Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/d1ba6cd1-63bb-350d-b3ad-d0a788c6d8b3.roa
File:                     d1ba6cd1-63bb-350d-b3ad-d0a788c6d8b3.roa (raw, json)
Hash identifier:          DFgksaSDZKlQAvaXxlqTcAxBzyrXq03RV8rH719jsJc=
Subject key identifier:   87:D1:3A:DB:FB:D4:69:75:49:A6:85:17:62:20:8A:05:20:36:A3:2C
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F4328584DAE4FCE15266E59C877BD6B18
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/d1ba6cd1-63bb-350d-b3ad-d0a788c6d8b3.roa
Signing time:             Thu 30 Apr 2026 18:33:01 +0000
ROA not before:           Thu 30 Apr 2026 18:33:01 +0000
ROA not after:            Wed 29 Jul 2026 18:33:01 +0000
asID:                     44559
IP address blocks:        166.1.165.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 05 May 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:ae:4f:ce:15:26:6e:59:c8:77:bd:6b:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Apr 30 18:33:01 2026 GMT
            Not After : Jul 29 18:33:01 2026 GMT
        Subject: CN=8bdc31aa-3c9c-440c-a24c-71ad4c45a91d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:e3:47:ce:20:51:fe:a8:53:80:47:4a:34:f5:
                    e7:a8:99:3f:bb:d5:14:d9:07:45:04:8e:37:81:bd:
                    49:78:dd:8c:e4:10:e5:ec:0d:07:79:12:07:c5:3b:
                    91:09:55:78:79:0e:87:de:e7:dc:0b:77:da:ec:8f:
                    90:c3:df:a0:c9:46:bc:35:4e:35:18:95:9d:8a:62:
                    78:d4:15:3a:7f:64:f9:34:23:30:ff:6a:28:96:19:
                    35:f1:ae:a5:28:18:54:97:6f:08:f4:59:6a:64:7e:
                    75:af:48:3d:93:ae:52:06:aa:6f:fb:28:4f:41:7b:
                    3c:93:72:ea:f9:73:67:09:b9:bd:e1:2e:80:a6:c3:
                    13:c2:5e:8d:cf:d4:80:3e:6a:60:a7:4d:1f:65:89:
                    cb:2a:f9:a2:c2:ce:d8:c1:b3:17:d1:11:86:4f:bf:
                    6d:1c:6f:b1:f7:7e:45:b5:c4:b4:04:96:14:f5:14:
                    5d:0b:f2:3b:4e:5d:ba:af:53:46:26:15:74:ab:f8:
                    86:2d:4a:f3:ae:58:d9:32:2c:d4:16:7c:10:7e:af:
                    3f:b3:1f:c2:d4:dc:5e:2f:f9:57:16:f8:6d:14:31:
                    f5:67:91:1d:d5:db:30:5a:a6:64:76:8b:2e:d3:a0:
                    e0:2f:f2:3f:6c:2c:86:e8:20:fc:17:e5:1d:8d:ee:
                    6f:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:D1:3A:DB:FB:D4:69:75:49:A6:85:17:62:20:8A:05:20:36:A3:2C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/d1ba6cd1-63bb-350d-b3ad-d0a788c6d8b3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.1.165.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         18:cb:df:98:e0:b6:50:74:c2:0c:ac:e1:d1:82:dc:18:33:56:
         26:5e:37:d5:df:83:ca:5f:f8:1e:5f:62:11:91:59:84:bd:37:
         7f:be:5e:bf:04:28:7b:a4:cf:b2:6d:8a:f7:90:4f:b3:ed:e4:
         be:7a:6f:95:c4:44:90:8a:46:5d:96:5f:50:cd:09:a4:a3:d7:
         bf:26:7b:85:2e:bd:01:8c:85:ba:5a:f6:33:7a:ae:d6:f5:88:
         9c:58:41:53:80:bc:9b:87:ea:5e:9e:86:6e:4b:ab:eb:3a:1b:
         4e:6b:95:56:04:33:36:62:1c:7f:8e:26:08:89:fb:7c:e3:83:
         b8:ed:d7:0a:9f:2c:33:01:df:e8:24:11:7d:ea:51:26:d2:32:
         d9:24:bc:a5:98:c8:3b:3d:19:04:c4:72:9e:67:16:04:95:ab:
         d4:3b:78:9e:58:b5:cf:c8:aa:01:00:b9:fd:03:69:47:7d:79:
         ae:ba:1b:ad:6c:47:cd:b6:36:31:9f:c9:09:f7:f2:7f:94:04:
         8a:08:d6:2f:5c:92:b3:a1:9f:b0:d8:66:26:44:57:c4:0b:e3:
         2f:41:81:52:d2:b8:ca:3d:1b:65:74:49:ea:3a:0d:03:75:f6:
         01:04:08:03:19:74:dc:60:70:0a:78:2c:63:8e:fa:93:1c:49:
         e7:71:7d:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 2 23:07:23 2026 by rpki-client