Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/b239ed02-bc4f-355e-8c84-1b627628964c.roa
File:                     b239ed02-bc4f-355e-8c84-1b627628964c.roa (raw, json)
Hash identifier:          ql4ftEmhtS9ayt9aTPl/bNs5h/8WAk8a9LRYMmmBCc4=
Subject key identifier:   6B:17:B9:E4:F2:10:F2:C3:D8:66:C0:EA:00:0E:9A:48:4E:31:DB:F5
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F4328584E6B0A254DDCCE489483B62E00
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/b239ed02-bc4f-355e-8c84-1b627628964c.roa
Signing time:             Tue 07 Jul 2026 09:00:12 +0000
ROA not before:           Tue 07 Jul 2026 09:00:12 +0000
ROA not after:            Mon 05 Oct 2026 09:00:12 +0000
asID:                     22168
IP address blocks:        166.0.195.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:6b:0a:25:4d:dc:ce:48:94:83:b6:2e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Jul  7 09:00:12 2026 GMT
            Not After : Oct  5 09:00:12 2026 GMT
        Subject: CN=e35b2f64-1002-4a80-9531-10f386b2f797
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:9e:a8:fa:3f:4a:6c:24:16:f8:26:88:49:dc:
                    a3:13:27:51:97:f9:91:39:a5:51:87:94:dd:f4:97:
                    5f:80:0e:7c:af:4c:b3:8f:84:cc:fd:cb:14:aa:3b:
                    4d:f4:6c:39:9b:98:77:69:37:35:6a:2d:f8:a6:fa:
                    7f:40:c5:5e:46:a7:71:ae:83:81:a4:61:e7:27:35:
                    a4:e6:21:6c:c6:0c:f0:3d:41:1b:e7:3b:2e:b6:8c:
                    34:9a:28:b7:55:1e:40:28:50:23:d7:67:76:30:61:
                    98:59:0a:96:a9:05:fa:91:07:62:53:9d:56:11:c4:
                    07:28:72:e4:6a:5c:5b:54:ff:6e:33:71:8c:d4:47:
                    e5:b5:4c:82:1f:f3:ef:8a:05:e3:56:4b:49:94:55:
                    e0:31:36:da:97:bc:e8:3c:cc:94:55:18:b6:d2:92:
                    cb:d7:51:bb:b5:34:d9:04:36:1d:66:5c:7c:18:b2:
                    23:59:bd:ff:22:cd:ee:07:a9:82:d8:75:6a:0a:71:
                    55:4c:e8:2c:28:3c:79:cb:c6:5c:03:8f:fb:5d:18:
                    46:08:e7:1b:2d:27:18:a3:64:42:bd:ad:a5:8b:18:
                    85:17:15:2e:98:c1:70:d2:eb:16:0a:be:5c:86:79:
                    79:fe:72:db:f4:c8:9f:08:05:03:9f:2e:b4:f7:b6:
                    f2:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:17:B9:E4:F2:10:F2:C3:D8:66:C0:EA:00:0E:9A:48:4E:31:DB:F5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/b239ed02-bc4f-355e-8c84-1b627628964c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.0.195.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         78:f7:4e:d9:f5:9d:c0:4a:17:77:d4:fe:60:cc:e1:ed:ef:ad:
         27:74:6a:56:d8:c1:d3:27:62:33:56:0e:c2:b4:0b:5b:d6:29:
         5a:d6:c1:25:2f:c4:a9:de:12:e0:c5:15:f4:17:3c:ca:8a:b2:
         c1:84:46:83:69:90:bd:fa:da:bf:41:c2:af:98:02:06:0d:2d:
         e7:26:13:5f:16:ba:a5:b5:2b:aa:88:d6:7b:78:bb:74:e6:5d:
         ab:e8:16:41:be:55:2e:01:de:02:7e:22:9b:65:02:55:11:aa:
         e0:fe:ab:aa:ac:4e:8f:cf:4d:6b:19:73:33:20:41:4e:93:44:
         d0:81:79:ae:ba:b2:22:f3:97:eb:96:40:ce:58:37:46:10:1d:
         63:ce:a1:26:ee:60:ad:73:7b:6a:33:c1:a9:1d:65:d6:48:8a:
         24:3b:c5:62:f7:df:41:2d:67:48:c6:4a:61:55:cb:19:03:75:
         dd:a6:d1:f5:9c:f0:fd:1b:68:36:4a:8f:24:0f:7c:5b:dc:ec:
         93:a3:14:85:29:3b:b1:4c:49:0f:4b:c6:ae:69:6e:14:ac:d3:
         ea:2f:49:f1:6f:47:c4:aa:22:fd:93:22:5e:91:1b:fc:0d:88:
         60:5a:7c:8b:7b:64:41:5a:f6:23:4c:c2:0d:17:ad:f1:2c:be:
         42:72:de:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 02:14:26 2026 by rpki-client