Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/cf04cbca-d716-3b49-a2f2-9064a913b8bf.roa
File:                     cf04cbca-d716-3b49-a2f2-9064a913b8bf.roa (raw, json)
Hash identifier:          Ib/wgcqCPKin5ibsB8ywuev2JTRrE7fqWfC9K5TNjww=
Subject key identifier:   BF:D1:F6:9B:4E:62:C7:98:38:CD:9B:FA:8A:53:F5:1A:5A:3D:F9:B0
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F4328584DAE4FC96E2E30395818526380
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/cf04cbca-d716-3b49-a2f2-9064a913b8bf.roa
Signing time:             Thu 30 Apr 2026 18:32:59 +0000
ROA not before:           Thu 30 Apr 2026 18:32:59 +0000
ROA not after:            Wed 29 Jul 2026 18:32:59 +0000
asID:                     62240
IP address blocks:        166.1.178.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 05 May 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:ae:4f:c9:6e:2e:30:39:58:18:52:63:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Apr 30 18:32:59 2026 GMT
            Not After : Jul 29 18:32:59 2026 GMT
        Subject: CN=77c5caaa-3915-4b80-a369-44fa58d714a1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:b5:94:55:8f:af:93:52:ca:96:a9:e5:29:79:
                    94:61:1a:f4:74:09:2a:91:11:0d:6a:83:74:32:6f:
                    7f:40:ef:3f:1d:03:13:14:91:87:0c:df:c1:3c:36:
                    0c:e8:80:78:c1:98:52:87:44:85:1d:b3:34:92:a9:
                    f1:1e:d3:e9:78:13:b5:76:81:44:b1:7f:6b:68:6f:
                    60:d9:3b:4f:e3:c9:46:45:cd:c6:cb:0a:e0:c4:ee:
                    7e:33:fa:3a:13:4b:c1:fd:1e:0a:4f:dd:12:0a:e2:
                    a8:28:79:7b:5e:30:be:d0:68:66:58:9c:c6:db:2d:
                    c0:2c:ef:df:b6:84:20:2d:7a:ec:2f:d7:e8:1d:93:
                    5f:97:c5:d7:12:a8:2b:78:4a:1f:4d:65:a7:37:4f:
                    5c:c5:34:4e:f4:4d:b1:31:a2:a7:6c:e9:1e:34:51:
                    8c:3e:53:ee:e2:16:13:3f:9c:69:fe:98:cc:6e:3c:
                    c2:d0:de:9f:47:aa:ec:75:ca:f0:c6:6e:27:89:13:
                    92:09:4d:9e:8f:5b:66:f3:bf:95:5b:17:12:f4:98:
                    b7:9c:58:af:9a:b7:f8:f0:a6:7c:9c:88:98:7c:d0:
                    92:a0:df:cb:40:45:e0:66:22:81:7a:13:6a:23:18:
                    a9:32:9f:ef:33:6a:65:61:10:29:ba:9f:9b:c6:42:
                    36:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:D1:F6:9B:4E:62:C7:98:38:CD:9B:FA:8A:53:F5:1A:5A:3D:F9:B0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/cf04cbca-d716-3b49-a2f2-9064a913b8bf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.1.178.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         58:23:a1:99:7e:4a:82:fa:27:0b:a3:77:6c:80:9a:25:fc:96:
         23:ad:2f:84:7e:76:10:3b:bf:1b:3b:78:7b:4c:2d:7e:48:d9:
         4d:7d:bb:d7:69:de:6d:c8:c8:18:f6:88:01:20:19:0f:52:7e:
         a2:e4:40:50:6c:f1:52:80:e0:5e:25:8b:b7:b2:26:0a:63:7a:
         3c:74:95:5f:76:70:94:5b:0e:24:00:0d:35:ca:ee:f7:2a:b2:
         4e:fa:e9:15:ce:cb:ca:54:8b:2a:5e:51:7b:b1:09:a6:a0:d6:
         f0:5c:d9:a8:b1:b4:77:c3:c2:52:9d:cb:58:de:c6:f2:98:a1:
         1e:fd:af:0d:8f:b4:61:c6:ba:82:99:6e:ee:bc:7e:14:53:d7:
         d3:4e:bf:5c:9a:c0:ea:3e:f0:f0:c2:04:0b:ef:c2:e5:05:8d:
         dd:82:f5:79:df:0b:2e:1b:67:b0:1a:39:83:31:34:14:d6:f3:
         3a:10:8a:62:1d:89:36:68:ab:c2:bf:fc:46:94:22:ec:cf:72:
         61:59:8a:63:a6:30:1f:88:55:e5:e4:9f:78:74:8e:93:11:85:
         ec:86:f6:bd:47:9b:49:2c:56:92:02:57:eb:fe:c4:12:29:53:
         2d:42:93:9f:03:74:9f:d7:2c:ee:eb:4b:30:1e:2d:d1:ba:e8:
         a9:af:5d:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 2 23:07:24 2026 by rpki-client