Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cadf002a-d081-4e51-89c4-f7121259516d/088b1098-9f13-3b9c-9ed2-1c879f079fea.roa
File:                     088b1098-9f13-3b9c-9ed2-1c879f079fea.roa (raw, json)
Hash identifier:          mHcvGXfL8Sc2B2QsxVlm7Vhnc2BG47ZOiGuQpymUEt0=
Subject key identifier:   FA:ED:44:DF:CB:55:ED:5D:2C:CD:E9:51:64:7A:1D:99:C2:E0:23:67
Certificate issuer:       /CN=cadf002a-d081-4e51-89c4-f7121259516d
Certificate serial:       010D0C9F4328584F506D536120D0CAE99AEB9D40
Authority key identifier: BA:48:53:AD:AE:45:A5:A0:ED:99:48:94:6B:C0:67:D2:A3:43:1D:AD
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cadf002a-d081-4e51-89c4-f7121259516d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cadf002a-d081-4e51-89c4-f7121259516d/088b1098-9f13-3b9c-9ed2-1c879f079fea.roa
Signing time:             Sun 27 Sep 2026 13:00:12 +0000
ROA not before:           Sun 27 Sep 2026 13:00:12 +0000
ROA not after:            Sat 26 Dec 2026 14:00:12 +0000
asID:                     398813
IP address blocks:        166.66.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cadf002a-d081-4e51-89c4-f7121259516d/cadf002a-d081-4e51-89c4-f7121259516d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cadf002a-d081-4e51-89c4-f7121259516d/cadf002a-d081-4e51-89c4-f7121259516d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cadf002a-d081-4e51-89c4-f7121259516d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 01 Oct 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:50:6d:53:61:20:d0:ca:e9:9a:eb:9d:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cadf002a-d081-4e51-89c4-f7121259516d
        Validity
            Not Before: Sep 27 13:00:12 2026 GMT
            Not After : Dec 26 14:00:12 2026 GMT
        Subject: CN=74a639f1-ed10-437e-8970-5442f287a420
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:be:fc:04:f7:99:5f:92:e7:47:f2:ed:4e:89:
                    1e:67:e7:2c:99:64:5a:95:81:1d:0e:e1:67:f5:4f:
                    10:be:04:2d:2a:11:5e:91:15:ba:08:f0:af:e7:03:
                    84:00:62:50:2b:c9:29:de:07:c0:d4:a3:c1:81:e3:
                    60:c9:b4:7c:5c:5f:5d:3a:4c:70:9c:79:fa:2f:eb:
                    76:57:41:d7:72:13:48:0f:a6:a8:85:ca:3d:b7:c6:
                    84:91:ba:c5:2a:2f:f7:49:e2:5f:0a:cf:0d:75:bd:
                    f1:a3:c8:6e:73:10:1d:45:33:bd:1a:3a:93:d3:3d:
                    91:aa:ec:76:56:74:22:53:7e:77:9b:25:b4:4f:4f:
                    09:d8:20:4f:5a:d4:37:3f:d5:a6:fc:eb:81:56:f8:
                    c6:10:a6:07:44:f6:85:36:e9:a2:41:7a:85:5a:38:
                    43:bb:ce:5a:68:c9:ae:e7:28:ee:aa:6c:b8:7f:ff:
                    6f:a6:ab:ee:7a:04:ff:83:58:77:7b:fd:fd:f2:e7:
                    78:c3:e7:ad:55:f4:fc:87:2e:b2:3d:de:39:75:ed:
                    9e:77:e2:ac:04:1b:f4:35:26:c4:81:15:64:16:67:
                    40:a2:88:3a:bf:93:f6:4f:f8:a3:b1:21:0a:07:db:
                    ea:30:47:f1:8b:92:1e:d0:4f:1f:61:3a:60:6c:1e:
                    5f:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:ED:44:DF:CB:55:ED:5D:2C:CD:E9:51:64:7A:1D:99:C2:E0:23:67
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cadf002a-d081-4e51-89c4-f7121259516d/088b1098-9f13-3b9c-9ed2-1c879f079fea.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cadf002a-d081-4e51-89c4-f7121259516d/cadf002a-d081-4e51-89c4-f7121259516d.crl

            X509v3 Authority Key Identifier:
                keyid:BA:48:53:AD:AE:45:A5:A0:ED:99:48:94:6B:C0:67:D2:A3:43:1D:AD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cadf002a-d081-4e51-89c4-f7121259516d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.66.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         17:02:ab:f5:38:0c:2f:b2:5c:8e:d5:69:3e:6d:73:7e:d2:7a:
         d6:2e:47:e7:1c:32:65:01:7a:bc:af:c9:0b:f9:f6:21:8e:db:
         8c:34:67:d2:dc:56:a6:24:c1:55:a6:c2:16:1d:3e:6a:23:cd:
         30:22:5a:02:91:08:ec:26:28:b4:02:32:64:48:8b:8a:8e:cc:
         bc:4d:b4:75:a8:06:50:b4:70:68:79:16:d8:be:63:21:25:39:
         aa:1b:ae:e7:e3:05:2e:93:aa:24:43:9b:eb:f5:fe:f1:6f:49:
         39:29:1a:85:6c:cc:81:14:80:1d:c2:7f:8b:99:93:93:e5:83:
         98:85:07:a7:19:42:2d:88:d1:e1:a7:c2:c2:4d:37:33:ab:61:
         05:d8:ac:71:a8:4b:20:f1:3a:f4:d9:16:a5:f9:bc:82:f0:fa:
         c7:2f:8c:83:b6:2a:1c:ae:d8:1f:c5:35:e1:36:a4:01:c4:08:
         b9:37:db:8e:0d:50:d5:0b:a2:42:7a:2b:44:8c:69:02:66:7c:
         51:58:e4:e9:5d:59:1d:db:6d:0b:2b:6f:d7:30:22:77:3f:19:
         cf:1a:ae:0f:10:49:7c:39:02:c3:8e:dc:af:e1:d1:f9:54:be:
         34:99:27:c7:f6:f2:52:8d:07:a1:39:35:40:72:ec:97:0a:ac:
         15:ca:ff:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 30 05:34:28 2026 by rpki-client