Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/e08e796c-1321-3ec1-945e-b3589e8ffd5b.roa
File:                     e08e796c-1321-3ec1-945e-b3589e8ffd5b.roa (raw, json)
Hash identifier:          33OUSbxHO2DjaSr2FyhAmg8Gic87s99+WTtfNicjWZ8=
Subject key identifier:   8F:D1:D5:99:5F:B3:84:1B:01:E7:8F:32:76:80:DA:7E:B3:C7:75:0A
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F4328584D5024F482E1418C99E19E4500
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/e08e796c-1321-3ec1-945e-b3589e8ffd5b.roa
Signing time:             Sat 28 Mar 2026 01:00:31 +0000
ROA not before:           Sat 28 Mar 2026 01:00:31 +0000
ROA not after:            Fri 26 Jun 2026 01:00:31 +0000
asID:                     62240
IP address blocks:        166.1.178.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:50:24:f4:82:e1:41:8c:99:e1:9e:45:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Mar 28 01:00:31 2026 GMT
            Not After : Jun 26 01:00:31 2026 GMT
        Subject: CN=580e637a-7aca-4c4e-bc3a-acb8a0a30d47
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:a6:e0:74:50:d9:50:ec:af:40:dc:65:d3:e2:
                    89:64:7d:07:49:bf:9b:b3:59:cc:55:f8:8e:7d:3b:
                    aa:00:83:47:b5:da:af:e3:2a:63:b7:ee:c1:52:bb:
                    89:cf:c7:31:ed:12:e1:7a:82:12:0e:3c:10:a0:14:
                    57:a2:33:0a:ad:61:49:f6:cb:5b:b4:66:38:00:7b:
                    0b:f7:f0:4a:17:7d:b9:6c:bb:6a:94:45:1e:64:20:
                    11:83:eb:f7:f0:ee:97:82:d5:b2:be:1f:d3:03:01:
                    10:52:51:7b:0c:fe:4d:20:42:fd:07:96:f8:86:dd:
                    79:22:a2:23:0e:91:49:1d:2b:0b:46:2f:7f:c4:75:
                    58:fe:35:97:22:16:7b:a4:3a:6d:22:8d:f5:c7:08:
                    91:be:ea:5a:14:0f:6d:84:e9:7b:83:78:86:c6:22:
                    84:99:f6:3c:f1:b0:65:d2:87:bf:31:54:cd:f6:f8:
                    4f:67:b2:74:a0:a5:ba:53:e9:14:92:cd:ad:05:61:
                    d8:1f:ef:a5:6b:fc:a9:77:46:b0:5e:db:b8:6a:23:
                    2a:03:52:34:72:50:62:bb:3b:c3:e8:60:31:a7:44:
                    2e:82:6e:e0:5c:86:40:b7:ac:4b:cd:a6:3f:0d:cd:
                    2a:6f:3b:3d:15:39:9b:3b:11:92:35:b0:f5:ae:77:
                    15:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:D1:D5:99:5F:B3:84:1B:01:E7:8F:32:76:80:DA:7E:B3:C7:75:0A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/e08e796c-1321-3ec1-945e-b3589e8ffd5b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.1.178.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a1:5d:44:1d:c2:66:8c:05:51:0b:2b:1c:15:47:07:22:bf:cf:
         6b:e5:46:31:aa:36:f3:0b:bc:7f:fa:8f:d1:c8:f1:41:87:32:
         4a:77:a7:88:37:f5:ae:d6:af:2d:09:69:cc:2c:1d:93:d2:bc:
         c8:01:41:6b:73:2a:3f:6d:d4:12:7e:7c:a7:76:15:b9:65:df:
         e0:54:6b:20:92:3e:94:73:0b:b1:c4:70:6b:35:ee:8f:d2:11:
         2f:d7:9f:2c:4f:26:38:29:0d:ba:c5:42:85:45:b3:f8:a8:2f:
         7c:1b:0f:13:a9:fe:d9:63:b2:46:0e:0b:f5:3a:ae:86:3e:66:
         ad:ae:20:62:20:2f:a4:f6:67:fa:5c:fd:76:0a:cf:d6:61:89:
         ab:b4:01:d1:24:00:62:7c:15:9c:02:19:fc:f3:02:15:ff:09:
         2d:a9:5c:18:05:d3:15:b9:63:2e:67:3c:f8:83:4c:cf:39:5b:
         5e:fd:b0:fe:47:ee:14:03:cf:29:c2:95:82:1c:a3:f8:bc:59:
         2f:eb:80:09:5f:36:35:f9:22:5e:99:50:e7:6c:9c:37:1a:54:
         10:8d:45:fe:c7:70:3a:c2:d1:5b:b5:af:0b:79:94:f8:1a:20:
         1c:29:18:f4:f7:13:6f:da:65:1a:da:e6:e9:f9:1b:8a:90:c4:
         8f:eb:dd:45
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1QJPSC4UGMmeGeRQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjZkZWEyYTUtODM3ZC00NmQ4LThmOGUtOTQ0N2VjZTIw
YzA5MB4XDTI2MDMyODAxMDAzMVoXDTI2MDYyNjAxMDAzMVowLzEtMCsGA1UEAxMk
NTgwZTYzN2EtN2FjYS00YzRlLWJjM2EtYWNiOGEwYTMwZDQ3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlqbgdFDZUOyvQNxl0+KJZH0HSb+bs1nMVfiO
fTuqAINHtdqv4ypjt+7BUruJz8cx7RLheoISDjwQoBRXojMKrWFJ9stbtGY4AHsL
9/BKF325bLtqlEUeZCARg+v38O6XgtWyvh/TAwEQUlF7DP5NIEL9B5b4ht15IqIj
DpFJHSsLRi9/xHVY/jWXIhZ7pDptIo31xwiRvupaFA9thOl7g3iGxiKEmfY88bBl
0oe/MVTN9vhPZ7J0oKW6U+kUks2tBWHYH++la/ypd0awXtu4aiMqA1I0clBiuzvD
6GAxp0Qugm7gXIZAt6xLzaY/Dc0qbzs9FTmbOxGSNbD1rncVZwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFI/R1Zlfs4QbAeePMnaA2n6zx3UKMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRl
YTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3ZWNlMjBjMDkvZTA4ZTc5NmMtMTMyMS0z
ZWMxLTk0NWUtYjM1ODllOGZmZDViLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjZkZWEyYTUtODM3ZC00NmQ4LThm
OGUtOTQ0N2VjZTIwYzA5LzY2ZGVhMmE1LTgzN2QtNDZkOC04ZjhlLTk0NDdlY2Uy
MGMwOS5jcmwwHwYDVR0jBBgwFoAUw4ati/QZSzWUJJuQup2AEcIIcckwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRlYTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3
ZWNlMjBjMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQApgGyMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAKFdRB3CZowFUQsrHBVHByK/z2vlRjGqNvMLvH/6j9HI8UGHMkp3p4g3
9a7Wry0JacwsHZPSvMgBQWtzKj9t1BJ+fKd2Fbll3+BUayCSPpRzC7HEcGs17o/S
ES/XnyxPJjgpDbrFQoVFs/ioL3wbDxOp/tljskYOC/U6roY+Zq2uIGIgL6T2Z/pc
/XYKz9Zhiau0AdEkAGJ8FZwCGfzzAhX/CS2pXBgF0xW5Yy5nPPiDTM85W179sP5H
7hQDzynClYIco/i8WS/rgAlfNjX5Il6ZUOdsnDcaVBCNRf7HcDrC0Vu1rwt5lPga
IBwpGPT3E2/aZRra5un5G4qQxI/r3UU=
-----END CERTIFICATE-----
Generated at Fri Apr 17 11:43:57 2026 by rpki-client