Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/c7d6aff2-d82a-3d90-9ac9-5f0e7590ff37.roa
File:                     c7d6aff2-d82a-3d90-9ac9-5f0e7590ff37.roa (raw, json)
Hash identifier:          J/oSeJW6hBYMMeUNW/j2sQdVFFtz3p6ESXsYMjPjKIg=
Subject key identifier:   C5:BD:AC:96:FE:3A:95:B3:4C:DE:B3:F1:36:92:50:8B:EA:78:CA:BC
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F4328584DAE4FCEB59E60DBFE49B731E0
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/c7d6aff2-d82a-3d90-9ac9-5f0e7590ff37.roa
Signing time:             Thu 30 Apr 2026 18:33:02 +0000
ROA not before:           Thu 30 Apr 2026 18:33:02 +0000
ROA not after:            Wed 29 Jul 2026 18:33:02 +0000
asID:                     44559
IP address blocks:        166.1.177.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 05 May 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:ae:4f:ce:b5:9e:60:db:fe:49:b7:31:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Apr 30 18:33:02 2026 GMT
            Not After : Jul 29 18:33:02 2026 GMT
        Subject: CN=1537fce3-c227-4a09-944b-13a13d205c15
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:7c:81:3e:22:d3:03:1f:17:41:42:85:d0:27:
                    2a:8b:f6:e1:24:64:b3:55:19:aa:1f:ca:87:57:d1:
                    0b:6b:5e:48:15:c0:61:f4:f5:e0:c9:eb:bc:0a:63:
                    5c:1c:01:ed:5d:2f:88:9b:f1:e3:0c:9d:b7:30:73:
                    f6:dc:b1:fb:d9:3d:e4:14:75:c3:fd:3f:d3:4e:6c:
                    5a:b7:09:a3:5a:9a:03:5a:a5:c4:e6:92:06:79:db:
                    53:3c:e1:6b:aa:49:97:42:c9:b0:af:bb:ea:05:62:
                    27:39:a0:b7:e6:32:06:e9:ea:00:2d:4c:a3:c3:31:
                    29:cb:83:56:dc:91:d0:d7:f1:f3:4a:7e:7c:b3:be:
                    24:35:5c:9c:07:a2:a4:a0:a9:16:a7:41:26:34:3c:
                    54:00:51:0b:20:c3:e9:df:4b:6d:02:53:e5:38:42:
                    83:59:4d:4f:05:9d:62:14:c6:92:42:3d:79:70:c4:
                    c2:b3:ac:be:34:0f:d0:be:44:e9:8f:76:1d:d7:ca:
                    51:a0:a0:37:ce:29:5c:7d:31:ae:87:03:12:de:1b:
                    44:d0:72:d9:a0:4d:f7:3e:a5:24:0c:0f:e6:06:95:
                    ed:e9:34:24:b0:38:fa:10:b4:df:3d:c0:fe:f4:02:
                    bb:d1:2c:51:ef:2d:4e:c9:11:90:b4:12:c6:f8:31:
                    70:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:BD:AC:96:FE:3A:95:B3:4C:DE:B3:F1:36:92:50:8B:EA:78:CA:BC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/c7d6aff2-d82a-3d90-9ac9-5f0e7590ff37.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.1.177.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9b:43:86:5f:dd:84:10:1b:72:19:31:68:08:bd:92:b1:b7:cd:
         a1:c8:83:d2:86:f5:f7:0b:8a:fe:8b:94:bf:73:b1:e0:9f:99:
         89:b6:4f:de:5a:3e:8f:f6:a7:ad:33:07:b0:92:d3:a6:78:26:
         b2:ce:b6:a3:e6:dc:c6:eb:bc:ce:c2:e5:00:4b:40:d3:23:d2:
         53:53:ae:e4:55:84:56:a0:12:9d:39:d3:08:65:a5:54:ff:98:
         ed:b4:70:77:96:e4:e8:73:b3:11:83:f1:53:67:f1:fb:96:35:
         b4:16:ef:f7:cd:2c:c3:a9:f2:8f:a6:48:75:aa:ce:e0:30:32:
         f8:3b:75:00:31:4a:45:7f:9b:b5:ce:d0:fa:39:c4:1b:d8:32:
         50:60:86:2e:26:76:cb:1d:be:cf:87:1c:56:17:50:9b:96:f9:
         42:97:5c:bf:9f:54:05:dc:44:6b:ae:c5:03:4a:4a:23:79:94:
         3c:e0:8f:93:fd:f4:e0:30:9a:a9:8b:4a:51:de:84:4d:67:88:
         88:b1:92:2c:cd:5e:81:07:f6:b5:eb:2c:2d:78:73:f3:ab:55:
         0f:e6:c4:14:80:9c:4e:2f:61:61:fb:36:5b:f4:ff:13:62:05:
         5f:70:79:cf:77:f6:90:ed:0c:bf:3b:8c:06:07:96:19:6a:0f:
         69:31:33:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 2 23:07:57 2026 by rpki-client