Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/ff080c2a-d34c-36b8-adce-05f2715f0416.roa
File:                     ff080c2a-d34c-36b8-adce-05f2715f0416.roa (raw, json)
Hash identifier:          /tN94T5JMKI/G3j7ZbQhloIibays4ujNgREDMeN+nR8=
Subject key identifier:   2F:CE:B8:EA:2A:FB:26:70:0F:53:4A:34:BA:CD:72:E4:EA:03:05:34
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F4328584F57681D10460EDBDF82C4ED80
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/ff080c2a-d34c-36b8-adce-05f2715f0416.roa
Signing time:             Wed 30 Sep 2026 01:00:12 +0000
ROA not before:           Wed 30 Sep 2026 01:00:12 +0000
ROA not after:            Tue 29 Dec 2026 02:00:12 +0000
asID:                     2914
IP address blocks:        166.1.104.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 26 Oct 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:57:68:1d:10:46:0e:db:df:82:c4:ed:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Sep 30 01:00:12 2026 GMT
            Not After : Dec 29 02:00:12 2026 GMT
        Subject: CN=8a961a2b-cdb4-470a-b855-fa3e80dae3f3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:26:48:0c:b0:81:b3:25:59:77:c7:22:37:1f:
                    20:dd:76:18:1d:9d:47:3e:d4:80:54:e4:02:27:98:
                    72:a3:cb:3d:8e:79:e4:cb:78:af:7d:6d:3f:5e:17:
                    96:99:b7:97:af:92:49:84:9c:ba:ba:47:5a:da:b3:
                    31:fc:95:58:62:87:ee:40:cb:92:cb:d8:91:aa:64:
                    cf:f3:19:b4:1a:29:ec:89:50:e8:1f:d4:c7:39:59:
                    6d:82:86:b1:fc:10:cd:52:19:0c:6c:a1:de:b1:b2:
                    e2:b2:ea:81:50:a9:e4:ae:55:e2:cc:d8:02:dd:f5:
                    fc:72:c4:cb:d5:1a:f8:f3:62:ab:a2:e8:1a:26:b5:
                    cc:fa:aa:72:2a:52:84:63:2f:46:43:8b:ef:2b:af:
                    e1:5a:a3:b4:53:69:7c:cd:a2:8e:47:da:4b:06:55:
                    81:fa:cb:76:c4:1a:f2:20:18:8b:fc:a7:83:97:0e:
                    cb:50:62:7e:3c:d5:89:04:f3:b7:c9:b6:78:96:06:
                    16:7f:61:01:f1:07:a5:77:c6:7c:13:8b:f5:ce:09:
                    46:38:b4:a0:0b:a6:59:1d:6d:18:96:05:c2:31:55:
                    fa:32:44:e2:04:2f:bb:23:44:c1:33:ed:a3:ad:87:
                    e9:d2:ed:e0:16:33:20:b3:dc:23:80:79:2f:29:e6:
                    82:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:CE:B8:EA:2A:FB:26:70:0F:53:4A:34:BA:CD:72:E4:EA:03:05:34
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/ff080c2a-d34c-36b8-adce-05f2715f0416.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.1.104.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ae:66:c2:8d:a4:f6:76:3f:5c:05:ea:06:21:cc:93:68:d4:37:
         9e:7a:52:58:11:d1:ab:99:07:cf:36:39:27:25:04:dd:f3:17:
         e3:45:27:0c:7f:29:56:cb:8b:0c:9d:62:e8:54:15:b0:f4:1e:
         01:9b:0f:b1:12:16:f5:a9:78:ba:71:01:cf:f4:c0:a9:b6:85:
         36:59:7b:23:f8:25:92:4a:84:3d:41:71:23:96:ab:79:2e:06:
         c6:27:83:04:9b:d2:a3:55:34:d8:4e:77:e4:ce:cd:87:50:4c:
         64:69:29:cb:ee:97:5a:e8:95:e5:08:c8:ae:36:c2:77:12:41:
         3f:5d:1b:d7:5d:bf:9d:a4:62:49:98:ce:28:d1:4a:a2:50:28:
         60:9d:2d:6f:d2:b8:e3:5f:f1:ce:d8:72:ea:e0:ad:9d:9d:24:
         e7:a1:9c:fd:29:e5:85:90:b2:cf:ee:5d:9d:c6:e1:2e:2a:12:
         72:4c:1b:bf:c5:58:31:07:80:9b:91:07:7c:2b:c2:b8:25:59:
         70:07:09:18:c1:97:ed:b1:7c:ee:c9:39:91:4d:ae:14:74:0a:
         d1:ef:92:b4:37:68:0f:b6:4a:ca:49:54:5d:98:e5:d8:1c:16:
         02:e7:1d:c9:23:20:bb:34:52:cf:19:7b:cd:7f:07:84:d1:11:
         48:d8:df:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 24 15:48:27 2026 by rpki-client