Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/d223d205-c9ae-3fea-b2dd-eaf31ab6e6a3.roa
File:                     d223d205-c9ae-3fea-b2dd-eaf31ab6e6a3.roa (raw, json)
Hash identifier:          BRXfN+8UsbPEw8+Ov2EhI8lcgIxgM87JRnZrhF8mxT4=
Subject key identifier:   D3:24:A8:A0:25:25:65:D5:F3:6A:12:C9:B2:1A:CF:C6:CF:70:03:A9
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F4328584BA932910E2E8A6872EEBBC880
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/d223d205-c9ae-3fea-b2dd-eaf31ab6e6a3.roa
Signing time:             Mon 27 Oct 2025 13:00:38 +0000
ROA not before:           Mon 27 Oct 2025 13:00:38 +0000
ROA not after:            Sun 25 Jan 2026 14:00:38 +0000
asID:                     401152
IP address blocks:        166.0.204.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 04 Nov 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:a9:32:91:0e:2e:8a:68:72:ee:bb:c8:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Oct 27 13:00:38 2025 GMT
            Not After : Jan 25 14:00:38 2026 GMT
        Subject: CN=b41df78b-1be5-4366-8d22-29aa1116871a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:83:f8:ae:55:85:bc:4e:92:35:34:01:bf:56:
                    15:8f:eb:18:04:1c:a8:f2:ef:b9:c2:76:3e:f3:e1:
                    27:55:45:76:89:3f:b9:79:44:48:68:bf:f4:d6:53:
                    3b:01:3e:a8:95:95:7c:7e:17:f6:0c:53:c4:63:a2:
                    d6:52:0b:c6:0e:2d:28:ee:5e:08:ac:c0:04:8e:59:
                    40:d3:f9:0f:84:73:60:41:cf:b0:38:7e:c4:6b:64:
                    82:39:e0:9e:8a:2e:21:2c:4e:b1:d2:86:d5:e0:a1:
                    0a:46:04:04:dd:5d:4c:55:fb:70:3e:41:62:61:31:
                    25:79:a2:fc:9a:74:02:22:7a:9f:72:37:ab:3a:f4:
                    5c:8b:44:72:40:bc:2a:51:c2:f0:9d:a2:e7:63:a6:
                    69:2c:de:1f:89:05:75:a3:87:41:1a:c5:df:bd:87:
                    78:41:b1:ec:dc:76:de:c5:af:6a:bf:7a:61:88:7a:
                    f8:3d:49:f9:82:64:81:9c:33:98:a4:34:cb:e2:40:
                    b3:3a:87:75:c8:a1:ef:03:4a:5c:8a:f0:b6:8c:29:
                    af:61:68:ca:82:3b:4a:36:db:4e:1b:09:2a:b6:ed:
                    50:4e:6b:8d:10:d6:d5:43:ee:38:1c:61:0b:dd:36:
                    d9:f4:b7:db:cd:24:30:9e:38:df:7f:27:f9:14:53:
                    af:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:24:A8:A0:25:25:65:D5:F3:6A:12:C9:B2:1A:CF:C6:CF:70:03:A9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/d223d205-c9ae-3fea-b2dd-eaf31ab6e6a3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.0.204.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         93:76:ef:51:3b:3a:81:33:64:00:a4:53:6f:94:27:7b:65:e7:
         9b:39:db:f0:4b:cf:c3:52:b3:17:18:6a:80:0d:5e:26:0c:1f:
         be:d4:07:9d:00:2f:bb:f3:97:0c:89:66:03:14:70:f8:bd:da:
         cf:c0:34:44:b1:64:26:7b:9a:71:db:2c:c9:39:87:69:84:00:
         02:33:fb:21:1c:c1:51:60:c5:87:fe:1e:37:78:6c:e8:3a:40:
         78:a2:f2:2f:67:48:a9:10:19:15:02:0d:47:ed:5a:ea:a2:ea:
         29:7f:90:3e:47:9b:bb:e5:fa:ee:75:4c:69:66:c9:8a:ec:b0:
         f3:84:12:cb:9f:f5:fe:2d:a0:9f:74:e2:84:e9:71:fc:6e:1e:
         33:9e:99:a3:69:85:ad:02:83:77:2d:6e:a6:cf:ff:64:08:eb:
         91:42:80:38:d8:36:96:cc:32:6f:eb:f1:0d:47:c3:9c:d9:4f:
         ea:c9:0c:5b:cd:f3:da:90:a4:fb:f3:79:02:cc:b6:d8:93:d2:
         1a:a5:69:48:53:58:21:b0:78:a5:5a:d0:e6:a9:f6:5d:18:20:
         5d:5b:14:9c:0c:9f:6e:b6:80:30:3f:cd:e0:eb:f5:ce:be:fd:
         c2:d0:bb:5c:40:3c:45:c0:12:0f:59:c0:d4:b6:20:45:a7:c1:
         f7:e6:c1:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 2 16:46:53 2025 by rpki-client