Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/a7eb504a-1085-33a8-a97a-c4107ee11a27.roa
File:                     a7eb504a-1085-33a8-a97a-c4107ee11a27.roa (raw, json)
Hash identifier:          keZt8jivLIqE5xYv/XAZnoSsgCZKf29t9Pd2Ocvrvgw=
Subject key identifier:   9F:9C:BB:A3:B0:92:D5:02:24:0C:36:1B:6B:13:1A:4A:33:12:8D:E7
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F4328584D59EA9531C38AAF937F7387A0
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/a7eb504a-1085-33a8-a97a-c4107ee11a27.roa
Signing time:             Tue 31 Mar 2026 13:00:30 +0000
ROA not before:           Tue 31 Mar 2026 13:00:30 +0000
ROA not after:            Mon 29 Jun 2026 13:00:30 +0000
asID:                     26383
IP address blocks:        166.1.43.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:59:ea:95:31:c3:8a:af:93:7f:73:87:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Mar 31 13:00:30 2026 GMT
            Not After : Jun 29 13:00:30 2026 GMT
        Subject: CN=0e2f1d43-ff16-4aef-9cca-9d5ed1a7d5fb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:b3:84:3d:89:e1:e6:da:51:36:17:f7:2d:ac:
                    bd:36:29:17:06:b7:b1:dd:ac:be:16:12:be:7b:2d:
                    a5:0b:aa:43:68:9c:d7:b1:a3:46:2f:92:54:aa:01:
                    50:04:1b:11:fb:a7:db:0e:1e:c8:b0:4a:6b:b8:b5:
                    82:3f:9f:c3:ac:00:9f:92:cc:d6:80:c0:09:ac:8e:
                    a5:d4:b2:0b:35:97:ea:82:1a:44:ee:d9:b3:87:ed:
                    9f:11:6e:a0:5a:41:34:7e:75:c9:0d:69:fb:b3:3b:
                    96:68:65:5a:e5:19:1a:53:d8:68:2a:61:4c:55:96:
                    7b:f9:ff:23:03:17:fd:0d:b0:e4:d3:5b:bb:95:1c:
                    4a:ae:8c:c0:73:d0:83:29:ec:da:3f:17:1f:b5:fd:
                    98:af:ac:d2:c0:50:93:45:a7:08:1f:d5:0a:df:f9:
                    4c:c0:a7:4b:b5:49:f4:e7:8d:54:a8:5e:cb:4f:aa:
                    11:c8:6e:1e:5a:04:ec:4e:a8:1e:0b:3a:5c:92:d3:
                    53:16:94:6b:a3:9f:df:63:b0:c9:ce:c2:91:48:0e:
                    2a:73:d9:f4:70:6a:58:1d:7a:60:f7:f2:4d:2a:cd:
                    b4:59:4f:a4:4a:08:9e:7b:69:17:e5:c3:2e:89:c9:
                    f1:17:4b:d6:88:57:0d:1a:cb:dd:fd:96:7a:38:dc:
                    25:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:9C:BB:A3:B0:92:D5:02:24:0C:36:1B:6B:13:1A:4A:33:12:8D:E7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/a7eb504a-1085-33a8-a97a-c4107ee11a27.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.1.43.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         13:33:0e:95:9f:cb:d8:b2:50:eb:bf:92:d4:74:18:d9:5b:37:
         f2:6a:06:d3:27:92:19:cd:c7:ab:47:e8:fa:9b:dd:a4:dd:24:
