Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/b8aad903-c55b-318e-a521-6fbdf54aea30.roa
File:                     b8aad903-c55b-318e-a521-6fbdf54aea30.roa (raw, json)
Hash identifier:          uaB5stejDtYLlT71+ywxlFV1lEzA1/j4Rn87v9VTN5g=
Subject key identifier:   77:2E:82:28:3A:04:8A:27:23:64:CD:FE:B3:FC:F1:52:04:1C:58:FC
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F4328584D75D52182A4CDCF02E3A2BB40
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/b8aad903-c55b-318e-a521-6fbdf54aea30.roa
Signing time:             Fri 10 Apr 2026 13:00:31 +0000
ROA not before:           Fri 10 Apr 2026 13:00:31 +0000
ROA not after:            Thu 09 Jul 2026 13:00:31 +0000
asID:                     49770
IP address blocks:        166.0.175.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:75:d5:21:82:a4:cd:cf:02:e3:a2:bb:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Apr 10 13:00:31 2026 GMT
            Not After : Jul  9 13:00:31 2026 GMT
        Subject: CN=25b67afd-af9f-40d7-9f26-188f43dfc1c9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:a6:88:34:9c:a5:e3:d8:dd:b9:14:4a:d4:d1:
                    e2:cc:b4:4a:41:70:d9:15:7d:33:0d:14:d4:c5:04:
                    60:1c:63:9b:6b:08:7b:46:ab:a6:89:49:cd:38:10:
                    cc:0d:6b:8c:64:a7:71:26:58:e2:78:64:40:3e:6a:
                    6c:ad:d7:34:ca:6e:0e:a4:07:72:6a:83:87:23:2b:
                    e2:a3:ee:3f:52:65:f2:c5:ff:e4:3e:3f:68:0d:e4:
                    9e:c2:72:8c:ab:29:38:f7:b6:32:81:94:9e:9e:84:
                    50:49:dc:f9:45:dd:7e:96:c1:5f:a7:0b:ef:de:18:
                    fa:41:09:bb:38:23:14:10:5e:b4:ca:22:5a:2e:97:
                    ee:71:dd:a4:e1:08:41:e2:78:98:19:4f:14:91:f0:
                    51:1e:98:2f:23:c1:16:63:4b:a4:f0:c2:3f:a5:64:
                    6c:95:fc:12:c0:ab:d8:ee:60:95:e9:da:82:80:9e:
                    a2:0a:a9:6a:8a:8b:ad:9e:d0:61:91:f2:49:fe:11:
                    94:ce:64:16:1f:71:0e:8d:ca:67:c9:ef:93:11:60:
                    ce:bd:bd:ca:21:5e:c6:9c:e0:8e:a3:47:08:f5:69:
                    3d:ae:3b:a2:ed:c2:a9:29:a6:48:56:b2:7c:30:7a:
                    c0:7a:0f:b9:73:a5:81:5f:f9:85:cc:87:d7:66:e0:
                    0b:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:2E:82:28:3A:04:8A:27:23:64:CD:FE:B3:FC:F1:52:04:1C:58:FC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/b8aad903-c55b-318e-a521-6fbdf54aea30.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.0.175.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         aa:3e:db:99:14:60:55:c4:54:99:82:3f:98:04:3a:76:f5:94:
         68:f8:37:c0:0e:94:43:73:1c:2f:7e:e3:95:fa:d6:d3:c0:9f:
         76:f2:c1:65:e0:df:02:1f:d4:27:98:39:22:84:39:53:22:e6:
         19:80:2b:8d:67:45:cf:0d:b9:78:95:e4:3c:0d:32:8f:01:c8:
         40:ef:82:e3:c3:4e:e0:3b:14:9d:95:23:ed:eb:d9:0b:6c:6a:
         b8:30:2b:da:27:62:52:e3:0e:08:a0:ef:ae:b4:4e:ae:e3:a8:
         3b:24:2f:d1:1d:e8:99:48:7e:f0:c9:fd:a6:49:41:14:e5:bf:
         61:a2:76:d8:b6:ef:58:e2:22:5f:05:ff:d2:58:42:bc:26:9b:
         bc:a8:51:e2:ad:ff:3c:7e:7e:fe:58:18:4d:9c:bf:54:f0:44:
         9b:c9:78:8c:08:ce:f3:b0:34:09:2e:94:f1:fc:e8:9f:d1:ee:
         cd:aa:d9:bc:88:ea:31:5d:c1:e5:44:1b:ae:67:51:15:03:ad:
         3d:77:a5:8e:5f:cb:51:d9:e9:1c:b0:4a:38:66:97:d4:dc:55:
         fb:64:53:74:51:b6:75:09:a8:9f:aa:8d:3e:1a:60:2f:67:6c:
         5c:af:8e:c0:3b:4f:fa:2e:9e:df:3a:4f:78:45:f8:c3:f3:08:
         0e:43:24:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:44:55 2026 by rpki-client