Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/d8fa4264-c4f9-3090-97fa-48f2d0a642b2.roa
File:                     d8fa4264-c4f9-3090-97fa-48f2d0a642b2.roa (raw, json)
Hash identifier:          8uqmvl9OPKloFy26gMezyNEpkAGgUoqG4UUycoXD7PM=
Subject key identifier:   CE:50:87:6B:CA:26:2F:6A:E9:2A:ED:EF:4B:98:94:B8:E0:58:51:0A
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F4328584B79BCC4E5CC701132189396C0
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/d8fa4264-c4f9-3090-97fa-48f2d0a642b2.roa
Signing time:             Fri 10 Oct 2025 13:00:37 +0000
ROA not before:           Fri 10 Oct 2025 13:00:37 +0000
ROA not after:            Thu 08 Jan 2026 14:00:37 +0000
asID:                     401152
IP address blocks:        166.0.96.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:79:bc:c4:e5:cc:70:11:32:18:93:96:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Oct 10 13:00:37 2025 GMT
            Not After : Jan  8 14:00:37 2026 GMT
        Subject: CN=72a9cfda-26e4-40f0-8345-2ba3b50c4c3a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:4d:bc:03:7a:90:15:1d:99:85:02:8f:ea:6f:
                    c2:9e:6c:a6:8b:4c:2a:14:a7:92:0c:3d:b2:d2:29:
                    f6:1f:5f:72:e9:f9:a8:14:cc:fe:f3:23:de:6f:71:
                    12:78:6f:22:ad:69:70:f9:35:f3:0b:96:4f:d2:84:
                    49:7b:1e:e4:85:0d:d3:50:59:8a:c4:44:ac:6c:b8:
                    b6:79:66:5a:72:33:55:50:66:db:fb:18:83:a4:8a:
                    68:91:97:9b:7b:0d:6c:14:ba:bc:d2:2a:3c:15:0c:
                    ce:4e:53:46:3b:60:c5:44:ca:a5:7e:62:fb:20:9b:
                    db:bf:a4:15:d9:02:6e:6d:c6:80:37:c8:72:0f:8d:
                    08:d9:62:77:90:9d:0e:29:75:e8:ff:47:2a:3c:a6:
                    da:90:0d:d7:36:84:28:ec:f5:09:fb:17:6a:1e:81:
                    c8:27:1e:b1:43:ab:75:e5:cf:ca:27:24:df:37:ba:
                    54:ce:49:b4:b3:e3:cc:d2:95:77:25:32:a5:ba:a9:
                    39:37:dd:9b:c6:b8:b4:66:ea:74:bf:07:07:fa:e1:
                    84:0b:02:6f:1e:b9:62:9b:01:5e:aa:a4:5c:12:31:
                    fd:62:fc:21:f8:1a:d9:56:0d:a2:4a:3a:69:41:77:
                    53:dd:ea:f9:e3:4b:63:9e:4c:64:45:18:ad:7e:d6:
                    c9:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:50:87:6B:CA:26:2F:6A:E9:2A:ED:EF:4B:98:94:B8:E0:58:51:0A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/d8fa4264-c4f9-3090-97fa-48f2d0a642b2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.0.96.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8e:0c:76:4e:05:e6:79:f6:64:07:a1:e4:cd:81:b0:df:80:f6:
         3c:c5:c3:46:df:8a:92:9b:ad:ae:52:02:4f:ee:ef:61:a5:2c:
         d5:d0:b6:3a:c7:e1:b4:5b:f5:2e:fc:35:ca:6e:5b:7c:ab:c4:
         d2:84:c0:d5:ba:fa:ab:9f:02:c5:43:91:e1:61:04:5a:c5:80:
         f1:ff:3b:4b:2b:9a:5b:a1:0a:79:be:bd:34:cf:2a:02:5b:82:
         50:89:e2:47:1e:1e:8d:30:79:cc:bd:8d:f7:b9:81:d0:3b:7c:
         f0:f8:9d:08:f6:d5:d0:fb:ee:ad:7a:a1:43:b9:4f:51:99:8c:
         76:c3:e4:e1:62:f3:79:c7:47:4b:cb:2d:e3:1f:71:89:52:85:
         55:22:5b:ba:c4:e1:69:f9:48:d6:25:a9:3d:99:8d:90:8c:f5:
         62:9a:ee:1a:2f:4c:c4:58:a0:8d:aa:b8:d2:0a:65:90:96:e9:
         7d:58:41:a2:b4:02:e1:1b:f3:1b:e2:30:f5:55:a8:ff:6d:69:
         d0:76:6a:05:8f:ed:a5:a2:54:98:f1:88:80:68:40:39:88:b0:
         5d:dc:08:69:d4:c5:09:d1:af:4a:a1:92:48:06:21:8a:18:f2:
         64:51:de:46:ad:e0:eb:dd:9d:ae:ef:d9:10:ee:77:1e:52:ae:
         ca:21:00:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 22:29:29 2025 by rpki-client