Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/7113604e-0db2-3a1c-8043-f581658d53b2.roa
File:                     7113604e-0db2-3a1c-8043-f581658d53b2.roa (raw, json)
Hash identifier:          58aGB9J3ucIhmz2H54WLftnxnD9BLVoiw048f8sxqd0=
Subject key identifier:   FF:7F:84:87:A7:B3:5D:FA:0B:95:F8:70:03:50:AE:DA:2C:E5:A5:E4
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F4328584E15E4AA44AB50ABBD356133A0
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/7113604e-0db2-3a1c-8043-f581658d53b2.roa
Signing time:             Sat 06 Jun 2026 21:00:13 +0000
ROA not before:           Sat 06 Jun 2026 21:00:13 +0000
ROA not after:            Fri 04 Sep 2026 21:00:13 +0000
asID:                     401152
IP address blocks:        166.0.179.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 16 Jun 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:15:e4:aa:44:ab:50:ab:bd:35:61:33:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Jun  6 21:00:13 2026 GMT
            Not After : Sep  4 21:00:13 2026 GMT
        Subject: CN=d6994e63-ae76-4907-a21e-c5e39b929fc6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:fc:d0:31:66:a4:74:95:d3:ba:a1:7e:3d:32:
                    a6:aa:62:f6:19:7c:4e:df:db:85:70:ee:a0:ad:ea:
                    22:d9:5a:92:8b:b2:d4:bb:ca:d1:2e:6b:87:45:75:
                    b6:4b:fa:79:5b:cd:c7:4d:3a:1c:67:95:96:de:a5:
                    86:2f:70:80:83:98:8b:48:9d:71:a6:d1:c9:1b:a2:
                    55:de:80:95:a3:50:01:d1:44:51:76:27:58:34:fa:
                    0c:7f:2a:f6:13:30:a1:38:f7:75:3e:d7:94:f7:17:
                    c9:24:c5:06:7b:2d:f0:98:c0:c2:39:22:ee:ae:a2:
                    60:78:eb:7d:3d:b4:90:1a:76:af:dd:9d:60:3d:de:
                    cc:d3:d7:79:9f:a0:f5:ff:3d:d7:2c:d3:30:47:11:
                    eb:03:42:cd:a9:2d:6c:d5:9a:f2:8f:9c:5b:8b:54:
                    82:ca:79:13:a4:28:cd:0e:8b:91:a2:f0:85:82:57:
                    bf:3b:e4:56:a8:41:22:45:73:8a:f4:f4:7c:bc:78:
                    60:f4:57:c6:c5:c2:cb:bd:12:18:a6:aa:ff:58:d5:
                    bb:7d:e9:d1:e4:0e:44:63:59:2b:81:8d:14:19:9f:
                    2a:54:87:2a:6c:00:de:5f:9d:ba:5d:85:12:d7:d8:
                    a4:3c:40:16:f0:a6:b8:69:3c:bd:da:22:8f:fa:98:
                    2d:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:7F:84:87:A7:B3:5D:FA:0B:95:F8:70:03:50:AE:DA:2C:E5:A5:E4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/7113604e-0db2-3a1c-8043-f581658d53b2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.0.179.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         43:50:b3:9e:df:5f:b1:55:21:e1:35:19:fb:c8:d4:3b:f5:3a:
         1c:b5:23:4e:3b:5a:08:80:4d:93:06:90:d7:a9:ee:7d:7c:04:
         8c:c5:52:9b:ba:28:f3:46:b3:39:44:ed:0e:46:91:c0:39:fc:
         1c:ec:8c:a7:60:7e:2a:f5:20:be:81:33:85:43:e3:b2:f1:63:
         90:e6:f4:98:47:d7:dc:71:3c:e0:2d:23:c0:2b:01:bf:cc:45:
         55:a5:38:84:45:d5:3b:81:7b:b3:38:61:c1:07:f9:89:ad:06:
         8e:29:43:ae:4c:b2:10:b2:31:fd:07:d5:f2:fc:a8:1a:d5:b6:
         b2:eb:3d:2b:b9:b7:8b:ca:1b:d3:36:7d:5a:8a:53:cd:86:9e:
         66:68:a7:00:15:53:c7:41:f6:e6:77:d8:33:8b:af:07:73:09:
         d1:21:69:47:cc:47:ae:94:4a:f4:a6:9f:42:d7:a7:d7:83:75:
         fa:d8:ad:d4:dc:af:0b:a5:75:7a:c1:5e:c0:b8:42:1f:06:14:
         fd:4f:b5:0c:10:b3:80:3f:95:70:4f:7f:ce:ba:90:aa:20:b4:
         22:c1:60:22:d5:6f:ce:88:0d:4e:39:2e:c2:f8:c8:fd:38:e1:
         0b:e0:06:5f:d7:6c:91:82:ee:2f:55:7b:c9:ab:6c:a7:23:02:
         6a:5b:a6:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 18:25:33 2026 by rpki-client