Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/5f8a5c4d-8633-3c1a-bda7-b98e5148ea38.roa
File:                     5f8a5c4d-8633-3c1a-bda7-b98e5148ea38.roa (raw, json)
Hash identifier:          l8B5Yp10Yh2ptHlvbgHwpTKXeidyVHOlO4rp9uXxccc=
Subject key identifier:   3A:CF:63:66:FB:A2:AE:AC:3E:04:14:F0:EE:B5:D4:AF:A5:8E:CE:A3
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F4328584B91777FBEBA1078EF9503CA80
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/5f8a5c4d-8633-3c1a-bda7-b98e5148ea38.roa
Signing time:             Sun 19 Oct 2025 01:00:30 +0000
ROA not before:           Sun 19 Oct 2025 01:00:30 +0000
ROA not after:            Sat 17 Jan 2026 02:00:30 +0000
asID:                     44477
IP address blocks:        166.1.30.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:91:77:7f:be:ba:10:78:ef:95:03:ca:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Oct 19 01:00:30 2025 GMT
            Not After : Jan 17 02:00:30 2026 GMT
        Subject: CN=a760de9a-61da-4da2-a88e-18667c9533f6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:08:d1:b3:62:f9:58:64:ee:91:87:fa:53:77:
                    57:ee:ab:fd:79:36:98:39:b4:fd:3b:55:40:00:25:
                    64:f0:f8:25:aa:c7:e9:98:e6:5b:2a:97:56:8d:51:
                    87:17:cb:f9:3a:a0:1b:5e:2e:46:0b:d1:60:7c:22:
                    ee:66:62:0c:75:47:87:b2:72:5e:83:ec:72:ad:1b:
                    29:aa:56:93:eb:33:d5:7d:6c:63:aa:9b:90:8b:46:
                    3b:22:25:e0:9b:95:68:fa:8f:ad:9a:09:cf:fd:ea:
                    fe:76:90:b4:15:77:23:7e:8e:7c:cd:d3:95:3b:f2:
                    e0:4f:3b:ff:36:bd:7d:bd:cb:94:8c:d4:4e:fe:19:
                    c3:6c:3b:b7:fe:f4:58:57:23:f7:63:f8:43:c6:77:
                    58:fe:6f:87:2c:01:96:71:ff:ba:39:17:bf:81:4d:
                    7d:af:69:28:59:77:f1:69:25:7b:14:ad:ec:f1:64:
                    f7:39:fa:c3:bf:15:e7:88:0b:27:bb:4c:11:a2:f2:
                    3f:19:38:55:31:00:d3:42:2f:6d:55:8a:db:73:6a:
                    83:fc:32:39:6c:46:80:67:d6:75:28:63:12:45:75:
                    ac:1f:f2:56:41:f5:70:5b:6b:44:05:20:29:3a:b8:
                    d3:93:b2:c2:e9:03:13:96:a6:d6:7d:65:43:2c:ae:
                    8f:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:CF:63:66:FB:A2:AE:AC:3E:04:14:F0:EE:B5:D4:AF:A5:8E:CE:A3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/5f8a5c4d-8633-3c1a-bda7-b98e5148ea38.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.1.30.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9f:bd:f9:66:0c:c4:50:37:ee:3c:b5:ab:cd:d0:4c:f7:85:f9:
         f0:ac:6d:d0:ae:74:4d:18:1a:6e:f4:db:b1:e1:e5:21:e0:58:
         1d:24:05:b6:2b:b9:69:9d:2f:0e:61:ec:1d:6b:b4:9d:f1:57:
         b4:aa:df:1a:58:61:df:ca:eb:8b:ec:b6:3a:3a:a5:00:44:4c:
         22:65:44:47:20:4e:80:50:b2:62:1b:b1:3f:9a:70:de:59:22:
         6d:bb:e0:ff:41:bc:b5:dd:90:f4:2a:c7:15:04:34:c2:a3:5d:
         20:4b:5a:62:7c:72:64:0d:80:cc:21:63:3c:d8:59:59:a3:06:
         e1:84:e1:e2:5c:77:5f:86:8d:9f:9e:57:f5:3b:f5:23:99:d0:
         76:1c:e5:be:a6:c3:db:82:99:c5:59:47:ac:cc:5b:a6:be:66:
         6d:87:4a:e3:57:9b:59:50:1e:6d:9f:19:2c:0c:2b:db:2c:5c:
         68:b3:54:01:24:e9:87:d0:2c:6a:71:d2:0d:35:e3:2f:45:20:
         2b:db:89:ce:3e:e0:32:a1:48:2d:b8:c9:05:3a:5d:95:be:0d:
         9e:5a:44:55:66:06:4d:31:ec:1d:fa:3c:f4:a7:c4:91:f1:9d:
         ec:86:49:15:21:fa:68:6d:9f:e3:5a:9f:aa:2b:43:f2:ed:99:
         ff:4a:76:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:09:58 2025 by rpki-client