         c8:57:19:28:34:04:1c:01:bf:c1:15:de:da:53:d9:4c:fa:b4:
         14:76:75:ec:4c:9a:dc:03:08:61:d0:a6:d4:db:30:16:bd:10:
         14:da:d8:d4:f5:cc:c8:8b:42:00:b6:55:91:b3:18:3d:53:b0:
         5a:a4:db:cc:21:19:ab:a5:55:35:ca:dd:67:8b:6e:0f:82:e0:
         56:95:10:43:e4:97:1d:b8:8d:cb:c4:51:01:2a:d3:c5:5f:54:
         57:51:14:60:59:d7:d2:c7:60:cd:1e:95:e2:49:00:c9:5a:46:
         1f:c3:2b:60:a4:ea:cb:fb:85:1f:3c:bb:8a:c0:f8:2d:fa:f7:
         20:e8:83:44:6c:39:82:29:ef:02:8b:34:e2:bc:a0:a5:a7:fc:
         36:db:ec:a9:26:27:97:0f:2e:b3:40:61:f2:d4:c7:16:43:81:
         01:b9:a9:19:ad:78:d3:9b:da:53:93:e5:85:db:4a:c7:29:11:
         9a:41:16:fc:47:6e:14:64:74:41:55:74:16:60:08:44:6d:b0:
         f3:eb:28:ae:33:d9:38:c3:87:1e:31:3a:73:51:61:65:bb:d5:
         00:6b:61:62
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1Z6pUxw4qvk39zh6AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjZkZWEyYTUtODM3ZC00NmQ4LThmOGUtOTQ0N2VjZTIw
YzA5MB4XDTI2MDMzMTEzMDAzMFoXDTI2MDYyOTEzMDAzMFowLzEtMCsGA1UEAxMk
MGUyZjFkNDMtZmYxNi00YWVmLTljY2EtOWQ1ZWQxYTdkNWZiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsLOEPYnh5tpRNhf3Lay9NikXBrex3ay+FhK+
ey2lC6pDaJzXsaNGL5JUqgFQBBsR+6fbDh7IsEpruLWCP5/DrACfkszWgMAJrI6l
1LILNZfqghpE7tmzh+2fEW6gWkE0fnXJDWn7szuWaGVa5RkaU9hoKmFMVZZ7+f8j
Axf9DbDk01u7lRxKrozAc9CDKezaPxcftf2Yr6zSwFCTRacIH9UK3/lMwKdLtUn0
541UqF7LT6oRyG4eWgTsTqgeCzpcktNTFpRro5/fY7DJzsKRSA4qc9n0cGpYHXpg
9/JNKs20WU+kSgiee2kX5cMuicnxF0vWiFcNGsvd/ZZ6ONwlTQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJ+cu6OwktUCJAw2G2sTGkozEo3nMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRl
YTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3ZWNlMjBjMDkvYTdlYjUwNGEtMTA4NS0z
M2E4LWE5N2EtYzQxMDdlZTExYTI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjZkZWEyYTUtODM3ZC00NmQ4LThm
OGUtOTQ0N2VjZTIwYzA5LzY2ZGVhMmE1LTgzN2QtNDZkOC04ZjhlLTk0NDdlY2Uy
MGMwOS5jcmwwHwYDVR0jBBgwFoAUw4ati/QZSzWUJJuQup2AEcIIcckwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRlYTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3
ZWNlMjBjMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQApgErMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABMzDpWfy9iyUOu/ktR0GNlbN/JqBtMnkhnNx6tH6Pqb3aTdJMhXGSg0
BBwBv8EV3tpT2Uz6tBR2dexMmtwDCGHQptTbMBa9EBTa2NT1zMiLQgC2VZGzGD1T
sFqk28whGaulVTXK3WeLbg+C4FaVEEPklx24jcvEUQEq08VfVFdRFGBZ19LHYM0e
leJJAMlaRh/DK2Ck6sv7hR88u4rA+C369yDog0RsOYIp7wKLNOK8oKWn/Dbb7Kkm
J5cPLrNAYfLUxxZDgQG5qRmteNOb2lOT5YXbSscpEZpBFvxHbhRkdEFVdBZgCERt
sPPrKK4z2TjDhx4xOnNRYWW71QBrYWI=
-----END CERTIFICATE-----
Generated at Fri Apr 17 20:54:21 2026 by rpki-client