9c47-31ef-8fe3-397dbe9f8363.roa (raw, json)
Hash identifier:          0pEiEl8GNCtywLEl6toNWJL4Cj4uXJSLF9oTMN0MjoA=
Subject key identifier:   AA:FA:56:95:38:11:34:C8:9C:87:41:3F:4E:9C:63:DE:8A:99:ED:9D
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F4328584D1D2A193621F41B9D27333E00
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/8458ec01-9c47-31ef-8fe3-397dbe9f8363.roa
Signing time:             Mon 09 Mar 2026 18:44:50 +0000
ROA not before:           Mon 09 Mar 2026 18:44:50 +0000
ROA not after:            Sun 07 Jun 2026 18:44:50 +0000
asID:                     401152
IP address blocks:        166.0.207.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 12 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:1d:2a:19:36:21:f4:1b:9d:27:33:3e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Mar  9 18:44:50 2026 GMT
            Not After : Jun  7 18:44:50 2026 GMT
        Subject: CN=9652b0ec-1ab0-4dc0-a414-466774779774
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:ef:45:e4:dc:55:a8:15:42:83:3a:23:0f:6a:
                    2a:1f:a3:44:65:1a:43:96:1b:6b:87:3d:f8:15:21:
                    92:83:53:1f:50:dd:43:5d:60:be:0f:07:7a:23:12:
                    a5:b6:7c:e2:b8:00:8e:49:5b:d6:c7:62:a4:bf:00:
                    18:07:eb:bb:3b:55:b6:20:1b:6d:c4:05:fa:86:54:
                    e5:a1:00:61:6d:01:05:fd:7d:5e:9b:0d:5c:e2:6b:
                    95:5e:ef:12:79:45:83:02:b5:02:c0:77:3e:ee:5e:
                    fe:8b:78:66:41:b7:79:68:cb:fb:56:78:5e:d1:db:
                    00:b0:c3:cf:21:a0:28:e9:bb:58:33:a7:ca:d9:25:
                    43:82:55:89:8a:5f:a3:ad:e0:07:65:8d:ff:2c:ef:
                    ca:2f:37:7b:58:5f:da:35:ed:98:9b:cf:57:9e:79:
                    6f:db:58:16:8c:98:4d:91:a3:f1:53:1a:04:46:8b:
                    ea:ed:9b:89:87:8e:4f:cf:e8:b5:a3:73:74:6f:ab:
                    4a:eb:b2:d0:3d:9a:20:90:94:89:bc:a2:a7:0a:80:
                    59:bd:8a:25:c7:5c:1a:4f:b6:c3:df:de:7f:d7:e9:
                    2d:e9:b5:5c:a2:b8:89:82:9a:26:be:91:2f:2b:e1:
                    fd:8b:fe:e5:11:8c:0d:55:80:9c:1d:5f:25:95:b4:
                    c0:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:FA:56:95:38:11:34:C8:9C:87:41:3F:4E:9C:63:DE:8A:99:ED:9D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/8458ec01-9c47-31ef-8fe3-397dbe9f8363.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.0.207.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         25:8f:5c:e2:c8:3f:4f:48:da:1d:42:8f:3d:4a:04:2b:67:60:
         d3:fb:2e:cf:3a:da:0a:53:f2:fe:36:c7:df:84:71:d8:13:19:
         22:3e:77:20:8c:28:44:ec:c2:40:cd:de:19:07:ec:7b:9d:7b:
         a1:2c:67:9e:81:76:0c:54:db:fe:5e:27:a6:d8:26:48:98:39:
         3a:d0:d5:0c:fd:41:85:e0:20:d7:fd:50:65:74:2f:67:36:7a:
         0a:6d:a2:3f:95:b8:fe:63:62:cb:2d:98:a2:b1:a5:d5:43:6b:
         70:37:e3:3a:41:7f:41:74:43:4b:03:da:90:50:77:a3:e5:54:
         7a:3e:7f:63:2a:92:14:88:58:2d:b0:1a:15:5a:b7:bc:cf:9e:
         f6:d2:48:93:9c:f9:41:05:2b:13:a2:46:55:fa:6d:2b:f1:bb:
         82:a8:77:97:a6:41:bf:e4:85:71:8d:eb:2b:b1:40:c7:31:6e:
         96:ab:ca:df:a8:46:65:12:c8:76:9c:ae:07:23:fa:ca:87:2b:
         d7:b6:58:e3:a7:65:de:01:a7:d9:dc:a8:97:96:cc:36:62:86:
         8a:db:7d:41:3d:a7:f8:94:c1:e4:4f:2a:11:2f:98:2d:12:57:
         29:5c:47:77:77:66:9c:b9:1f:cd:74:aa:29:dd:f5:ab:c6:c7:
         7a:a5:e1:d2
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0dKhk2IfQbnSczPgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjZkZWEyYTUtODM3ZC00NmQ4LThmOGUtOTQ0N2VjZTIw
YzA5MB4XDTI2MDMwOTE4NDQ1MFoXDTI2MDYwNzE4NDQ1MFowLzEtMCsGA1UEAxMk
OTY1MmIwZWMtMWFiMC00ZGMwLWE0MTQtNDY2Nzc0Nzc5Nzc0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvO9F5NxVqBVCgzojD2oqH6NEZRpDlhtrhz34
FSGSg1MfUN1DXWC+Dwd6IxKltnziuACOSVvWx2KkvwAYB+u7O1W2IBttxAX6hlTl
oQBhbQEF/X1emw1c4muVXu8SeUWDArUCwHc+7l7+i3hmQbd5aMv7Vnhe0dsAsMPP
IaAo6btYM6fK2SVDglWJil+jreAHZY3/LO/KLzd7WF/aNe2Ym89Xnnlv21gWjJhN
kaPxUxoERovq7ZuJh45Pz+i1o3N0b6tK67LQPZogkJSJvKKnCoBZvYolx1waT7bD
395/1+kt6bVcoriJgpomvpEvK+H9i/7lEYwNVYCcHV8llbTA7QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFKr6VpU4ETTInIdBP06cY96Kme2dMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRl
YTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3ZWNlMjBjMDkvODQ1OGVjMDEtOWM0Ny0z
MWVmLThmZTMtMzk3ZGJlOWY4MzYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjZkZWEyYTUtODM3ZC00NmQ4LThm
OGUtOTQ0N2VjZTIwYzA5LzY2ZGVhMmE1LTgzN2QtNDZkOC04ZjhlLTk0NDdlY2Uy
MGMwOS5jcmwwHwYDVR0jBBgwFoAUw4ati/QZSzWUJJuQup2AEcIIcckwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRlYTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3
ZWNlMjBjMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQApgDPMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACWPXOLIP09I2h1Cjz1KBCtnYNP7Ls862gpT8v42x9+EcdgTGSI+dyCM
KETswkDN3hkH7Hude6EsZ56BdgxU2/5eJ6bYJkiYOTrQ1Qz9QYXgINf9UGV0L2c2
egptoj+VuP5jYsstmKKxpdVDa3A34zpBf0F0Q0sD2pBQd6PlVHo+f2MqkhSIWC2w
GhVat7zPnvbSSJOc+UEFKxOiRlX6bSvxu4Kod5emQb/khXGN6yuxQMcxbparyt+o
RmUSyHacrgcj+sqHK9e2WOOnZd4Bp9ncqJeWzDZihorbfUE9p/iUweRPKhEvmC0S
VylcR3d3Zpy5H810qind9avGx3ql4dI=
-----END CERTIFICATE-----
Generated at Tue Mar 10 11:19:31 2026 by rpki-client