Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/a9044688-e248-3635-861f-a6cce750a9ab.roa
File:                     a9044688-e248-3635-861f-a6cce750a9ab.roa (raw, json)
Hash identifier:          NeZCaXQ5TXjUj1puepMZfPpsrl8I48AbWqpYMhd0sjY=
Subject key identifier:   9D:C6:52:6F:E4:7D:45:E9:D9:5F:5A:39:A3:8C:EF:C7:3D:C2:05:00
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F4328584E9384F8074221A330B431D400
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/a9044688-e248-3635-861f-a6cce750a9ab.roa
Signing time:             Tue 21 Jul 2026 21:00:12 +0000
ROA not before:           Tue 21 Jul 2026 21:00:12 +0000
ROA not after:            Mon 19 Oct 2026 21:00:12 +0000
asID:                     21859
IP address blocks:        166.0.246.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:93:84:f8:07:42:21:a3:30:b4:31:d4:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Jul 21 21:00:12 2026 GMT
            Not After : Oct 19 21:00:12 2026 GMT
        Subject: CN=8187c740-7dc2-4dc7-9896-321068353c7e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:65:21:98:1a:79:d7:02:07:15:d8:e9:ea:18:
                    7f:bf:e1:49:2d:17:67:39:c9:a2:22:6e:6b:74:34:
                    b4:cd:14:8d:11:f8:8b:32:aa:81:d4:bb:a2:20:6d:
                    a9:59:b8:49:c6:10:36:92:ae:b2:fd:7c:d3:c6:d5:
                    2c:f2:8e:c4:c6:c8:9b:ab:d2:dc:d7:49:d6:f5:78:
                    ff:26:fd:92:a5:b4:a9:ca:51:4f:3e:b3:2e:77:42:
                    26:3b:03:e8:e1:43:6c:5c:82:f6:40:83:76:38:9a:
                    74:6d:6b:26:ef:3c:14:a9:5a:9a:63:82:1e:a5:9d:
                    cd:16:16:b0:62:53:60:2c:ca:3c:c7:4c:af:d3:15:
                    3b:ee:90:98:89:ec:3b:f1:4e:c6:cd:c6:76:f3:0c:
                    44:bc:64:29:25:e3:1b:ba:4d:c2:ee:0a:4f:e1:01:
                    f5:12:0a:cf:df:8d:fc:bf:62:8e:42:88:7b:66:ac:
                    d4:35:01:12:a8:a4:a0:d2:32:23:af:2d:f4:79:5c:
                    f2:56:14:04:8a:39:1e:65:37:80:20:f3:8f:b8:f2:
                    bd:47:db:65:d1:66:bb:0c:68:d4:4d:37:95:48:8c:
                    0a:87:b1:d9:45:60:8c:75:aa:00:2f:82:38:30:e2:
                    ad:5d:75:d9:09:83:5f:6a:2e:3e:7b:68:c7:f8:34:
                    68:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:C6:52:6F:E4:7D:45:E9:D9:5F:5A:39:A3:8C:EF:C7:3D:C2:05:00
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/a9044688-e248-3635-861f-a6cce750a9ab.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.0.246.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         54:0e:45:f9:6f:a9:aa:86:e1:c3:ed:77:2a:c7:db:e1:0f:21:
         68:7f:8f:50:c0:c8:c5:82:50:2d:f2:33:aa:ee:ae:df:6f:1b:
         ed:a8:bb:7a:07:22:b0:5d:96:36:ed:8e:29:bf:fd:44:7c:5a:
         ef:ab:38:14:1b:af:58:bf:3f:63:97:ea:a1:07:6b:89:51:5f:
         6c:0b:7a:a6:f0:9e:e5:27:a9:8e:50:c1:39:b1:1a:3e:75:84:
         f4:f6:ed:e8:2b:fa:b3:33:67:c1:ee:c8:2a:37:02:cb:35:e8:
         a6:d1:f1:ec:1a:a8:7d:8c:8c:fe:6e:26:fa:95:d6:83:67:89:
         94:f8:8b:fe:0d:d6:4d:bc:84:ba:16:b1:f4:0a:81:f2:52:aa:
         bb:b4:c7:2a:9b:66:a2:e9:e8:25:2d:43:76:4e:7d:91:18:0e:
         cb:83:09:3e:e1:3e:88:8d:7e:34:2c:46:bc:3f:6e:5b:9e:d7:
         f0:8d:0d:45:12:42:c0:94:dd:3b:66:bf:0e:91:f8:e4:07:7f:
         38:bd:45:f7:ac:0c:e4:01:3d:e0:18:b8:54:d3:3d:6c:bb:88:
         52:79:8f:ec:bd:10:5d:6e:2f:21:59:f0:e6:b5:51:82:66:11:
         1c:3f:c4:f1:d2:10:cd:88:d8:57:12:44:dd:4b:da:cd:ba:70:
         77:dd:68:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 09:12:57 2026 by rpki-client