Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/3e27d996-6b6c-3a80-b115-2ca54fd5cc35.roa
File:                     3e27d996-6b6c-3a80-b115-2ca54fd5cc35.roa (raw, json)
Hash identifier:          z4Gq8+gU+TtGyjJZ0gA5lFfPwr+NwraQw1vYd1jbSFU=
Subject key identifier:   8A:EE:7A:05:FF:60:0A:B7:07:32:D8:0C:ED:46:C0:88:60:2A:F5:44
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F4328584E1319880BDBBF4D93339DC880
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/3e27d996-6b6c-3a80-b115-2ca54fd5cc35.roa
Signing time:             Fri 05 Jun 2026 21:00:12 +0000
ROA not before:           Fri 05 Jun 2026 21:00:12 +0000
ROA not after:            Thu 03 Sep 2026 21:00:12 +0000
asID:                     263812
IP address blocks:        166.0.139.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 08:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:13:19:88:0b:db:bf:4d:93:33:9d:c8:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Jun  5 21:00:12 2026 GMT
            Not After : Sep  3 21:00:12 2026 GMT
        Subject: CN=ab60fe36-d0e1-4f97-8432-3d7935c24123
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:d1:c2:4c:2e:fd:e3:8d:ee:cd:57:a9:2b:a0:
                    16:60:a3:ff:1c:72:0a:9d:29:36:8a:64:3c:a2:7e:
                    c9:6c:cb:0a:de:dd:ac:b9:8e:e7:dc:b9:17:84:c7:
                    74:09:9a:5c:d4:91:09:b5:a1:66:5b:e8:78:17:9e:
                    58:dd:1e:02:03:ec:5c:82:47:b7:4d:bb:3c:c5:89:
                    2b:39:40:7a:dd:32:32:2f:08:d9:12:a3:00:fa:a1:
                    1b:7d:2d:b6:53:fe:1c:56:09:e3:64:e2:de:ed:4b:
                    30:ff:37:c4:00:66:de:b3:dd:d3:2b:bc:6d:9e:5e:
                    44:a4:e8:e7:25:d6:d1:2d:b8:38:ff:e8:bd:38:bd:
                    f3:90:a1:bb:58:37:60:a3:75:70:08:19:56:a6:e0:
                    51:d7:dc:76:69:72:ac:59:cf:d4:d5:cd:b6:7c:6e:
                    09:d6:06:dc:b1:9a:a3:e8:c2:15:ce:4c:96:02:3c:
                    ee:a5:45:d5:ea:ea:36:74:6d:88:6b:f8:78:be:23:
                    cf:b8:15:2d:4c:b2:f3:ac:0a:5a:dc:d2:04:bb:6d:
                    05:c2:31:26:08:8a:67:50:9c:8c:b7:79:98:e8:da:
                    ce:b3:2c:30:1b:9d:89:b0:1d:42:85:3c:51:b5:bc:
                    74:be:95:b8:54:49:dd:05:89:13:1c:ad:29:c8:6c:
                    59:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:EE:7A:05:FF:60:0A:B7:07:32:D8:0C:ED:46:C0:88:60:2A:F5:44
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/3e27d996-6b6c-3a80-b115-2ca54fd5cc35.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.0.139.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         23:82:90:da:f0:14:4e:1d:e7:b0:57:6e:b7:52:d7:2c:ca:ee:
         b4:2b:ec:f9:7f:c5:bf:13:03:ec:19:f4:2d:00:ba:54:f3:c3:
         cb:8a:f0:9a:bf:1d:fd:f0:27:c2:da:79:a8:12:2e:e1:ac:9c:
         82:5c:00:db:47:3a:82:52:d0:5a:1c:6d:d3:a7:76:73:e5:e4:
         4b:c8:28:1b:81:88:fb:36:fe:d2:f3:3f:a7:03:36:0b:1f:40:
         ff:23:3e:ea:5a:97:f6:d4:42:e0:55:cd:0a:1f:c5:05:c1:9c:
         c2:47:bf:01:cd:e1:3f:0e:68:39:13:ee:31:c6:d6:ea:ac:b3:
         e3:17:a8:b1:2f:c4:05:ed:6e:b4:b4:06:93:29:a5:18:d8:b7:
         6d:66:f3:f7:28:8e:2c:6b:95:2b:6e:66:a1:31:cb:02:c1:db:
         77:ac:82:69:cb:bc:81:21:cc:a3:10:cd:82:98:4f:f5:cb:26:
         71:af:ad:a0:e3:a1:e6:a3:71:9c:2e:2e:73:f0:69:6c:27:7b:
         5b:4d:1f:4c:7b:07:44:db:94:ea:5d:ba:6d:ff:54:71:88:ae:
         11:06:b6:07:4e:96:3f:58:87:1f:c7:fd:fb:5d:82:58:4c:ac:
         7e:2d:1d:ac:c7:46:50:a7:73:4d:8d:99:62:6d:2b:54:98:83:
         ef:a1:34:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 08:59:05 2026 by rpki-client