Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/6c61d992-b9f9-3cc1-8962-7603a3420bde.roa
File:                     6c61d992-b9f9-3cc1-8962-7603a3420bde.roa (raw, json)
Hash identifier:          QQ79ZYXrtnEdB27vuqaijRAnaMDz+e0DxquXnkOHTNE=
Subject key identifier:   BB:85:B3:09:E1:61:21:F8:1A:AC:5B:83:3E:C0:BE:98:17:50:A6:26
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F4328584B679802CD228CE1121C425180
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/6c61d992-b9f9-3cc1-8962-7603a3420bde.roa
Signing time:             Sat 04 Oct 2025 01:00:33 +0000
ROA not before:           Sat 04 Oct 2025 01:00:33 +0000
ROA not after:            Fri 02 Jan 2026 02:00:33 +0000
asID:                     44559
IP address blocks:        166.1.134.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:67:98:02:cd:22:8c:e1:12:1c:42:51:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Oct  4 01:00:33 2025 GMT
            Not After : Jan  2 02:00:33 2026 GMT
        Subject: CN=eb618982-4125-495f-92c1-4d8b9e2cac57
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:2d:2d:c6:e7:74:2f:a3:50:9d:99:d9:3f:0c:
                    65:c0:80:dd:36:3c:e3:4c:89:75:13:b5:08:4d:28:
                    9f:19:cd:df:50:80:b6:90:e7:d3:52:fb:ed:e0:41:
                    04:a5:bd:74:ff:89:56:97:3e:9a:24:fb:7c:48:e1:
                    d2:49:16:0c:dc:38:44:28:aa:b7:57:66:ac:68:31:
                    b8:a2:5f:38:54:4e:a3:54:ea:68:4a:08:2c:cd:ba:
                    b2:55:00:e4:fb:c3:d5:b2:c2:8a:8c:36:b4:13:d3:
                    76:6c:e2:d4:83:7d:de:e9:cd:6c:d5:89:1d:cc:3b:
                    4d:1d:74:52:b0:40:e8:1f:29:83:ac:a6:aa:80:e1:
                    8a:d9:d4:58:68:67:f1:3b:1b:a3:2d:39:f3:a1:fd:
                    a5:50:bc:f3:62:71:00:3a:78:d0:bf:ac:31:84:4f:
                    f2:63:89:c1:ad:e3:c7:a1:ea:d0:5b:ea:fc:c9:73:
                    ec:65:12:09:a4:e6:23:e7:18:10:95:de:e8:d5:57:
                    d1:78:73:0c:79:5c:75:13:cf:f0:ca:86:64:d4:7e:
                    45:84:6b:a2:6e:f7:53:5e:96:ef:d9:11:86:8f:cb:
                    0c:95:d6:4b:d6:4a:91:2b:b2:b6:16:0d:66:b7:b6:
                    87:c5:94:89:38:94:6b:39:0a:67:77:07:05:13:81:
                    ac:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:85:B3:09:E1:61:21:F8:1A:AC:5B:83:3E:C0:BE:98:17:50:A6:26
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/6c61d992-b9f9-3cc1-8962-7603a3420bde.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.1.134.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         44:2b:65:29:a4:d9:f4:42:7d:dc:c1:15:25:b0:a4:2e:28:64:
         85:12:f2:ee:f6:12:a0:82:86:e1:41:40:af:2a:75:7e:36:40:
         ff:0a:14:56:b6:8b:c8:7d:27:b1:ea:d5:27:d2:69:81:d5:52:
         d9:04:65:81:15:ae:4c:f6:c2:4e:ce:72:a6:fd:41:5b:42:c9:
         17:bc:f7:10:87:36:65:6d:f7:5a:2d:be:3e:42:df:a6:8f:9e:
         90:ba:92:c1:8d:b4:9f:af:3e:55:98:8c:d8:4e:c4:b0:98:4d:
         d5:40:49:0a:26:61:b6:f0:a3:67:2b:47:86:10:15:8a:f3:e8:
         5e:19:e3:fa:61:c7:b1:d7:22:fa:ed:2d:f4:14:9e:d8:89:17:
         63:51:b8:12:d4:d0:8c:92:e0:10:78:4b:0e:58:d5:a4:bc:a6:
         1b:64:26:97:3d:fb:5b:ce:5d:11:0d:03:3c:9f:9c:50:b5:a5:
         eb:b8:da:09:9f:df:50:a8:ff:42:41:f5:70:18:78:63:df:91:
         a0:55:7f:e8:98:5e:10:e3:4d:78:55:0e:1e:22:77:98:4d:98:
         61:05:4b:93:88:51:44:94:36:34:4f:c2:de:e9:29:e2:22:48:
         7a:04:32:7b:be:76:8c:8c:9a:8d:32:e0:4a:78:09:58:9e:1a:
         61:86:c2:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:17:28 2025 by rpki-client