Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/e1efe4a3-158c-3d00-a0a9-7f7b703b2614.roa
File:                     e1efe4a3-158c-3d00-a0a9-7f7b703b2614.roa (raw, json)
Hash identifier:          Xaz/x9vj6y1Q53/qS+0rYo4xAR0nCkqgGFWI1mGIJN4=
Subject key identifier:   BF:DF:5F:31:03:F8:D1:85:3F:34:76:AA:0A:8F:54:73:3C:E3:39:1A
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F4328584D39CF72D1E8C433D7C06276A0
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/e1efe4a3-158c-3d00-a0a9-7f7b703b2614.roa
Signing time:             Fri 20 Mar 2026 01:00:32 +0000
ROA not before:           Fri 20 Mar 2026 01:00:32 +0000
ROA not after:            Thu 18 Jun 2026 01:00:32 +0000
asID:                     401152
IP address blocks:        166.1.52.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:39:cf:72:d1:e8:c4:33:d7:c0:62:76:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Mar 20 01:00:32 2026 GMT
            Not After : Jun 18 01:00:32 2026 GMT
        Subject: CN=79dd9249-5dd8-437d-b9b4-5c72c3c3e64f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:c5:e1:b6:b7:eb:ca:c6:96:7c:fe:d0:9f:a7:
                    7f:61:29:3f:bd:0a:d7:e1:5f:e0:f4:2a:f2:74:a0:
                    a4:fc:19:6c:b1:09:ce:a2:68:9f:ad:0f:5b:2c:39:
                    c9:16:ea:6b:d9:e3:99:0e:0d:dc:bd:5d:6f:b0:91:
                    8a:07:56:46:9a:02:38:72:cb:02:b7:a4:ef:07:c0:
                    54:fb:2d:bd:0a:f8:c5:25:1a:d8:61:7f:df:ec:51:
                    05:a2:28:5e:85:0c:82:90:38:25:71:be:ec:b8:40:
                    b3:39:15:35:fb:35:47:cc:ab:e7:bb:6a:d7:37:34:
                    fd:e2:a6:dc:a8:6c:3f:d3:84:70:77:dd:45:09:f2:
                    74:d3:93:85:61:6d:9c:28:e9:0d:b2:19:bb:f9:6f:
                    5e:ba:10:63:35:58:0c:b2:8a:20:4f:88:88:73:51:
                    d2:b4:27:bd:fd:e2:f2:50:28:3f:a5:3a:cc:d3:b6:
                    0e:3a:db:2e:5d:53:8f:b6:62:cc:47:18:15:48:02:
                    ee:4d:23:b7:1a:a5:c6:fc:4d:21:bc:c6:db:36:38:
                    9b:dc:d5:5a:f1:1e:4f:43:b1:2c:1a:f9:3b:60:4e:
                    e2:67:03:fb:f9:73:cc:e7:fc:75:33:1e:8f:c0:22:
                    2e:fa:e7:89:f6:8d:ef:89:69:02:d1:34:04:d6:ec:
                    61:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:DF:5F:31:03:F8:D1:85:3F:34:76:AA:0A:8F:54:73:3C:E3:39:1A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/e1efe4a3-158c-3d00-a0a9-7f7b703b2614.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.1.52.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2e:7c:03:e6:bf:07:c9:a8:7d:9e:6f:82:53:8d:5e:2e:b9:9a:
         d0:5e:39:9d:5c:98:53:bb:db:85:ca:c0:25:8e:47:4e:5d:c6:
         83:de:47:5c:56:e9:14:11:51:ff:2d:a0:0e:dd:4a:28:42:86:
         b8:1d:52:91:7d:f8:c3:be:54:e4:c7:a9:4c:25:47:c7:04:39:
         71:ae:63:a2:79:14:5c:ad:6c:25:9b:b3:3f:fc:1d:06:64:a6:
         70:6a:75:db:5f:2b:93:ed:56:2d:53:c1:ea:af:84:51:f1:6a:
         f8:77:d8:32:ce:c6:2b:db:d4:fb:34:08:74:96:26:d7:bd:aa:
         2c:e0:2f:12:2a:0d:fe:23:35:08:af:be:1f:d1:6f:77:04:55:
         83:ac:82:8a:9b:70:c5:a9:69:0c:66:4f:dd:75:59:d3:55:f7:
         8e:8c:df:69:93:5d:7a:b3:18:37:a4:c3:6f:d6:52:7a:17:2b:
         f0:42:57:43:72:55:49:ba:d8:98:61:a2:58:cb:df:ba:23:5e:
         39:1e:0d:fa:b9:f3:c0:27:d5:67:4f:65:b7:87:bf:a7:ca:d9:
         ca:87:44:26:9a:37:8e:4f:90:44:fc:51:ea:07:30:9d:ba:50:
         0b:88:90:db:36:c1:94:6b:a8:aa:4b:63:6e:d3:68:1e:22:f6:
         b7:d6:5b:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 05:55:19 2026 by rpki-client