Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/ccff66d1-a1c8-3f52-9ed2-5baee07d05b9.roa
File:                     ccff66d1-a1c8-3f52-9ed2-5baee07d05b9.roa (raw, json)
Hash identifier:          aLbJ5z/FNERtoqH5XdGZhNPdcTEZ9VxN+fOr+vgXtCY=
Subject key identifier:   C0:CC:F2:F5:BC:54:E2:35:54:32:99:0D:63:B1:30:21:AF:83:86:5A
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584EE0C1FA03B23319A24A71AA00
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/ccff66d1-a1c8-3f52-9ed2-5baee07d05b9.roa
Signing time:             Tue 18 Aug 2026 13:00:12 +0000
ROA not before:           Tue 18 Aug 2026 13:00:12 +0000
ROA not after:            Mon 16 Nov 2026 14:00:12 +0000
asID:                     6167
IP address blocks:        166.146.0.0/17 maxlen: 17
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 21 Sep 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:e0:c1:fa:03:b2:33:19:a2:4a:71:aa:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Aug 18 13:00:12 2026 GMT
            Not After : Nov 16 14:00:12 2026 GMT
        Subject: CN=5d24470a-f81d-4a36-8d06-bebac2b9e9eb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:82:19:42:5f:e8:c9:eb:e1:71:63:c6:1b:3a:
                    90:22:80:e3:5b:6a:eb:20:8a:22:4c:92:5b:07:fb:
                    ec:79:3a:59:ea:07:4e:23:18:db:31:71:fe:2e:bc:
                    aa:bc:68:c6:f2:3b:7b:b9:0e:83:d5:de:70:00:7c:
                    ce:63:b9:b9:0d:eb:cb:c4:c8:ab:f8:e5:2a:0f:e7:
                    af:d7:3c:be:03:eb:35:6f:11:bf:9a:12:8f:00:4b:
                    31:1f:6b:61:2a:e7:28:07:60:f1:25:b4:56:d5:bf:
                    46:a0:4c:ea:f1:fd:19:6f:fc:cf:ca:4c:95:02:f6:
                    dd:be:92:f7:d4:ae:36:ae:be:fc:44:9f:ba:64:c7:
                    af:5a:10:4c:64:8d:20:d8:3f:bb:9c:8f:e0:81:7c:
                    e7:7c:4b:d7:c9:a8:0c:6e:50:6a:9a:0f:8c:45:79:
                    af:b0:ff:6a:e8:4d:6f:99:81:a4:a8:5e:c4:f1:5a:
                    53:b1:39:e9:fa:aa:51:7b:ac:40:6d:41:6b:72:1a:
                    5c:9f:ae:a2:10:e9:54:b0:18:25:6d:36:04:7a:12:
                    9b:f7:a2:47:6e:17:bc:81:c9:81:29:b7:2f:12:19:
                    7b:5f:de:6c:7d:29:57:a9:02:02:d2:df:b9:e7:b7:
                    9d:fa:1f:88:cd:35:10:19:8b:8f:9f:e3:ab:da:7a:
                    a6:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:CC:F2:F5:BC:54:E2:35:54:32:99:0D:63:B1:30:21:AF:83:86:5A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/ccff66d1-a1c8-3f52-9ed2-5baee07d05b9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.146.0.0/17

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         74:df:af:d5:85:2e:a9:d7:44:6f:b5:8b:88:e9:a1:99:6c:bf:
         43:1d:53:ed:1b:f9:65:f2:e9:15:d6:a7:b0:75:03:e1:fc:8f:
         26:15:57:cc:ef:72:29:8d:12:db:c5:90:1b:4d:2f:19:d5:1a:
         1a:dc:14:d5:c5:d4:68:e2:c4:69:45:b3:39:15:b8:9c:15:e9:
         f9:a0:59:c2:75:60:8f:49:0e:34:7a:47:5e:55:5a:1f:96:74:
         4d:6b:90:20:af:23:19:68:19:bf:0a:82:9e:09:9e:38:08:4b:
         74:64:38:c8:67:99:5c:a9:13:8f:e1:7d:36:76:c0:bd:a7:d4:
         31:ac:b7:3d:df:14:41:1c:24:80:e2:6f:29:e1:07:75:43:2a:
         62:71:f2:7f:c4:98:42:cb:dc:69:a2:c5:4d:43:3a:b5:94:99:
         af:44:95:07:c2:54:cb:ab:13:dd:67:9b:ef:2b:49:57:d1:d3:
         01:c0:1d:89:25:0d:03:e1:b7:ca:a8:74:b5:98:78:e4:9e:ff:
         b5:e2:38:00:ae:35:4b:26:fc:c6:0c:32:3f:4f:d1:98:18:3b:
         fb:9c:38:6c:6d:66:91:c9:61:e0:fc:4b:a9:94:aa:28:37:d8:
         c5:21:94:90:78:1d:d5:29:81:73:81:ee:d5:8c:ef:37:6f:19:
         7b:05:ea:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 16:22:06 2026 by rpki-client