Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/c6317150-f8d3-3fca-9b8b-1e5cd80b80f1.roa
File:                     c6317150-f8d3-3fca-9b8b-1e5cd80b80f1.roa (raw, json)
Hash identifier:          BueL3bQBupIbcSAYqn7LZ9IETTanQYpxexu/Ju+nqdA=
Subject key identifier:   36:37:C6:5F:43:3C:90:35:5D:FE:87:7B:61:32:17:D3:C8:49:9F:38
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F4328584E6ECED9773F425DBD3003EA80
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/c6317150-f8d3-3fca-9b8b-1e5cd80b80f1.roa
Signing time:             Wed 08 Jul 2026 17:24:12 +0000
ROA not before:           Wed 08 Jul 2026 17:24:12 +0000
ROA not after:            Tue 06 Oct 2026 17:24:12 +0000
asID:                     401152
IP address blocks:        166.1.167.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 10 Jul 2026 08:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:6e:ce:d9:77:3f:42:5d:bd:30:03:ea:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Jul  8 17:24:12 2026 GMT
            Not After : Oct  6 17:24:12 2026 GMT
        Subject: CN=f9a39990-4406-4edb-8ed8-0363881ab344
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:a8:fa:10:93:86:a2:fd:2b:ee:25:4e:71:fa:
                    63:2a:cc:05:30:7e:c5:ed:25:e6:f5:21:b7:7e:f4:
                    7f:63:f5:5b:b6:d8:15:58:40:f0:44:c3:13:fe:c7:
                    d8:cc:8c:71:da:2a:c9:69:53:fe:da:06:19:78:84:
                    e0:e0:a1:c9:c9:c6:93:1f:5b:ff:9c:f5:2b:87:ff:
                    7a:2a:62:f4:d1:b4:2c:c1:32:92:6d:00:70:b7:3d:
                    90:81:c3:41:ff:a3:8f:82:08:2d:b3:c5:d2:b8:a2:
                    ff:69:e5:a8:1c:f3:35:24:5c:24:95:d8:8e:0a:d9:
                    d6:50:9d:83:00:7b:79:1f:32:be:49:5d:c3:aa:18:
                    5c:06:11:f0:8d:1c:7f:ec:d9:17:7a:3a:e1:f5:1f:
                    8b:35:77:1b:33:fd:63:a1:d7:e3:b9:a2:8a:36:d1:
                    a6:00:d8:4a:30:00:85:f8:b6:8c:70:d6:89:8d:50:
                    f0:f0:ce:07:19:56:74:fe:c2:3e:1d:2c:21:8f:67:
                    53:e5:ee:d0:c6:4a:72:61:de:71:a5:85:ea:cc:31:
                    cd:77:da:33:26:ec:cb:6a:a3:9c:bf:eb:3c:d6:20:
                    41:9e:16:11:9f:8c:f6:28:f4:04:91:ed:1a:3a:ae:
                    65:0d:96:b3:d6:24:90:71:85:c1:b6:ee:f0:f1:59:
                    d6:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:37:C6:5F:43:3C:90:35:5D:FE:87:7B:61:32:17:D3:C8:49:9F:38
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/c6317150-f8d3-3fca-9b8b-1e5cd80b80f1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.1.167.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         45:5e:34:ce:2c:79:2b:75:9b:57:d7:4c:5f:70:79:49:81:35:
         96:57:f5:e9:12:a0:b9:75:79:ef:70:d2:82:3b:64:c9:7c:20:
         5e:ed:81:34:6c:56:ea:eb:01:57:2f:f8:4e:20:dd:ee:46:4b:
         a8:17:68:19:a6:47:ec:62:7a:df:8c:d8:c6:d9:5a:5c:01:67:
         46:1f:ad:76:4c:96:b9:78:54:dc:78:40:20:0e:7b:d8:ac:af:
         64:00:2b:06:1f:af:f5:b6:7c:43:97:07:de:69:fd:0e:0f:42:
         96:f6:5c:f9:18:9b:f1:35:59:18:61:d7:44:ff:b9:00:ec:54:
         6f:be:84:0c:66:a7:68:79:7f:e9:96:f7:72:a6:aa:ce:f2:79:
         1a:28:38:e2:61:3e:0e:08:58:67:13:71:4d:88:71:c0:a6:04:
         9c:a5:4b:7c:fb:1d:f6:b8:10:36:f3:bf:cf:ae:46:ea:47:b4:
         92:ef:e6:ab:cc:bb:f3:74:4b:34:f0:7f:99:db:55:5d:1e:ae:
         49:d6:2a:26:8d:97:32:a4:bc:91:ba:3b:36:54:b4:bc:98:56:
         a5:b7:96:70:88:33:c0:d7:12:81:63:8b:07:c3:4a:ca:26:22:
         dc:aa:db:1f:92:8d:68:ba:dc:f0:1d:de:71:c7:41:dc:26:c3:
         32:95:68:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 9 08:56:48 2026 by rpki-client