Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/f135c2aa-59b3-3ec4-acf1-368d7833a55d.roa
File:                     f135c2aa-59b3-3ec4-acf1-368d7833a55d.roa (raw, json)
Hash identifier:          IlCAOKa4HBrpHKV/kqKjAft7KEdSMAebSvADQ8Woi5U=
Subject key identifier:   FF:70:A5:91:41:A3:A3:31:B6:D9:4B:F8:DF:A7:36:7F:CA:70:7F:D0
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F4328584D5D47B30D63A203AB13B98C80
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/f135c2aa-59b3-3ec4-acf1-368d7833a55d.roa
Signing time:             Wed 01 Apr 2026 17:56:13 +0000
ROA not before:           Wed 01 Apr 2026 17:56:13 +0000
ROA not after:            Tue 30 Jun 2026 17:56:13 +0000
asID:                     401152
IP address blocks:        166.1.64.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 05 Apr 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:5d:47:b3:0d:63:a2:03:ab:13:b9:8c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Apr  1 17:56:13 2026 GMT
            Not After : Jun 30 17:56:13 2026 GMT
        Subject: CN=c579f8ea-34fc-4e30-be0e-c28b5cc83bee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:e7:3f:ad:47:c7:36:60:b4:3c:a6:9d:69:0c:
                    a7:f2:52:39:18:ae:12:2d:e4:9a:89:23:b8:0c:fc:
                    ec:3d:fb:a5:8a:e4:f4:f6:49:98:fd:3f:c3:52:14:
                    6d:10:a3:1e:f4:3b:43:57:65:00:a8:6b:1f:17:bc:
                    a5:ef:f7:b0:e5:d4:db:79:70:3a:34:92:01:b7:e5:
                    42:de:73:42:b0:ff:54:df:2c:0b:4f:0d:64:dd:eb:
                    3e:fb:23:c9:e8:12:3f:47:f9:2f:26:49:ab:3e:20:
                    aa:09:61:1d:6e:20:9e:b7:83:44:c8:c2:7d:8e:05:
                    a1:a5:4e:e4:b1:ef:d8:0c:2b:37:72:76:6a:77:1f:
                    c2:1c:30:6a:d0:8e:fd:f9:e1:de:50:08:e7:c4:78:
                    f9:81:9d:8c:a7:27:33:5e:8e:77:b8:bf:7f:b4:66:
                    3b:ce:94:4b:24:3e:64:35:e4:6c:f1:ae:49:f4:4f:
                    34:cb:7a:6b:ec:c6:e9:08:08:69:90:88:5f:47:01:
                    99:51:0e:dd:ea:32:9b:41:04:b0:46:01:21:2a:51:
                    2d:b1:57:57:6b:cf:58:f1:8b:91:64:9a:56:f3:37:
                    09:60:5c:26:14:fc:e9:df:a4:1a:67:05:bc:47:a5:
                    d7:a5:6d:39:4d:33:26:ed:7b:1f:f3:e1:c5:ef:24:
                    4e:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:70:A5:91:41:A3:A3:31:B6:D9:4B:F8:DF:A7:36:7F:CA:70:7F:D0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/f135c2aa-59b3-3ec4-acf1-368d7833a55d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.1.64.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         68:3e:38:04:61:ba:94:b4:46:dd:37:de:f6:5d:39:fa:b8:68:
         15:7b:a2:ae:70:5e:59:4d:19:19:f6:02:ca:44:7e:0a:c6:98:
         36:f7:2f:2d:ff:e1:03:ce:b2:be:70:70:3d:41:be:04:77:3c:
         c1:cd:a9:42:98:03:91:29:5b:0b:72:a4:67:a9:ef:2a:de:fa:
         36:f1:e8:70:b1:6a:14:d9:93:8a:8e:64:67:a0:62:aa:99:1d:
         06:6a:b3:26:38:44:17:57:88:9b:27:f5:49:56:62:b3:51:de:
         a7:42:e9:15:7b:69:64:96:46:82:23:9d:96:57:6e:77:3e:f4:
         41:89:ea:37:69:a1:1c:92:96:16:65:bb:64:26:5f:78:38:fe:
         f7:ba:9b:02:70:86:6f:fd:30:4c:9d:38:1b:f7:d5:92:8a:bd:
         f3:61:e5:64:c7:8b:db:6c:ae:32:f7:ab:e9:f7:08:b3:9a:7b:
         22:f6:c2:86:1a:e4:36:8f:e6:86:7e:ad:f0:7d:5f:29:d3:97:
         6b:ea:d2:fe:60:73:a2:c5:bd:ba:5b:53:cf:27:fd:25:a8:1a:
         bf:17:50:c3:65:d1:ba:ad:ea:e3:45:f7:f2:f6:64:da:9e:a1:
         d9:5b:65:27:49:70:77:dd:1c:1f:24:83:f8:6a:df:c4:31:9d:
         18:f9:7e:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 2 22:33:22 2026 by rpki-client