Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/f5451afa-f77f-311a-9c8d-23addd686ed8.roa
File:                     f5451afa-f77f-311a-9c8d-23addd686ed8.roa (raw, json)
Hash identifier:          T5bWxq/iXOOECtVHKnRnjftixlKeqKuPV+yVZJlPOtQ=
Subject key identifier:   A2:4C:81:8A:5D:DC:85:7E:8C:E5:A2:FD:85:DB:81:CB:AF:C5:D0:E5
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F4328584B758C9E85BE2D238053FDC190
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/f5451afa-f77f-311a-9c8d-23addd686ed8.roa
Signing time:             Thu 09 Oct 2025 01:00:28 +0000
ROA not before:           Thu 09 Oct 2025 01:00:28 +0000
ROA not after:            Wed 07 Jan 2026 02:00:28 +0000
asID:                     58061
IP address blocks:        166.1.77.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:75:8c:9e:85:be:2d:23:80:53:fd:c1:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Oct  9 01:00:28 2025 GMT
            Not After : Jan  7 02:00:28 2026 GMT
        Subject: CN=6c318a7d-bdbc-44c7-9a8d-160b48e812a2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:5b:b5:58:1b:6e:3c:60:32:f8:50:6a:08:36:
                    42:43:44:52:1f:44:21:90:42:ef:71:e6:28:ce:77:
                    bf:1b:47:c6:82:36:c4:a1:0e:1e:84:b8:0d:cd:fa:
                    89:6d:fa:b0:73:28:43:0e:c8:8b:d3:e4:06:f3:ee:
                    a9:2b:8a:05:d7:e0:47:b9:9c:98:19:d3:0c:b5:22:
                    87:0f:02:28:6a:f0:3b:18:4c:58:e3:c5:6f:fe:72:
                    ea:04:4c:9c:25:d7:59:9d:54:94:63:4f:09:a4:43:
                    75:f2:4b:db:2d:7b:1b:60:0a:27:57:55:e0:b6:58:
                    ae:b3:d1:cb:28:f3:12:ed:74:56:3d:05:24:b9:74:
                    d0:83:5c:b7:52:d8:d5:8a:1f:9e:54:16:24:d7:ef:
                    38:3e:a9:b9:f6:e1:4d:11:dc:7f:95:b4:ed:f8:e6:
                    44:47:56:d0:9b:3e:18:49:bc:c2:78:b6:b8:4c:e3:
                    5f:ea:ef:5c:d0:02:99:c8:ae:78:3b:0b:fe:56:65:
                    5c:3c:fb:de:b8:50:12:f1:97:88:90:8b:cd:77:ac:
                    f0:14:97:fe:c7:29:12:57:c9:c7:37:85:16:34:a1:
                    a9:2a:a7:13:2b:90:20:6b:7e:7d:2f:e7:54:07:a1:
                    0f:2b:20:6e:f9:f8:43:62:f9:00:cd:14:3c:80:82:
                    62:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:4C:81:8A:5D:DC:85:7E:8C:E5:A2:FD:85:DB:81:CB:AF:C5:D0:E5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/f5451afa-f77f-311a-9c8d-23addd686ed8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.1.77.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4b:24:86:49:db:e4:6b:b9:df:b5:7c:db:8b:26:ce:b4:e0:1f:
         54:1d:7c:ae:de:63:7e:34:a1:cd:9f:cd:cb:a6:6a:87:d7:5f:
         be:5e:d7:67:37:63:9d:eb:ec:ae:a0:39:b4:b1:0d:d7:6b:54:
         cf:33:bf:06:49:83:13:65:1b:b8:84:80:7d:d8:a7:01:3c:3e:
         05:45:62:2c:20:f1:6c:99:2d:b0:d5:e8:97:5d:aa:03:28:3d:
         f8:88:f6:b1:17:a8:a5:93:e9:de:8a:fb:ec:a7:f6:4e:7c:12:
         c7:e7:ee:05:66:c4:0f:85:e9:71:ac:98:9c:5f:4d:db:fd:c6:
         32:6d:1b:4b:2e:60:26:62:4d:22:cb:db:a4:62:08:48:7e:6c:
         ab:53:83:79:b3:f8:63:96:da:6b:e6:69:3f:bc:b5:30:bb:11:
         71:8b:ac:a0:03:2d:28:7b:76:c4:90:6d:d9:88:30:b9:34:33:
         17:cf:10:14:7f:e2:81:c0:c0:75:22:bf:43:68:d3:e6:2a:01:
         e9:47:b3:83:9f:85:8a:9f:8f:22:0c:fd:e9:94:9e:d9:e0:66:
         f3:b4:58:73:40:23:57:c5:9c:41:bd:cb:89:8b:21:31:ab:ee:
         c1:5e:fc:19:dd:7e:22:55:03:84:56:73:90:76:d5:09:6a:d1:
         55:12:99:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:20:06 2025 by rpki-client