Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/31f5762a-425a-31dc-b407-6d24f4dc9737.roa
File:                     31f5762a-425a-31dc-b407-6d24f4dc9737.roa (raw, json)
Hash identifier:          YnTWhAwbUELz88kt0YLKNcEH4bZbIyn6ewhcoKShJKo=
Subject key identifier:   19:B1:25:A8:92:A7:AD:F9:BA:2F:EA:0D:C9:F7:3C:BD:3D:4A:38:12
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F4328584D59EA641CF9BBCD482E350300
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/31f5762a-425a-31dc-b407-6d24f4dc9737.roa
Signing time:             Tue 31 Mar 2026 13:00:30 +0000
ROA not before:           Tue 31 Mar 2026 13:00:30 +0000
ROA not after:            Mon 29 Jun 2026 13:00:30 +0000
asID:                     26383
IP address blocks:        166.1.18.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:59:ea:64:1c:f9:bb:cd:48:2e:35:03:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Mar 31 13:00:30 2026 GMT
            Not After : Jun 29 13:00:30 2026 GMT
        Subject: CN=6fa4aa3d-90ee-413c-ac58-56d8c2022e44
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:fc:a6:92:cc:6f:30:0e:45:ea:6c:93:ee:d4:
                    67:e8:d4:c8:80:55:6f:0e:f7:ca:42:95:f0:40:02:
                    6d:9d:25:6a:91:a3:e5:ed:7e:49:42:dd:35:03:7e:
                    cf:c4:f4:df:84:3b:a1:c6:67:fa:4f:05:3a:68:76:
                    1b:48:e5:99:90:8f:02:6e:19:1a:03:aa:8a:dd:ff:
                    e6:c8:41:e7:39:a5:79:c9:3b:a2:85:78:35:ff:af:
                    f0:2b:b2:16:b5:1a:dc:d3:ca:52:25:1f:25:df:8a:
                    66:df:7e:b8:5d:99:aa:85:7a:42:86:25:cd:fa:cb:
                    df:9c:4b:6c:99:df:52:9a:7d:d7:13:f3:e5:a0:5f:
                    52:e0:08:8e:65:85:34:76:a3:d9:56:71:71:5c:02:
                    85:52:ba:76:9e:3f:66:88:44:36:4f:47:60:b4:2a:
                    ea:57:e5:24:69:a9:a4:74:9c:bb:74:cd:4e:c3:3e:
                    ab:d2:4e:18:19:c9:80:c0:fb:3b:09:9c:78:3d:f1:
                    49:89:db:d6:8a:67:c0:ed:ee:12:33:10:de:59:24:
                    ac:69:b4:d8:c8:26:0c:2f:92:49:c4:9b:0c:a7:9d:
                    d4:48:d1:25:32:0f:f1:bf:0e:7d:d4:24:8d:4d:26:
                    95:29:c4:59:83:f4:6a:05:e7:ec:c4:12:2d:f3:cf:
                    e3:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:B1:25:A8:92:A7:AD:F9:BA:2F:EA:0D:C9:F7:3C:BD:3D:4A:38:12
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/31f5762a-425a-31dc-b407-6d24f4dc9737.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.1.18.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         99:a2:dd:3f:53:c7:ed:d5:99:88:c9:53:bf:66:1d:32:a3:b7:
         d3:9d:1d:75:fc:40:8d:07:19:92:01:68:57:bb:7a:bf:ae:a1:
         2c:e0:f2:dd:44:e1:16:49:0f:fc:1d:8b:83:f0:82:c2:f2:d8:
         b8:69:5d:fa:74:87:2b:1a:4f:a8:e7:1c:a3:ec:d9:8f:8b:bf:
         58:d6:d7:54:88:b4:57:b1:f2:03:78:c5:f4:71:79:97:5e:e7:
         33:f7:51:86:2d:e7:04:ea:5b:4e:b8:b0:dc:37:61:6d:5f:50:
         f7:68:fe:ce:29:08:a9:62:8c:b5:82:d6:47:f4:e8:f7:c2:79:
         a5:ce:ff:3c:cc:00:0a:9a:7a:04:ef:8a:6c:d5:3a:16:6a:51:
         6c:a5:75:5b:83:ae:06:54:1c:6d:b9:fc:75:59:83:55:19:90:
         d4:90:b0:6e:78:c1:34:6d:6e:ff:2f:14:4d:26:91:c9:c6:83:
         6d:c1:99:74:0b:1b:18:df:5d:fe:54:11:f5:c0:f3:90:de:db:
         29:e3:b5:e1:cb:7b:a9:c4:0b:84:1f:ed:58:b0:67:ba:e1:5c:
         85:3e:7d:2b:29:9e:79:d1:88:2f:ce:fb:10:98:52:a9:42:37:
         d1:86:cb:12:bf:f8:52:31:40:0c:48:c2:3e:89:30:03:fc:68:
         e4:95:5e:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 16:01:20 2026 by rpki-client