Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/e4386904-d0b4-3d8d-a775-6c8a39736270.roa
File:                     e4386904-d0b4-3d8d-a775-6c8a39736270.roa (raw, json)
Hash identifier:          lfuaJCd14lKGkgyt8rvbQE4qMviARyWxSoFjRU/EGEc=
Subject key identifier:   BC:38:B6:C4:AF:12:8B:45:EE:FA:B0:2D:D2:0E:7D:05:C1:21:AB:0A
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F4328584E5E1CAD0DE9F9A11D4A7925A0
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/e4386904-d0b4-3d8d-a775-6c8a39736270.roa
Signing time:             Thu 02 Jul 2026 17:52:17 +0000
ROA not before:           Thu 02 Jul 2026 17:52:17 +0000
ROA not after:            Wed 30 Sep 2026 17:52:17 +0000
asID:                     401152
IP address blocks:        166.1.5.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 04 Jul 2026 08:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:5e:1c:ad:0d:e9:f9:a1:1d:4a:79:25:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Jul  2 17:52:17 2026 GMT
            Not After : Sep 30 17:52:17 2026 GMT
        Subject: CN=b34a304b-ffa9-49b7-b57c-89545d4dbafb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:c5:52:ed:94:2a:3c:04:d8:60:df:9c:9c:02:
                    74:26:ba:73:e1:cb:6d:de:59:a8:d0:c0:c2:fd:77:
                    eb:e2:fb:bf:a8:d7:7c:7f:e5:1b:8b:fd:10:fb:62:
                    50:de:db:49:1e:d6:ac:25:65:f5:ae:8e:01:f5:ed:
                    6e:95:25:7f:cc:72:ce:8b:bf:81:8e:bb:2a:2b:6d:
                    08:d1:4b:cb:32:34:67:c3:62:8b:fa:68:c6:06:94:
                    54:f5:3d:cc:f9:3e:5f:32:6f:93:41:ce:f4:91:a2:
                    64:f4:e9:55:9b:6f:8c:20:49:fa:d2:31:2a:a9:4f:
                    8f:73:b1:9b:9c:85:47:e0:1b:33:e2:66:c2:a8:ef:
                    ff:8c:91:a1:6a:a4:f9:f6:d8:de:7f:de:75:da:72:
                    f3:50:a9:74:1c:0e:d5:5c:bd:3d:a7:33:68:c0:d0:
                    89:1b:7b:a3:89:19:82:b2:c5:4e:cb:4c:77:c6:f6:
                    23:97:20:ce:20:2c:17:2e:34:cf:8b:52:c8:98:a4:
                    09:d3:bf:8f:be:64:e0:42:cf:98:1c:ee:5b:60:ed:
                    1b:e4:f4:42:06:1e:45:94:f9:f7:f2:c8:3b:46:32:
                    f7:c3:8d:51:ee:2f:90:25:0a:16:d2:66:77:33:55:
                    ec:c7:4f:eb:62:ef:ab:b3:cb:bb:9f:dc:5f:fd:dc:
                    27:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:38:B6:C4:AF:12:8B:45:EE:FA:B0:2D:D2:0E:7D:05:C1:21:AB:0A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/e4386904-d0b4-3d8d-a775-6c8a39736270.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.1.5.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         81:5e:b8:7e:9c:1b:5f:a4:24:76:3c:04:94:d6:86:8e:f8:e8:
