Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/0d23a162-0447-3d5f-b951-13ee30590792.roa
File:                     0d23a162-0447-3d5f-b951-13ee30590792.roa (raw, json)
Hash identifier:          KexZgVKeYEe1l5TShyy5S/5YuT0nifYYFE1Yd/anN0s=
Subject key identifier:   E5:38:CF:A4:F5:35:EB:DE:CE:77:DF:3C:8B:8A:1A:29:75:D0:0A:90
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F4328584D27AAC7BA1F22179961363C00
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/0d23a162-0447-3d5f-b951-13ee30590792.roa
Signing time:             Fri 13 Mar 2026 13:00:40 +0000
ROA not before:           Fri 13 Mar 2026 13:00:40 +0000
ROA not after:            Thu 11 Jun 2026 13:00:40 +0000
asID:                     44559
IP address blocks:        166.1.170.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:27:aa:c7:ba:1f:22:17:99:61:36:3c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Mar 13 13:00:40 2026 GMT
            Not After : Jun 11 13:00:40 2026 GMT
        Subject: CN=c7860bf0-c96f-487c-9aa1-74b2d614d27e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:58:6c:95:d1:7f:7e:0b:3f:83:b7:b0:2a:86:
                    af:92:42:8d:99:e0:ec:af:ec:eb:fd:4f:65:c4:b3:
                    56:de:af:1f:55:67:e5:52:80:62:67:0c:bf:d0:42:
                    92:0f:50:d6:93:3e:7d:7c:4f:78:95:99:29:57:e0:
                    af:d9:53:e3:c3:7f:a0:78:16:56:2c:d2:d8:c9:07:
                    50:b8:db:2c:23:56:18:ac:33:38:52:20:cc:19:a4:
                    9f:97:a2:02:8e:5c:7f:68:57:62:f2:17:7a:c6:ff:
                    aa:a6:fb:ed:50:20:a1:52:1b:d8:ac:20:8f:8b:40:
                    0b:19:a0:cb:01:99:ca:7a:19:8a:a9:5c:64:0d:19:
                    d0:ae:37:49:24:ed:f9:03:fb:f5:cb:f5:77:50:eb:
                    98:96:48:16:db:2f:4e:d0:51:62:29:be:86:98:3e:
                    61:ac:c8:2b:b4:52:57:cb:af:cf:24:fa:02:a0:5d:
                    b4:ca:c5:23:11:27:db:78:28:48:38:fd:84:09:de:
                    aa:8c:88:3a:af:5c:d3:4b:c1:c7:c7:08:00:cd:42:
                    c1:6b:a1:f1:9b:1b:2e:c2:7d:e8:a8:c9:70:36:bf:
                    bb:72:b6:e0:ba:37:69:6d:a9:3f:6a:ed:98:2b:6b:
                    73:16:87:57:a3:24:86:13:a1:70:65:45:a3:d9:7f:
                    8e:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:38:CF:A4:F5:35:EB:DE:CE:77:DF:3C:8B:8A:1A:29:75:D0:0A:90
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/0d23a162-0447-3d5f-b951-13ee30590792.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.1.170.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         95:c1:44:ae:f2:33:24:4e:d3:6a:d9:a1:38:13:7e:19:e9:4b:
         b1:dd:50:09:61:88:85:85:b1:82:59:a8:5c:ad:79:1b:c1:ba:
         e3:30:3d:e3:88:32:5a:04:2a:69:93:78:fb:45:fb:7b:9b:92:
         59:06:38:02:61:e8:6b:a1:71:b9:f1:71:61:33:a9:11:37:93:
         9c:25:6e:17:c1:15:3e:88:ca:cc:d0:fc:34:fe:ad:e2:83:af:
         82:f5:20:6a:fb:57:74:c4:97:63:1a:7f:5e:b3:0b:13:a6:2e:
         6c:aa:e5:9b:44:ba:dc:5c:c7:59:84:82:84:97:37:a4:c7:e9:
         4a:0d:c4:1e:77:19:55:f4:c7:c5:54:bd:ee:58:da:de:4e:cf:
         9f:79:47:ba:f6:75:7a:b4:28:30:42:ec:ac:7e:df:da:17:8d:
         88:d3:10:9a:c1:ae:08:9d:d9:af:be:d7:38:d9:8c:e2:51:a2:
         b2:a4:07:67:cd:b1:7d:0c:26:03:6f:14:c8:86:6e:29:6b:99:
         f2:23:ff:c3:1a:c2:ed:01:f1:a9:72:4e:a9:55:80:44:3e:ef:
         b9:de:a1:8f:c7:b2:96:c1:b8:c1:db:f2:d0:04:22:59:26:5d:
         8b:7f:d9:e1:54:1b:25:c4:75:2c:84:6c:23:8f:15:1c:6a:8e:
         87:a0:7a:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 15:08:52 2026 by rpki-client