Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/cd5c4e71-e271-3d86-b5be-4fcb29e10590.roa
File:                     cd5c4e71-e271-3d86-b5be-4fcb29e10590.roa (raw, json)
Hash identifier:          3Q2OY6lMizWVFKkGjkZmmRsP9hrEzWSkTYI1XIT31GQ=
Subject key identifier:   32:B0:A6:74:B8:BD:08:51:9D:2B:28:91:9A:8D:39:38:63:94:9D:EB
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F4328584CCFD7472ABE992E19D46D1840
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/cd5c4e71-e271-3d86-b5be-4fcb29e10590.roa
Signing time:             Tue 10 Feb 2026 02:00:31 +0000
ROA not before:           Tue 10 Feb 2026 02:00:31 +0000
ROA not after:            Mon 11 May 2026 01:00:31 +0000
asID:                     8881
IP address blocks:        166.0.35.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:cf:d7:47:2a:be:99:2e:19:d4:6d:18:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Feb 10 02:00:31 2026 GMT
            Not After : May 11 01:00:31 2026 GMT
        Subject: CN=67b5cf3c-5199-4c79-9ef3-3ef072815a58
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:74:64:76:a9:6d:0c:60:3c:5c:70:7f:23:f9:
                    43:8f:94:b3:f5:e4:47:cc:b3:f5:5b:4e:f9:85:03:
                    f6:f2:f0:30:8e:83:a6:75:b2:5f:a1:3d:65:c1:c7:
                    d2:fd:81:e4:e6:b3:f1:65:8a:c5:d8:75:08:44:59:
                    46:a5:d5:0d:a4:c8:77:db:a3:7c:a3:8c:66:7e:66:
                    16:1f:7b:2f:c1:71:27:43:05:91:8d:2d:e6:7c:05:
                    49:f3:95:3c:52:32:1e:ae:28:97:76:6f:1a:53:bd:
                    9e:91:38:df:53:02:8c:e3:57:e0:1e:9d:80:c1:9a:
                    cd:b2:43:ee:58:85:f1:38:d5:85:41:8b:b3:48:29:
                    11:68:24:53:38:1e:e3:d9:fa:e7:60:07:a6:a0:76:
                    5a:2c:80:cc:1d:60:2f:d6:ba:38:9d:50:26:63:de:
                    42:0e:f2:2d:dc:33:a6:2e:90:a8:e7:ad:98:38:5a:
                    12:23:a5:f3:5b:bc:cc:05:89:f3:36:7a:47:93:e8:
                    9c:2b:8b:1a:4e:d4:7c:28:b5:48:e0:7c:da:6f:9d:
                    57:3a:61:7c:21:e6:78:2d:3c:c1:58:49:6d:6b:a9:
                    7f:b2:cf:59:e8:1c:0d:93:fa:88:e2:c5:49:5b:97:
                    12:7b:83:9e:21:af:a7:bd:a7:45:9f:93:98:1b:4e:
                    b9:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:B0:A6:74:B8:BD:08:51:9D:2B:28:91:9A:8D:39:38:63:94:9D:EB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/cd5c4e71-e271-3d86-b5be-4fcb29e10590.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.0.35.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1b:fe:5a:61:26:83:34:27:e0:a2:f4:19:d1:63:78:0c:b0:5e:
         2b:dd:24:3e:34:89:79:67:f0:10:26:53:e0:6a:5e:fa:88:9c:
         4a:d7:3c:f1:01:62:9b:e4:15:68:25:2c:02:59:e7:40:fb:6b:
         fd:05:cf:9c:33:57:42:07:9d:8d:cd:30:a8:8f:48:00:ca:84:
         d8:fe:27:c9:07:52:99:66:79:3b:59:83:0f:06:66:91:cd:21:
         a3:c1:77:5c:df:c1:eb:14:2c:3a:4e:9f:e6:d9:57:66:af:50:
         1c:34:58:67:97:58:ec:01:c1:d1:fc:84:58:43:0d:f1:1d:ac:
         80:c8:b1:cc:91:d2:70:e6:a4:63:a9:b9:7f:ed:e5:64:b0:12:
         50:bd:c7:f8:7a:74:e1:d1:96:2e:62:ce:1c:d6:a2:b1:1c:73:
         5a:ad:57:85:40:a7:85:3d:d1:2e:e5:d7:2b:be:eb:78:85:dc:
         3e:bf:0a:5f:ba:1b:87:9e:3e:bb:2d:10:00:26:82:0c:f7:0d:
         3a:ea:a7:20:9d:ce:a1:9f:5d:30:ed:73:e6:56:44:4a:91:73:
         ea:5c:e1:20:9f:ed:e0:52:a6:35:a8:78:30:47:9e:b4:ef:86:
         b3:4c:41:a1:3d:b1:a1:30:fd:2e:a4:85:87:d4:7f:9c:bf:9f:
         3d:f3:bc:26
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEzP10cqvpkuGdRtGEAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjZkZWEyYTUtODM3ZC00NmQ4LThmOGUtOTQ0N2VjZTIw
YzA5MB4XDTI2MDIxMDAyMDAzMVoXDTI2MDUxMTAxMDAzMVowLzEtMCsGA1UEAxMk
NjdiNWNmM2MtNTE5OS00Yzc5LTllZjMtM2VmMDcyODE1YTU4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnHRkdqltDGA8XHB/I/lDj5Sz9eRHzLP1W075
hQP28vAwjoOmdbJfoT1lwcfS/YHk5rPxZYrF2HUIRFlGpdUNpMh326N8o4xmfmYW
H3svwXEnQwWRjS3mfAVJ85U8UjIeriiXdm8aU72ekTjfUwKM41fgHp2AwZrNskPu
WIXxONWFQYuzSCkRaCRTOB7j2frnYAemoHZaLIDMHWAv1ro4nVAmY95CDvIt3DOm
LpCo562YOFoSI6XzW7zMBYnzNnpHk+icK4saTtR8KLVI4Hzab51XOmF8IeZ4LTzB
WElta6l/ss9Z6BwNk/qI4sVJW5cSe4OeIa+nvadFn5OYG065yQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDKwpnS4vQhRnSsokZqNOThjlJ3rMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRl
YTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3ZWNlMjBjMDkvY2Q1YzRlNzEtZTI3MS0z
ZDg2LWI1YmUtNGZjYjI5ZTEwNTkwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjZkZWEyYTUtODM3ZC00NmQ4LThm
OGUtOTQ0N2VjZTIwYzA5LzY2ZGVhMmE1LTgzN2QtNDZkOC04ZjhlLTk0NDdlY2Uy
MGMwOS5jcmwwHwYDVR0jBBgwFoAUw4ati/QZSzWUJJuQup2AEcIIcckwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRlYTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3
ZWNlMjBjMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQApgAjMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABv+WmEmgzQn4KL0GdFjeAywXivdJD40iXln8BAmU+BqXvqInErXPPEB
YpvkFWglLAJZ50D7a/0Fz5wzV0IHnY3NMKiPSADKhNj+J8kHUplmeTtZgw8GZpHN
IaPBd1zfwesULDpOn+bZV2avUBw0WGeXWOwBwdH8hFhDDfEdrIDIscyR0nDmpGOp
uX/t5WSwElC9x/h6dOHRli5izhzWorEcc1qtV4VAp4U90S7l1yu+63iF3D6/Cl+6
G4eePrstEAAmggz3DTrqpyCdzqGfXTDtc+ZWREqRc+pc4SCf7eBSpjWoeDBHnrTv
hrNMQaE9saEw/S6khYfUf5y/nz3zvCY=
-----END CERTIFICATE-----
Generated at Sun Mar 1 23:44:35 2026 by rpki-client