         a2:a4:a5:76:99:ef:e8:ad:e4:c3:fb:16:98:12:ea:28:c5:24:
         76:31:e7:95:8d:ef:73:ea:7b:ee:9f:19:69:84:13:04:34:3e:
         8c:3c:94:72:91:d9:f3:6f:1b:40:73:e5:9b:5e:8e:91:3c:92:
         73:76:b7:c6:b8:cf:76:d8:b1:58:67:b1:c1:c5:c5:47:f3:6d:
         a8:5c:92:74:d0:e8:f9:d2:83:9a:c8:5e:fe:ce:d7:01:15:d0:
         25:56:88:e7:96:29:9f:f6:13:35:91:3d:67:50:bb:3e:a4:24:
         82:80:d2:98:ef:74:1a:ea:08:8d:c6:30:67:2c:70:f9:55:06:
         bf:ef:c5:1e:89:dd:5f:18:b5:7e:03:74:20:72:72:46:2d:9a:
         b7:f8:9b:05:d5:49:3a:57:7a:f9:06:ad:4c:21:21:67:cc:5e:
         7b:55:4b:6e:0d:dd:f0:5c:02:e1:23:49:81:8c:a3:4e:c3:0a:
         02:37:8d:05:1c:da:0e:3d:b9:fa:78:07:3d:ed:7c:50:04:4e:
         34:40:68:cc:9b:1d:d4:1c:41:b1:50:7b:b2:bd:6a:97:6f:9e:
         dc:35:56:9f:f0:a4:bb:1b:5d:95:ff:bc:58:d3:06:96:20:07:
         4b:4e:3e:66
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5eHK0N6fmhHUp5JaAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjZkZWEyYTUtODM3ZC00NmQ4LThmOGUtOTQ0N2VjZTIw
YzA5MB4XDTI2MDcwMjE3NTIxN1oXDTI2MDkzMDE3NTIxN1owLzEtMCsGA1UEAxMk
YjM0YTMwNGItZmZhOS00OWI3LWI1N2MtODk1NDVkNGRiYWZiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn8VS7ZQqPATYYN+cnAJ0Jrpz4ctt3lmo0MDC
/Xfr4vu/qNd8f+Ubi/0Q+2JQ3ttJHtasJWX1ro4B9e1ulSV/zHLOi7+BjrsqK20I
0UvLMjRnw2KL+mjGBpRU9T3M+T5fMm+TQc70kaJk9OlVm2+MIEn60jEqqU+Pc7Gb
nIVH4Bsz4mbCqO//jJGhaqT59tjef9512nLzUKl0HA7VXL09pzNowNCJG3ujiRmC
ssVOy0x3xvYjlyDOICwXLjTPi1LImKQJ07+PvmTgQs+YHO5bYO0b5PRCBh5FlPn3
8sg7RjL3w41R7i+QJQoW0mZ3M1Xsx0/rYu+rs8u7n9xf/dwnTQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFLw4tsSvEotF7vqwLdIOfQXBIasKMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRl
YTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3ZWNlMjBjMDkvZTQzODY5MDQtZDBiNC0z
ZDhkLWE3NzUtNmM4YTM5NzM2MjcwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjZkZWEyYTUtODM3ZC00NmQ4LThm
OGUtOTQ0N2VjZTIwYzA5LzY2ZGVhMmE1LTgzN2QtNDZkOC04ZjhlLTk0NDdlY2Uy
MGMwOS5jcmwwHwYDVR0jBBgwFoAUw4ati/QZSzWUJJuQup2AEcIIcckwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRlYTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3
ZWNlMjBjMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQApgEFMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIFeuH6cG1+kJHY8BJTWho746KKkpXaZ7+it5MP7FpgS6ijFJHYx55WN
73Pqe+6fGWmEEwQ0Pow8lHKR2fNvG0Bz5ZtejpE8knN2t8a4z3bYsVhnscHFxUfz
bahcknTQ6PnSg5rIXv7O1wEV0CVWiOeWKZ/2EzWRPWdQuz6kJIKA0pjvdBrqCI3G
MGcscPlVBr/vxR6J3V8YtX4DdCByckYtmrf4mwXVSTpXevkGrUwhIWfMXntVS24N
3fBcAuEjSYGMo07DCgI3jQUc2g49ufp4Bz3tfFAETjRAaMybHdQcQbFQe7K9apdv
ntw1Vp/wpLsbXZX/vFjTBpYgB0tOPmY=
-----END CERTIFICATE-----
Generated at Fri Jul 3 02:26:52 2026 by rpki-client