Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/c8c310bc-65e4-3a8a-aad2-9807d1da445d.roa
File:                     c8c310bc-65e4-3a8a-aad2-9807d1da445d.roa (raw, json)
Hash identifier:          wVyPzfcjOPt8XpnF3c9KbAuvgLgiiMV3xKS/X/LwKm0=
Subject key identifier:   F2:BF:6C:69:97:77:C3:2F:42:5C:C1:AC:86:17:6B:91:A5:87:EB:85
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F4328584EA7875573C63093B87C288200
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/c8c310bc-65e4-3a8a-aad2-9807d1da445d.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     149440
IP address blocks:        166.0.150.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Sep 2026 08:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:87:55:73:c6:30:93:b8:7c:28:82:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=8cb10b46-0a5e-402f-8f62-4d878425d112
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:c1:a0:65:58:82:92:0f:e0:f7:6a:d2:0c:c2:
                    38:da:7e:21:9b:b9:a6:6a:6b:ed:42:b9:63:e7:45:
                    85:09:c1:2b:8f:88:c1:ff:01:0a:f4:e9:49:0d:c6:
                    54:ba:df:e0:0c:5b:ab:7a:42:27:29:3d:ae:d8:8a:
                    a8:75:17:58:d7:6e:06:e7:71:1a:fd:10:d9:d8:07:
                    69:11:df:b4:5f:e8:0b:32:1c:8b:4f:39:d7:90:83:
                    d3:6f:14:dc:31:01:e9:e8:12:63:de:c7:fc:1d:a6:
                    8f:80:39:e6:d3:ed:d8:eb:40:6e:98:62:f0:d4:02:
                    06:65:fb:c1:37:3b:88:f8:0c:0a:8f:bd:6b:b6:14:
                    e2:f2:d0:8e:a9:dd:f1:2d:72:45:df:4b:ca:b8:76:
                    ad:58:40:8b:d6:a8:93:ac:dc:c3:85:df:e1:da:7e:
                    ed:89:18:c2:89:b3:ed:c4:c8:0f:49:ee:47:72:97:
                    89:37:39:81:1e:b9:92:bb:a8:e4:a3:d5:35:46:86:
                    bb:ec:5f:3d:fd:4a:76:20:57:ad:38:88:f9:ca:e8:
                    a3:63:60:e8:5a:47:78:df:09:8d:24:a6:b3:20:d2:
                    f6:d7:39:10:6d:4b:89:82:bc:c0:5d:c9:2d:38:d8:
                    39:5d:d6:17:8d:bf:9e:ca:3b:14:80:42:ca:06:3a:
                    b6:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:BF:6C:69:97:77:C3:2F:42:5C:C1:AC:86:17:6B:91:A5:87:EB:85
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/c8c310bc-65e4-3a8a-aad2-9807d1da445d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.0.150.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         af:65:ae:ba:c8:76:7e:a9:0d:9c:e8:d1:1b:ec:1a:b0:40:89:
         0c:dc:a3:5c:b9:0f:b3:be:ef:2b:4d:c3:6b:c8:a9:6e:41:d7:
         b0:16:6c:6c:a9:a9:fd:64:5e:a3:6a:61:72:a4:d6:65:ae:c0:
         2a:66:13:80:62:18:c3:c9:4a:82:c6:d0:60:fa:7d:2c:aa:66:
         fa:c4:6f:a3:67:6a:44:66:1e:41:fc:19:27:6d:43:7f:79:3c:
         04:c6:a3:84:2f:e8:11:b6:ed:73:79:5c:f3:fa:dd:18:0b:5d:
         6a:16:cd:ff:3b:af:38:15:b9:7a:d6:24:6b:e1:2b:ef:95:f9:
         23:73:f1:ed:79:c4:78:cf:59:9a:59:23:8a:8b:d8:89:2d:bb:
         13:f9:f2:74:20:8e:64:72:15:4f:cd:09:1c:bd:0d:f9:72:95:
         e0:a2:cf:bf:74:18:17:3e:43:47:7d:88:14:8c:a2:f1:5b:63:
         25:43:aa:ba:ad:40:17:1d:34:00:bd:48:96:46:93:76:42:a3:
         79:7f:18:fb:aa:e6:87:7e:8a:f5:4c:e2:13:38:08:ed:f3:bc:
         df:f1:cd:16:d9:b1:0b:cc:27:4c:fe:7c:5f:8e:0f:cb:f9:53:
         34:fb:3f:5f:f4:86:12:8c:b2:c5:f2:68:3b:0c:c8:b9:48:ec:
         22:98:28:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 03:11:08 2026 by rpki-client