Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/c8c310bc-65e4-3a8a-aad2-9807d1da445d.roa
File:                     c8c310bc-65e4-3a8a-aad2-9807d1da445d.roa (raw, json)
Hash identifier:          9HOZiy86RySEdXxSbsfPvgWt2zBJCvwlDsuTjOkR3iU=
Subject key identifier:   28:47:5D:ED:7C:F4:BB:48:EE:9E:3B:BF:52:B2:CB:71:10:AD:42:57
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F4328584CEBC20CC02E4E9D2447FC294C
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/c8c310bc-65e4-3a8a-aad2-9807d1da445d.roa
Signing time:             Fri 20 Feb 2026 02:00:32 +0000
ROA not before:           Fri 20 Feb 2026 02:00:32 +0000
ROA not after:            Thu 21 May 2026 01:00:32 +0000
asID:                     149440
IP address blocks:        166.0.150.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:eb:c2:0c:c0:2e:4e:9d:24:47:fc:29:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Feb 20 02:00:32 2026 GMT
            Not After : May 21 01:00:32 2026 GMT
        Subject: CN=5c366407-d949-42a1-8719-f64d7ae18c3d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:91:57:8c:7d:11:f5:52:a5:a7:b2:8a:67:bd:
                    78:35:4c:94:88:69:eb:a3:4e:96:ab:1d:12:ec:75:
                    81:60:f0:c7:1f:1e:69:70:b2:1d:d9:e7:7e:95:0c:
                    e5:34:8c:84:d3:fe:c5:66:6a:b3:fa:d2:69:b7:1d:
                    0e:d1:dd:4f:92:49:4e:63:73:2e:ae:e7:cb:75:79:
                    50:fb:03:7f:04:70:29:87:1e:be:f7:97:04:20:87:
                    62:d8:15:79:66:cd:d2:9c:db:98:e5:9d:38:15:39:
                    fd:a4:8a:bf:94:c6:4b:c7:19:f9:39:7d:4a:c3:83:
                    dc:54:e8:94:e8:f5:f7:2d:c6:1b:43:5c:fa:f4:54:
                    df:58:9e:59:b4:96:e8:3c:26:09:f0:43:ca:c7:5d:
                    b2:64:54:eb:56:83:38:0e:b6:6d:e5:35:fd:2b:2f:
                    c6:e7:cb:48:71:9d:8c:2a:f8:41:12:32:ea:89:59:
                    6b:b5:32:c1:30:95:7f:ee:c2:a0:41:1f:47:53:33:
                    0d:1d:06:52:db:65:99:6c:eb:95:b7:77:ab:40:5c:
                    37:eb:d3:5f:61:ec:51:11:65:83:dd:17:0f:96:86:
                    9b:7f:b2:3c:74:ff:a2:6f:d3:bc:09:98:f0:e4:52:
                    ea:07:7f:10:2e:60:00:d0:af:d0:f5:ab:ca:ae:93:
                    57:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:47:5D:ED:7C:F4:BB:48:EE:9E:3B:BF:52:B2:CB:71:10:AD:42:57
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/c8c310bc-65e4-3a8a-aad2-9807d1da445d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.0.150.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ab:e4:8a:2c:22:b0:8a:23:20:dd:14:2b:b9:02:04:40:4c:8b:
         c6:ef:e8:7c:31:ca:49:d0:22:ac:a0:24:c5:81:60:21:4a:9c:
         ba:f6:4c:7e:ce:41:0a:23:cc:0d:76:41:a9:ef:14:76:56:a4:
         b2:5c:19:a6:4a:ff:06:ad:4d:be:83:ea:4e:5e:7d:e9:61:7b:
         bb:cf:6a:eb:fa:45:3a:62:a3:11:62:22:ce:56:95:1c:67:51:
         4c:d9:ce:69:93:74:46:22:62:63:a2:4f:eb:7e:7b:bc:8e:e0:
         0d:df:89:15:a7:e8:eb:be:18:51:a0:74:07:6a:61:fc:24:9a:
         14:67:08:a6:83:eb:a7:18:5e:30:6c:41:12:f1:a6:b9:1c:3f:
         28:46:0d:95:a6:9b:f2:26:d0:8b:e6:19:71:4d:82:3a:40:e8:
         c3:e9:45:5d:28:e0:bf:bc:45:ed:85:29:fd:39:c8:94:9e:e9:
         fa:12:a1:d4:a9:98:75:bc:80:cb:e1:58:65:a0:28:cb:39:af:
         d5:7b:32:64:8d:5d:47:91:cc:68:c2:19:8d:9f:16:02:7d:78:
         50:7a:af:67:44:91:63:6c:44:e1:5d:1c:b0:d5:4b:67:9a:b7:
         5d:17:e4:6d:84:a9:d0:ec:93:4a:f8:97:db:c1:56:7f:b0:dd:
         74:fb:1e:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:25:19 2026 by rpki-client