Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8/3e8a26d8-342d-3d80-88ac-45f70799741f.roa
File:                     3e8a26d8-342d-3d80-88ac-45f70799741f.roa (raw, json)
Hash identifier:          dzxArOqRgNIhtkfHKa5Vxjkzf1J34ZQ9R9R4fwHiL6E=
Subject key identifier:   20:23:EE:10:FB:6E:F4:28:84:19:21:17:93:FE:80:33:6D:57:51:DD
Certificate issuer:       /CN=314186df-87ba-4dd5-adbf-1c6c2bbe04a8
Certificate serial:       010D0C9F4328584D0D427CF2F37BCAC4C8C58080
Authority key identifier: 52:15:C8:9B:51:37:0E:94:F1:AB:C2:AF:7D:C8:F6:BB:E1:F2:E5:6F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8/3e8a26d8-342d-3d80-88ac-45f70799741f.roa
Signing time:             Wed 04 Mar 2026 02:00:32 +0000
ROA not before:           Wed 04 Mar 2026 02:00:32 +0000
ROA not after:            Tue 02 Jun 2026 01:00:32 +0000
asID:                     20057
IP address blocks:        166.138.160.0/19 maxlen: 19
                          166.138.168.0/23 maxlen: 23
                          166.138.170.0/24 maxlen: 24
                          166.138.172.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:0d:42:7c:f2:f3:7b:ca:c4:c8:c5:80:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=314186df-87ba-4dd5-adbf-1c6c2bbe04a8
        Validity
            Not Before: Mar  4 02:00:32 2026 GMT
            Not After : Jun  2 01:00:32 2026 GMT
        Subject: CN=fcb30bab-4382-452b-84a8-b444e88092df
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:97:a2:68:a5:5b:f7:82:92:2d:b0:b2:d5:d4:
                    aa:ad:47:c9:4e:28:68:03:c9:4f:c9:33:3f:7d:96:
                    bf:a3:59:af:1e:4a:f0:bf:53:d4:64:c1:30:8c:97:
                    ba:0c:1b:91:3f:28:05:82:01:96:07:5d:d5:dd:11:
                    5e:03:24:92:99:ee:9f:9b:0d:a3:5d:92:a6:c1:ce:
                    27:d4:64:b0:7a:e9:0e:bc:55:37:f3:30:10:79:53:
                    ee:4d:0a:28:75:2a:4b:72:74:38:47:6b:af:49:e3:
                    f1:aa:4f:17:d5:16:c4:89:d0:87:d9:7c:55:59:eb:
                    38:33:3b:ae:54:c1:14:0a:1b:a5:bc:e4:b0:a7:06:
                    33:9d:86:47:45:1a:84:c9:c6:11:0c:b9:ba:36:5c:
                    48:f2:1c:ca:9b:c5:d4:ef:46:4f:c3:9f:2e:ed:da:
                    f1:3c:3b:83:67:38:72:90:33:af:b7:cb:8a:32:f5:
                    22:d6:94:56:a0:29:55:8d:88:c0:4e:62:c3:14:c9:
                    18:89:73:33:58:45:da:08:6a:e6:4f:0e:ac:1b:7e:
                    bb:bf:c9:0d:c2:bf:bc:4f:16:9a:b6:14:81:aa:36:
                    4f:70:d6:82:60:19:05:d2:3a:0f:9d:1e:dd:60:b1:
                    89:c3:17:7e:ee:86:e2:96:69:5e:6a:72:fe:55:e0:
                    a3:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:23:EE:10:FB:6E:F4:28:84:19:21:17:93:FE:80:33:6D:57:51:DD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8/3e8a26d8-342d-3d80-88ac-45f70799741f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8.crl

            X509v3 Authority Key Identifier:
                keyid:52:15:C8:9B:51:37:0E:94:F1:AB:C2:AF:7D:C8:F6:BB:E1:F2:E5:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.138.160.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         66:b5:e8:e1:db:90:a4:60:93:05:a8:88:12:37:ac:f2:ca:e4:
         be:24:21:86:4b:51:61:71:19:e1:37:fe:02:0e:a8:cb:73:99:
         2f:3a:85:6f:09:42:f6:03:7a:c8:91:ad:54:c6:fe:61:fb:76:
         97:43:d5:37:84:af:ca:a0:1b:4f:d6:71:e5:bc:ab:45:54:fc:
         38:99:4a:cb:9d:00:71:ee:1d:ba:8a:4a:bb:f8:38:69:78:fc:
         a0:57:1b:d2:48:56:ab:a7:3c:bd:56:29:ca:93:63:43:a2:10:
         b8:5a:20:27:06:a9:bc:00:c4:fb:e7:c7:75:82:0e:7b:ef:e5:
         65:f4:20:00:92:54:21:b6:bb:11:66:85:a9:66:bf:2f:10:59:
         f6:9f:45:55:b3:ed:a7:0a:68:0d:a0:d7:a6:93:ef:0b:17:bc:
         b0:40:59:22:a2:09:e2:f4:1c:e6:41:f1:2c:d5:4b:99:57:6f:
         cd:bf:d1:3a:15:11:77:99:b2:fc:43:3e:02:b8:6e:95:b2:16:
         f4:b9:d4:87:1d:39:8f:61:f7:49:5a:53:ed:97:31:0a:78:ba:
         b5:ae:91:d0:74:80:85:b2:da:02:7a:6d:30:72:96:99:83:ad:
         89:02:4e:ee:62:3c:12:86:0c:a7:64:75:9e:c7:a9:58:d6:c2:
         0f:15:9e:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 25 21:30:23 2026 by rpki-client