Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/87272819-3eae-39a7-8804-b8b000520dd7.roa
File:                     87272819-3eae-39a7-8804-b8b000520dd7.roa (raw, json)
Hash identifier:          BBIbwtXA3KPBocmPGvyM9ntfoHCm7GkJKvewoit73CQ=
Subject key identifier:   02:DD:F4:D4:DD:D8:19:EA:8B:CD:78:28:8D:FF:37:0D:F0:F3:3C:1A
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F4328584EA7A08BB63F7BF4842BCC94F0
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/87272819-3eae-39a7-8804-b8b000520dd7.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     58061
IP address blocks:        166.0.119.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 03 Aug 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:a0:8b:b6:3f:7b:f4:84:2b:cc:94:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=f3898274-e885-4869-b28f-b5638db9de69
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:e9:1f:f3:36:81:1a:92:55:a4:57:20:ae:5f:
                    5b:5f:92:54:34:c2:a6:37:1f:a8:49:75:f3:55:92:
                    0d:79:36:d3:80:ba:43:47:e1:cc:ff:62:2c:ec:f6:
                    4f:23:f4:20:d1:45:a9:a8:47:46:0e:b5:ec:b4:69:
                    08:6e:77:5a:94:a9:84:94:bf:29:c5:0a:1d:01:71:
                    e8:4c:2f:10:5f:d5:11:dc:d6:af:e8:fc:a6:e1:6e:
                    18:f3:f6:33:19:f1:23:6f:43:e8:6e:d0:3b:f9:61:
                    7b:21:4b:5e:95:72:aa:ed:d6:87:20:4b:d5:a4:75:
                    95:b3:69:bc:0c:70:55:18:89:9f:af:5c:88:ce:7a:
                    98:cd:ad:86:fc:73:9a:89:c6:e8:a5:17:d2:8c:d0:
                    62:89:e7:9a:cc:7e:c2:1c:09:6d:7e:f9:94:21:45:
                    d4:72:ff:81:5e:89:4c:3a:91:4f:6b:98:54:77:84:
                    1e:f8:9a:fe:1b:ba:7f:53:b2:40:27:e1:a7:4c:d1:
                    da:91:d9:35:e0:d8:26:b8:d2:b5:92:ed:de:8a:c2:
                    58:b9:99:e6:9a:52:b1:e0:dc:fe:6e:41:24:94:80:
                    ce:b1:04:3e:77:02:95:ea:87:5c:f3:18:bd:44:32:
                    51:5f:c3:09:f3:db:0e:bf:ce:6b:f2:92:7a:38:1b:
                    f0:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:DD:F4:D4:DD:D8:19:EA:8B:CD:78:28:8D:FF:37:0D:F0:F3:3C:1A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/87272819-3eae-39a7-8804-b8b000520dd7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.0.119.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3a:ad:46:b7:fb:11:6a:dd:e4:83:07:2d:ee:e4:74:ce:a6:80:
         04:4c:a4:3a:0e:dc:cc:9b:86:e8:dd:3a:03:98:2c:a4:2d:4f:
         ac:05:61:44:e2:0f:4f:d7:4c:f7:0c:31:9a:a9:d3:f6:48:8b:
         46:0b:56:cc:45:62:9c:d6:ab:c5:6b:5d:84:f1:4a:7a:63:3d:
         77:25:1f:eb:9e:c3:83:76:21:6f:9f:e5:42:20:23:4f:7d:c1:
         cb:bb:b9:12:3b:f4:c1:9f:69:57:94:da:8a:05:7a:2e:fa:3a:
         1b:97:4f:38:91:42:fb:f4:31:f1:44:61:f9:6c:31:9c:19:d1:
         be:a2:d8:c9:b1:39:1d:88:9b:8e:3a:11:2c:8b:dc:e4:63:57:
         4f:c5:0a:12:0b:60:5b:67:82:73:31:67:af:d5:19:a6:6f:22:
         b0:2f:eb:a5:b6:c4:dd:a2:a9:c0:f7:72:95:59:8f:d7:e4:58:
         a9:fd:81:cd:ad:e9:8f:04:e7:36:0a:db:77:22:04:08:d3:78:
         58:a4:8d:3a:8a:f2:2e:dc:8b:69:94:e9:3e:a8:aa:78:b2:ca:
         05:c4:45:8f:f5:93:7e:22:29:25:77:fa:89:ad:65:63:03:c4:
         27:26:a0:14:32:93:8b:bf:a9:ec:0a:bd:26:22:05:d0:78:4a:
         f8:9f:1a:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 2 11:39:58 2026 by rpki-client