Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d/f2c43a6f-3a97-3978-b7ce-83d35f1e0ec7.roa
File:                     f2c43a6f-3a97-3978-b7ce-83d35f1e0ec7.roa (raw, json)
Hash identifier:          0+m2cFs2EOiPcI4S0BctVjOyzh0wvndT6btGdxJbawY=
Subject key identifier:   78:81:E7:D8:33:DB:60:CC:42:52:1B:1D:22:E1:CE:0C:4B:BC:0D:2C
Certificate issuer:       /CN=f8e7a246-465c-42e8-8be1-af167b20b04d
Certificate serial:       010D0C9F4328584D1B1A09FC05D64E0AB6C35CC0
Authority key identifier: 47:E2:47:E2:08:C3:82:0A:55:A4:99:5E:E0:10:DE:78:D2:94:F1:CE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d/f2c43a6f-3a97-3978-b7ce-83d35f1e0ec7.roa
Signing time:             Mon 09 Mar 2026 01:00:32 +0000
ROA not before:           Mon 09 Mar 2026 01:00:32 +0000
ROA not after:            Sun 07 Jun 2026 01:00:32 +0000
asID:                     266820
IP address blocks:        107.166.4.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d/f8e7a246-465c-42e8-8be1-af167b20b04d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d/f8e7a246-465c-42e8-8be1-af167b20b04d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 14 Mar 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:1b:1a:09:fc:05:d6:4e:0a:b6:c3:5c:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f8e7a246-465c-42e8-8be1-af167b20b04d
        Validity
            Not Before: Mar  9 01:00:32 2026 GMT
            Not After : Jun  7 01:00:32 2026 GMT
        Subject: CN=ca1c7933-71de-4041-9115-cd36e40d56bc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:c3:e1:dc:9c:2c:b4:64:86:bd:54:ce:11:29:
                    42:a1:ec:36:2b:ab:16:a5:bd:19:d7:42:df:6c:47:
                    84:ab:a2:85:56:2d:1e:96:eb:04:af:33:83:bf:bf:
                    e3:0f:33:d0:53:fd:f5:e2:f1:b3:94:b0:d7:d9:31:
                    25:a0:55:a1:aa:5b:b5:3c:7e:b7:0c:26:95:0b:d3:
                    b1:07:54:9a:ed:82:fb:0c:7a:ff:2c:5f:22:42:26:
                    84:45:78:5d:1f:9a:58:7c:e4:a3:c7:85:d1:90:ec:
                    5e:94:1d:e8:6d:c4:3f:f4:36:0c:a8:a1:80:9a:42:
                    68:9c:60:3f:83:52:e9:de:f3:51:fd:e9:42:12:31:
                    01:69:cf:8f:b6:f8:cb:c7:cd:81:9b:ca:4d:04:5e:
                    99:67:d8:2c:c1:d8:73:4f:87:c0:14:21:77:52:90:
                    1e:da:cb:8a:8a:6a:12:82:a6:c3:89:bd:64:61:a0:
                    ba:60:b5:5b:31:aa:d6:9e:b0:95:2e:1e:d0:83:bb:
                    21:aa:e1:6e:d3:b9:9d:35:97:d4:b7:fc:d7:51:ea:
                    ef:ec:09:48:2b:0b:53:92:c6:25:6f:dd:42:78:75:
                    a6:03:c7:15:a6:d3:2f:96:4c:d3:f0:22:3b:8e:e0:
                    99:83:62:3f:12:26:83:01:75:fd:b0:62:9e:b5:aa:
                    2c:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:81:E7:D8:33:DB:60:CC:42:52:1B:1D:22:E1:CE:0C:4B:BC:0D:2C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d/f2c43a6f-3a97-3978-b7ce-83d35f1e0ec7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d/f8e7a246-465c-42e8-8be1-af167b20b04d.crl

            X509v3 Authority Key Identifier:
                keyid:47:E2:47:E2:08:C3:82:0A:55:A4:99:5E:E0:10:DE:78:D2:94:F1:CE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  107.166.4.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         49:5c:03:9a:56:c6:ca:76:7d:a8:68:69:93:30:fc:3a:59:cc:
         71:aa:19:a4:7b:6a:83:7e:a8:89:81:e4:9e:16:d5:05:3d:61:
         f0:fc:78:11:7e:c7:91:d1:9c:dd:45:d4:39:6c:ba:b2:59:a4:
         f2:c8:1e:9f:24:cc:c9:a7:40:2d:b5:04:e2:d2:f9:b6:5c:d8:
         33:f3:bb:04:88:db:10:5b:b6:c4:b5:52:98:d7:40:d4:ed:5d:
         97:22:ea:6c:62:43:31:2a:ba:c8:57:0a:80:b1:24:b4:5e:96:
         ac:84:57:1a:dd:56:0c:03:50:9f:e8:22:8e:cf:a0:e8:85:87:
         13:e5:f3:50:0e:db:8b:fe:03:74:84:8d:63:e8:98:e2:87:94:
         d1:56:fd:eb:7f:29:25:e3:03:6d:4c:7a:99:71:43:ae:f7:95:
         30:e2:ff:10:08:33:b4:86:ac:e2:8a:d1:a6:3c:c0:50:5b:b9:
         1b:97:ed:4d:5e:93:42:09:38:fd:c5:33:db:70:86:f3:9a:da:
         59:0c:62:1a:51:73:79:c0:48:3c:7a:d6:80:7d:4a:88:9e:96:
         bf:e2:4a:e6:aa:8f:2f:30:07:5f:91:be:f3:c0:ae:ff:cc:29:
         c0:56:46:30:9c:b5:23:f9:32:d6:11:4a:5f:96:2b:2b:ec:bc:
         ab:3f:e3:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 12 09:48:38 2026 by rpki-client