Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/b05f74f4-722e-38d8-ba6d-275287676918.roa
File:                     b05f74f4-722e-38d8-ba6d-275287676918.roa (raw, json)
Hash identifier:          7xesCu+xRuw9kGSSLQXvBto2LyeMNOgbCaQjsB5chJg=
Subject key identifier:   98:1F:FA:A6:B5:42:A3:B4:82:D2:31:0D:60:20:8D:AC:99:3D:CE:EB
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F4328584D62BCD6D4BAE25877B0397400
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/b05f74f4-722e-38d8-ba6d-275287676918.roa
Signing time:             Fri 03 Apr 2026 16:51:17 +0000
ROA not before:           Fri 03 Apr 2026 16:51:17 +0000
ROA not after:            Thu 02 Jul 2026 16:51:17 +0000
asID:                     10753
IP address blocks:        166.0.92.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 05 Apr 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:62:bc:d6:d4:ba:e2:58:77:b0:39:74:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Apr  3 16:51:17 2026 GMT
            Not After : Jul  2 16:51:17 2026 GMT
        Subject: CN=ad15e720-1eeb-486b-8929-52d35724a2e6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:c5:5f:10:48:f1:45:f1:6e:24:d0:d8:d0:a6:
                    c1:53:b2:c0:cc:b8:34:41:2a:3f:c6:57:7a:f1:d3:
                    b9:5c:99:e0:8b:c5:95:5e:41:fa:e2:42:4e:30:f5:
                    63:66:6e:66:99:07:8b:0c:7a:3a:08:89:a6:50:12:
                    c6:c4:69:30:34:8c:db:7c:ad:f3:f3:54:84:c9:1e:
                    f7:64:64:34:ae:e1:be:6c:ad:b3:8b:c6:a8:1d:48:
                    51:2b:a3:cc:f5:09:02:39:b0:9d:83:b9:64:bc:82:
                    44:6f:a4:8d:f3:ee:f3:7f:88:4e:b1:3c:ac:a9:9c:
                    b8:71:b3:63:23:77:62:98:30:cb:ed:f1:b2:fe:f6:
                    2d:75:b7:50:f1:94:ad:15:91:63:46:6a:34:98:50:
                    92:05:a3:fd:d0:d3:10:86:ca:d0:ec:fc:5f:ce:2e:
                    f2:1e:d4:67:e4:e6:e0:0b:63:92:99:b7:f9:75:12:
                    cf:64:f2:e2:50:62:6e:01:ab:91:96:fc:66:44:d2:
                    c1:9c:25:58:6b:c3:40:fe:03:28:9e:22:68:39:27:
                    26:72:a0:fd:56:d2:94:32:82:cc:0f:59:60:80:60:
                    a5:fa:b1:ec:fe:60:71:f5:4a:f8:2a:72:e5:e9:6a:
                    fd:f0:e8:6a:d0:4f:3e:19:82:60:c3:4e:51:10:00:
                    c1:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:1F:FA:A6:B5:42:A3:B4:82:D2:31:0D:60:20:8D:AC:99:3D:CE:EB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/b05f74f4-722e-38d8-ba6d-275287676918.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.0.92.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         71:50:1a:ac:4a:79:48:19:ce:d4:c1:3e:0f:e7:60:05:66:7c:
         c2:43:55:31:83:b8:f5:76:a6:1a:c7:06:97:e8:42:aa:25:98:
         73:56:32:dd:f7:33:a2:64:b5:f5:a9:a3:93:3d:21:ec:a9:50:
         2e:48:1f:5e:82:9a:e7:9a:b0:d4:f8:7a:50:e4:c5:9a:d1:71:
         1b:f2:5d:22:c0:f7:99:aa:93:c3:bf:91:39:b9:1a:62:68:b2:
         69:54:ef:57:e0:0f:3f:eb:b2:26:5a:74:22:01:42:f0:25:3d:
         41:50:64:9a:82:21:04:48:2d:5e:ff:d9:c6:90:0e:e3:f8:a3:
         48:10:fb:01:13:c7:3b:fc:fe:3b:12:98:8f:9d:1f:9f:74:87:
         a6:6e:69:45:12:00:7f:e5:ad:c6:45:03:3c:57:8c:d1:4c:5c:
         93:27:08:d2:92:f3:f7:b1:df:8b:d2:de:0a:f1:5b:27:fc:ab:
         ed:f1:bd:d5:98:59:af:61:8f:e9:d8:53:b6:e0:01:c5:00:3c:
         0a:df:6c:4d:22:4a:b3:4c:fd:cd:f4:b1:06:9c:de:a0:f3:b8:
         b1:a8:17:a5:62:4e:ea:1e:28:9d:be:ce:8b:47:a0:23:2d:1f:
         7a:af:7a:d0:d9:42:e7:67:12:c9:ad:9e:c6:f1:70:f5:3d:c7:
         d5:d8:3a:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 4 15:31:16 2026 by rpki-client