Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/b357911c-3f74-33eb-843d-723413ba05eb.roa
File:                     b357911c-3f74-33eb-843d-723413ba05eb.roa (raw, json)
Hash identifier:          eXiBEtWtKf8WPh3t1hj16LLcLeVSNyHCYS7ifvNC9ew=
Subject key identifier:   EA:DD:0A:9D:2C:07:43:FC:92:46:6B:ED:60:8A:10:23:F0:D8:05:39
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F4328584CFE6F9E27644A1243CDA98C00
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/b357911c-3f74-33eb-843d-723413ba05eb.roa
Signing time:             Thu 26 Feb 2026 18:34:51 +0000
ROA not before:           Thu 26 Feb 2026 18:34:51 +0000
ROA not after:            Wed 27 May 2026 17:34:51 +0000
asID:                     15083
IP address blocks:        166.0.206.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Feb 2026 08:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:fe:6f:9e:27:64:4a:12:43:cd:a9:8c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Feb 26 18:34:51 2026 GMT
            Not After : May 27 17:34:51 2026 GMT
        Subject: CN=0c522710-0ce1-446d-bff0-498a73f67b6f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:86:7a:24:a2:5f:7b:d4:25:81:30:b0:c9:5a:
                    58:97:42:45:22:ff:11:b0:74:75:ad:b0:b9:63:8b:
                    ce:ca:19:3e:c0:74:9d:7a:61:66:ee:6c:80:5d:22:
                    53:f0:4b:53:14:bf:32:64:05:b9:ea:4b:98:47:38:
                    42:7d:5b:36:9c:de:44:a1:fd:52:6d:b4:d0:43:87:
                    4f:27:f2:3b:69:28:c0:10:b3:d1:58:76:29:c8:85:
                    4c:84:f4:a6:6a:76:bd:27:97:c3:36:18:64:5f:ab:
                    94:99:5c:3e:fe:4b:e6:28:d8:f7:99:c7:84:d2:fd:
                    81:b4:5a:c9:27:12:75:4e:d6:68:8b:23:c6:dd:29:
                    bb:f3:17:ac:e6:a1:4d:26:9d:2b:60:46:22:e4:b3:
                    af:2b:f3:65:f6:bc:94:67:3b:a1:aa:f7:15:95:fb:
                    db:7f:55:66:91:ee:77:e9:b6:94:c1:f6:1c:2e:dd:
                    96:1f:46:80:5a:9e:03:96:80:3b:92:24:71:84:43:
                    73:cb:64:5d:44:8a:36:8d:d5:d8:f5:22:82:66:07:
                    c2:94:1a:ce:08:15:65:94:80:b8:b1:b3:99:b8:78:
                    5d:fb:cc:ce:7e:30:a9:70:58:27:bb:ba:ba:67:65:
                    64:ee:09:fa:13:10:7c:bc:5d:86:58:eb:25:53:94:
                    b9:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:DD:0A:9D:2C:07:43:FC:92:46:6B:ED:60:8A:10:23:F0:D8:05:39
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/b357911c-3f74-33eb-843d-723413ba05eb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.0.206.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         60:c9:eb:11:a3:e0:75:1d:f5:cf:0a:9c:c6:f9:e7:e5:32:03:
         70:96:45:87:43:ba:b9:90:35:8f:ef:c8:2e:f8:58:80:44:70:
         72:e3:0e:85:b9:8d:c5:64:bc:9b:46:01:50:d6:56:66:0d:66:
         be:6d:3b:61:9d:ba:51:20:6f:98:18:1c:c1:1b:7e:37:03:5a:
         5b:90:51:21:38:d9:aa:19:66:56:d5:f5:2e:dc:ba:62:c1:32:
         30:b9:b4:86:2a:f7:90:89:50:15:80:55:31:79:d3:7c:97:6c:
         77:65:21:6d:a3:19:d7:fc:f7:50:b7:93:cc:fb:12:cc:5a:df:
         7e:b3:28:06:cc:22:bd:77:7c:52:0a:bc:9b:a8:7e:fa:20:a1:
         fa:86:78:91:90:2f:66:30:b1:e5:bc:5b:6c:af:7f:9d:4b:e7:
         7c:33:10:64:80:d1:9f:05:9c:cf:f1:20:06:48:ae:ee:65:01:
         52:42:3a:3a:8c:25:46:1c:3d:b8:3f:68:29:36:e6:94:82:69:
         15:3e:04:d9:3d:cf:1c:88:98:a5:2d:42:3e:24:ba:47:5f:0b:
         d8:bd:5d:8b:6d:40:2e:45:6f:b5:90:01:85:83:61:35:c6:9f:
         96:a4:75:1b:06:5d:a4:e0:fa:7a:6b:59:0c:20:34:bd:78:78:
         2f:c5:12:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 27 08:13:46 2026 by rpki-client