Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/eb29b293-11e2-3816-bb99-b0a2aac1adae.roa
File:                     eb29b293-11e2-3816-bb99-b0a2aac1adae.roa (raw, json)
Hash identifier:          eXYD7qEywAuav3SByv9nJE3Bin//dx0Z08VVq2gLNmY=
Subject key identifier:   3F:83:66:57:8C:AF:33:E1:B1:30:18:B5:85:C6:E4:82:4E:E2:E2:7C
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F4328584EB7AA5CFD947B02A46C6951F0
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/eb29b293-11e2-3816-bb99-b0a2aac1adae.roa
Signing time:             Mon 03 Aug 2026 19:44:42 +0000
ROA not before:           Mon 03 Aug 2026 19:44:42 +0000
ROA not after:            Sun 01 Nov 2026 20:44:42 +0000
asID:                     6079
IP address blocks:        166.1.204.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 05 Aug 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:b7:aa:5c:fd:94:7b:02:a4:6c:69:51:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Aug  3 19:44:42 2026 GMT
            Not After : Nov  1 20:44:42 2026 GMT
        Subject: CN=c3bce40b-2164-4dc3-aad0-0d5034ac9c0a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:24:37:81:a2:e2:6c:34:15:05:2d:2a:2e:07:
                    c4:8f:52:b6:ed:a3:9a:39:96:5a:39:a8:be:35:ae:
                    dc:1f:6e:1d:88:59:ea:37:13:14:f0:6a:d5:a9:c4:
                    54:2a:dc:53:7e:0a:e8:a8:7f:19:65:5c:9a:aa:59:
                    7e:8b:de:c2:3b:80:8b:eb:21:56:8a:a6:1d:86:e2:
                    9f:11:92:d2:9a:67:cf:5e:f2:d3:03:97:c0:37:a0:
                    2b:c9:e8:30:ce:75:d1:5c:f1:7e:98:aa:4c:bf:6e:
                    a4:78:f0:be:07:04:26:31:cd:b3:77:5a:45:89:91:
                    ba:ce:e9:e8:ff:b7:a6:17:4d:83:e9:6d:3c:7f:f0:
                    31:dd:28:5b:40:e1:77:e9:01:90:20:9c:11:0f:c8:
                    eb:16:23:ea:db:41:87:9a:14:76:f0:82:7f:2a:4e:
                    33:4e:d0:1d:e9:e9:76:0d:de:d7:06:52:91:7f:86:
                    78:d8:aa:bf:3a:38:7f:8a:fe:a8:11:56:13:17:ce:
                    f9:0b:66:58:22:b1:5f:51:79:c0:3d:84:7d:16:fb:
                    d2:0c:3d:74:54:5a:96:c0:d8:20:d7:56:a7:09:ce:
                    38:b9:5b:ad:49:6c:98:8b:a2:2c:19:12:69:eb:ce:
                    1c:9e:63:57:91:9b:76:cb:1c:06:26:b9:69:4f:74:
                    eb:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:83:66:57:8C:AF:33:E1:B1:30:18:B5:85:C6:E4:82:4E:E2:E2:7C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/eb29b293-11e2-3816-bb99-b0a2aac1adae.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.1.204.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7a:d1:75:8a:e8:db:aa:1b:a7:eb:07:2e:d2:3b:20:cc:ba:7a:
         a2:2b:d5:5c:bc:fe:09:46:f4:36:d4:66:55:f3:9c:19:be:74:
         ee:d3:e5:bc:dc:d5:b4:ae:bf:4e:05:a1:41:d0:4d:67:ee:dc:
         ac:19:65:a6:1a:5e:c3:15:8f:b1:39:cb:79:b1:b0:d6:be:23:
         20:ec:af:54:be:6b:50:f7:06:b5:5a:2d:b8:35:6a:70:cb:9d:
         5c:6c:c8:44:54:83:19:bf:02:19:7a:7b:94:91:e6:4b:7e:f6:
         5e:fe:67:45:13:13:05:48:51:65:a1:0b:11:da:0c:96:bc:ca:
         51:ea:fa:6f:bd:a4:1b:a3:ff:cb:e1:52:a5:2d:de:e9:cb:22:
         b5:44:4a:4d:7e:ee:f3:55:64:36:06:d6:b2:54:15:1b:38:a5:
         18:fe:12:61:fe:c5:4a:2a:81:b0:0f:5b:1d:82:f1:87:63:b5:
         e3:2f:ae:63:f0:40:25:bd:0f:08:0d:05:5e:11:51:ca:9f:31:
         82:84:82:97:83:86:55:4c:33:fb:8d:9b:47:54:46:91:cc:cd:
         9e:11:4c:fe:7f:08:ff:4f:31:f3:95:fe:97:4f:d8:a4:bb:91:
         85:53:23:54:73:69:85:ef:99:fc:a6:fc:16:04:cb:70:12:a7:
         26:ef:a9:91
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE63qlz9lHsCpGxpUfAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjZkZWEyYTUtODM3ZC00NmQ4LThmOGUtOTQ0N2VjZTIw
YzA5MB4XDTI2MDgwMzE5NDQ0MloXDTI2MTEwMTIwNDQ0MlowLzEtMCsGA1UEAxMk
YzNiY2U0MGItMjE2NC00ZGMzLWFhZDAtMGQ1MDM0YWM5YzBhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyyQ3gaLibDQVBS0qLgfEj1K27aOaOZZaOai+
Na7cH24diFnqNxMU8GrVqcRUKtxTfgroqH8ZZVyaqll+i97CO4CL6yFWiqYdhuKf
EZLSmmfPXvLTA5fAN6AryegwznXRXPF+mKpMv26kePC+BwQmMc2zd1pFiZG6zuno
/7emF02D6W08f/Ax3ShbQOF36QGQIJwRD8jrFiPq20GHmhR28IJ/Kk4zTtAd6el2
Dd7XBlKRf4Z42Kq/Ojh/iv6oEVYTF875C2ZYIrFfUXnAPYR9FvvSDD10VFqWwNgg
11anCc44uVutSWyYi6IsGRJp684cnmNXkZt2yxwGJrlpT3TrawIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFD+DZleMrzPhsTAYtYXG5IJO4uJ8MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRl
YTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3ZWNlMjBjMDkvZWIyOWIyOTMtMTFlMi0z
ODE2LWJiOTktYjBhMmFhYzFhZGFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjZkZWEyYTUtODM3ZC00NmQ4LThm
OGUtOTQ0N2VjZTIwYzA5LzY2ZGVhMmE1LTgzN2QtNDZkOC04ZjhlLTk0NDdlY2Uy
MGMwOS5jcmwwHwYDVR0jBBgwFoAUw4ati/QZSzWUJJuQup2AEcIIcckwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRlYTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3
ZWNlMjBjMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBpgHMMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHrRdYro26obp+sHLtI7IMy6eqIr1Vy8/glG9DbUZlXznBm+dO7T5bzc
1bSuv04FoUHQTWfu3KwZZaYaXsMVj7E5y3mxsNa+IyDsr1S+a1D3BrVaLbg1anDL
nVxsyERUgxm/Ahl6e5SR5kt+9l7+Z0UTEwVIUWWhCxHaDJa8ylHq+m+9pBuj/8vh
UqUt3unLIrVESk1+7vNVZDYG1rJUFRs4pRj+EmH+xUoqgbAPWx2C8YdjteMvrmPw
QCW9DwgNBV4RUcqfMYKEgpeDhlVMM/uNm0dURpHMzZ4RTP5/CP9PMfOV/pdP2KS7
kYVTI1RzaYXvmfym/BYEy3ASpybvqZE=
-----END CERTIFICATE-----
Generated at Tue Aug 4 13:33:49 2026 by rpki-client