Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d/e2841b4a-900c-3f3a-8c22-66b1fbfa6ccc.roa
File:                     e2841b4a-900c-3f3a-8c22-66b1fbfa6ccc.roa (raw, json)
Hash identifier:          7+9gVQ18l+Xf/l8kH7bHwN2oNxI7kn89aAg4lnswrrs=
Subject key identifier:   5D:E8:63:B2:1A:EA:94:0F:E6:50:77:8C:90:28:4F:93:EF:3B:BA:8A
Certificate issuer:       /CN=f8e7a246-465c-42e8-8be1-af167b20b04d
Certificate serial:       010D0C9F4328584E0005DD4D8D660AECE52A2500
Authority key identifier: 47:E2:47:E2:08:C3:82:0A:55:A4:99:5E:E0:10:DE:78:D2:94:F1:CE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d/e2841b4a-900c-3f3a-8c22-66b1fbfa6ccc.roa
Signing time:             Sat 30 May 2026 01:00:10 +0000
ROA not before:           Sat 30 May 2026 01:00:10 +0000
ROA not after:            Fri 28 Aug 2026 01:00:10 +0000
asID:                     399091
IP address blocks:        107.166.112.0/22 maxlen: 24
                          107.166.116.0/22 maxlen: 24
                          107.166.120.0/22 maxlen: 24
                          107.166.124.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d/f8e7a246-465c-42e8-8be1-af167b20b04d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d/f8e7a246-465c-42e8-8be1-af167b20b04d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:00:05:dd:4d:8d:66:0a:ec:e5:2a:25:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f8e7a246-465c-42e8-8be1-af167b20b04d
        Validity
            Not Before: May 30 01:00:10 2026 GMT
            Not After : Aug 28 01:00:10 2026 GMT
        Subject: CN=1ede7ea9-34f9-4f94-9d19-2fed764b50cd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:19:80:b0:24:1d:83:12:f3:15:08:dc:75:32:
                    f8:3e:f1:b4:49:fe:5d:33:78:68:fb:35:81:72:07:
                    b4:46:31:3a:a7:b9:49:a2:e1:b4:2c:d0:8d:e8:2a:
                    e0:20:31:df:26:5e:25:1c:bf:22:15:b2:18:57:57:
                    92:91:86:56:3f:68:df:a5:22:18:8a:1f:82:0e:47:
                    94:f2:3a:8d:69:c1:21:78:b7:8b:bf:61:87:a7:65:
                    b2:b3:6c:1a:18:a7:38:68:07:af:e4:5d:ce:01:d1:
                    40:03:9c:32:25:01:bd:55:d5:e0:14:99:27:dd:77:
                    22:64:7b:3b:c7:f1:36:81:78:60:1c:bd:b6:bf:a7:
                    7f:1a:65:9d:58:e2:97:66:47:4f:99:fd:38:cd:a2:
                    e9:4a:33:10:db:c4:a2:4e:c5:36:6a:21:21:38:20:
                    13:c4:6a:9a:00:68:1e:3b:d3:5f:f6:5f:81:93:0e:
                    7f:f0:29:ff:12:b9:a0:48:4d:44:e0:bf:29:ec:4e:
                    3f:43:a5:49:cb:12:5e:79:0f:fb:72:9e:3d:aa:f3:
                    e5:33:c1:eb:dc:f3:f6:4d:3e:8d:66:92:f1:85:ab:
                    24:5a:be:15:cc:9a:51:5d:88:a5:7d:e7:37:8c:98:
                    7d:17:5a:33:58:15:2f:f2:78:b7:52:c2:01:6e:28:
                    3a:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:E8:63:B2:1A:EA:94:0F:E6:50:77:8C:90:28:4F:93:EF:3B:BA:8A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d/e2841b4a-900c-3f3a-8c22-66b1fbfa6ccc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d/f8e7a246-465c-42e8-8be1-af167b20b04d.crl

            X509v3 Authority Key Identifier:
                keyid:47:E2:47:E2:08:C3:82:0A:55:A4:99:5E:E0:10:DE:78:D2:94:F1:CE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  107.166.112.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         98:ae:d1:89:fc:d2:90:a7:3c:f3:98:50:49:a7:a1:12:b2:1f:
         d6:2c:b1:81:32:89:a4:da:3e:95:99:85:e3:d4:ae:63:75:92:
         67:c7:b5:d1:5c:e4:09:d0:44:4a:dc:ec:b6:92:a1:a1:12:c6:
         d6:d9:4d:70:d6:f3:2f:b9:a6:c9:86:e5:f5:2f:b0:fe:18:48:
         98:de:29:99:bb:2b:be:0c:af:da:8a:ad:44:1e:ff:f0:40:31:
         c9:23:e9:07:cc:b2:f2:c1:02:37:4f:39:15:c4:b2:5c:06:47:
         68:89:74:d1:94:10:d1:98:fa:9a:e8:2c:af:63:c1:0e:b0:c6:
         30:34:59:7d:91:14:04:eb:37:7e:ef:e2:e1:64:d8:4f:58:a5:
         47:33:de:82:62:31:7b:0f:ed:9a:c9:a8:59:9e:89:25:99:a1:
         6f:bb:b6:bb:c5:83:b7:5d:9b:e2:4d:a1:b2:e3:b3:25:3a:cd:
         17:23:8e:13:6c:8f:3e:bf:6e:72:6a:8d:70:a7:86:35:fc:4e:
         25:e4:33:32:14:33:87:80:e5:91:11:fe:18:04:1b:41:d9:1f:
         6f:a5:e8:c7:7d:92:24:09:41:d6:95:25:0c:be:2a:c4:83:27:
         b5:4d:8d:ac:73:c7:0e:c3:61:9f:9e:e5:31:96:1f:f1:84:a7:
         9e:c7:32:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 05:21:22 2026 by rpki-client