Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/97c34386-070d-38bc-a44b-9faf3e3f9e0e.roa
File:                     97c34386-070d-38bc-a44b-9faf3e3f9e0e.roa (raw, json)
Hash identifier:          CdSSFBBWOX+vlZL7V6gCi/jFSYyZuOWo9U/eFkruKmM=
Subject key identifier:   C3:C3:14:9C:5B:F0:A8:5C:E3:E4:B8:01:01:6C:E3:EE:C8:2C:78:BB
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F4328584D5024EEB72037C394E3BBED40
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/97c34386-070d-38bc-a44b-9faf3e3f9e0e.roa
Signing time:             Sat 28 Mar 2026 01:00:31 +0000
ROA not before:           Sat 28 Mar 2026 01:00:31 +0000
ROA not after:            Fri 26 Jun 2026 01:00:31 +0000
asID:                     62240
IP address blocks:        166.1.213.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:50:24:ee:b7:20:37:c3:94:e3:bb:ed:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Mar 28 01:00:31 2026 GMT
            Not After : Jun 26 01:00:31 2026 GMT
        Subject: CN=feffe62a-c494-467f-9345-f9d297cfbd4a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:25:17:8f:e0:49:9c:b1:11:da:0d:7a:b2:3d:
                    d7:28:59:19:f1:a0:c1:4d:38:2d:00:7d:11:12:0f:
                    c8:45:65:f6:94:64:e6:9a:b3:82:16:9f:40:4c:17:
                    90:99:11:24:ee:84:23:d0:b1:ff:57:58:73:c8:c6:
                    1d:a0:18:67:53:9b:64:ef:05:56:b4:a9:c9:43:af:
                    de:d3:d3:98:d6:d3:ad:0d:a7:6a:0d:6c:4d:5d:6c:
                    da:d7:2e:ae:a0:20:fe:9e:12:1e:0e:12:e3:64:27:
                    47:af:aa:b5:63:72:3e:a9:e0:99:fc:2c:e6:77:f3:
                    28:82:bd:19:d9:48:2f:31:19:c4:b0:35:1f:8e:77:
                    ac:20:7f:a5:c5:d0:cc:26:f1:e7:9c:c8:d3:64:1d:
                    b3:47:0a:d5:a8:a7:24:85:34:43:a5:08:83:bd:ff:
                    50:41:c3:a3:57:6f:e7:5e:73:d6:88:0f:f1:02:c1:
                    b2:81:f3:82:61:5d:8f:d0:af:ba:8f:38:91:2b:92:
                    09:da:69:23:4c:e8:ec:b2:35:57:04:60:ea:76:aa:
                    11:b8:a8:9e:d8:30:c0:0e:f3:ed:df:e4:24:41:f6:
                    13:66:63:b8:45:bc:37:0e:b8:de:15:3e:4b:29:96:
                    9a:64:ad:dc:19:92:90:d3:52:8e:ac:6f:e3:f7:aa:
                    6f:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:C3:14:9C:5B:F0:A8:5C:E3:E4:B8:01:01:6C:E3:EE:C8:2C:78:BB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/97c34386-070d-38bc-a44b-9faf3e3f9e0e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.1.213.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         07:b2:1e:36:4e:a8:b4:5b:70:84:6f:99:01:0a:b8:30:a7:86:
         00:3f:8c:17:9a:54:8f:34:e4:8e:f0:98:6d:d5:62:19:8d:bc:
         78:85:48:4c:e5:ee:88:5e:c8:c8:37:16:ec:8d:ce:5f:75:c6:
         5d:a3:fe:d2:16:eb:3d:74:87:fa:f3:0a:32:77:19:ed:cb:44:
         45:52:ed:7b:0e:35:e3:67:e2:80:c8:29:b7:61:19:bb:2b:14:
         e8:98:6c:cb:17:7a:cc:c4:ab:68:dd:e2:af:67:2f:bc:8e:29:
         9b:2e:74:ff:a1:1a:91:d3:35:6c:4e:ff:39:d1:16:bd:ed:61:
         1f:57:37:e1:78:72:1a:bf:b7:2b:28:38:38:fc:4b:22:26:54:
         aa:ee:42:2f:80:69:7a:e5:dc:66:8d:19:a6:cd:fe:d1:15:3a:
         15:f8:73:aa:08:9c:01:2d:75:5f:6b:b8:03:f8:35:56:58:8d:
         83:3b:6a:e7:1a:bf:14:72:d4:07:2a:84:44:09:bd:1b:8c:38:
         93:bf:98:d5:5e:b6:a4:d4:05:e2:77:82:b1:c8:85:ce:a7:da:
         63:85:25:31:1f:08:6b:55:17:66:97:04:2d:51:8e:11:86:b6:
         47:fc:1e:9e:22:05:02:6e:6d:ee:5b:b6:27:b4:3d:87:9d:94:
         4c:c4:b6:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 17:11:08 2026 by rpki-client