Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/ecca16f5-35a3-330b-b488-e30e47f760c0.roa
File:                     ecca16f5-35a3-330b-b488-e30e47f760c0.roa (raw, json)
Hash identifier:          ydVHHY+3pCngMF8imvc3bH7nvRC0SmRPbivSrSOwSHc=
Subject key identifier:   25:93:65:35:5B:DD:6B:23:8B:FF:7A:B3:FE:15:3A:93:B3:6D:D7:DA
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F4328584E15E4A9DAFD7488DBF509C480
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/ecca16f5-35a3-330b-b488-e30e47f760c0.roa
Signing time:             Sat 06 Jun 2026 21:00:13 +0000
ROA not before:           Sat 06 Jun 2026 21:00:13 +0000
ROA not after:            Fri 04 Sep 2026 21:00:13 +0000
asID:                     401152
IP address blocks:        166.0.99.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 08:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:15:e4:a9:da:fd:74:88:db:f5:09:c4:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Jun  6 21:00:13 2026 GMT
            Not After : Sep  4 21:00:13 2026 GMT
        Subject: CN=14f9ffa3-d050-43c3-9f77-d65769fa0056
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:41:ae:ae:5f:32:63:01:69:c1:03:ce:93:5e:
                    68:28:55:4b:99:60:97:7f:4c:04:43:9b:d7:ee:fe:
                    ee:a4:b1:f1:67:b3:93:f6:06:d2:e1:df:76:6e:62:
                    dc:3e:85:43:87:e0:bd:c3:05:c0:d2:67:8a:a5:27:
                    22:fa:2e:77:a7:dc:db:b8:8c:d2:8f:dd:6a:1a:96:
                    ed:15:3f:55:c8:d4:1c:83:05:e7:aa:7a:1e:72:55:
                    6a:03:a2:ac:28:c6:aa:a5:f0:79:e6:84:5c:1f:f9:
                    d1:93:0e:52:cd:c3:69:29:b9:9d:79:1f:fe:08:f1:
                    79:d8:77:4c:e4:26:a1:86:48:fa:a9:f8:13:ec:f5:
                    63:53:53:a0:d8:ea:ba:45:b9:b8:16:a6:01:86:bf:
                    54:93:e2:b2:66:4f:26:cc:db:7f:28:c1:a3:1c:2e:
                    49:34:e2:39:4f:31:4b:b5:58:ec:14:ff:33:a9:74:
                    87:a0:98:7d:40:f9:77:26:24:e1:9a:14:68:b6:45:
                    ca:be:ae:56:1c:d4:c3:2b:81:42:fd:e7:2a:36:79:
                    cf:32:db:f5:dd:06:da:0e:91:2d:fb:32:81:e7:e2:
                    d3:4b:42:93:49:58:98:c4:f8:96:3f:c7:cb:88:5e:
                    04:9c:fb:29:7f:04:2d:11:6c:3d:a9:3c:bc:61:fe:
                    86:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:93:65:35:5B:DD:6B:23:8B:FF:7A:B3:FE:15:3A:93:B3:6D:D7:DA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/ecca16f5-35a3-330b-b488-e30e47f760c0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.0.99.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         59:01:94:e5:e4:50:1b:5b:6e:c6:0d:2e:93:3d:9e:d2:7e:91:
         d6:d0:ee:fe:c6:62:d2:78:71:2c:e2:b4:f8:5f:55:ac:52:ce:
         0a:86:1d:6e:8d:82:14:d2:1c:b2:f4:b4:58:74:6e:1a:81:d5:
         8b:38:56:a2:ca:8e:14:26:26:62:52:2d:d8:7c:74:cc:b3:b4:
         c2:71:4e:cb:ac:66:44:3f:6d:b5:3e:b9:25:24:32:73:d3:3e:
         4a:a0:2a:b8:79:50:c7:99:b9:ad:6c:03:72:69:65:38:db:09:
         cd:6d:e7:70:0a:42:74:e5:58:94:e7:ca:ee:e9:ed:7d:10:b0:
         56:1a:17:b0:66:d1:3c:80:cf:18:01:a5:c4:eb:c2:d9:f5:75:
         59:3e:2c:01:d6:89:11:7a:13:17:e9:f7:d4:8c:e2:9c:8c:ce:
         e7:81:fa:8f:f7:50:66:90:3c:1f:68:4c:db:aa:c6:d3:b5:91:
         7b:f6:e4:e8:13:a6:ce:81:cc:e5:16:14:8e:4f:6c:4c:69:5c:
         18:e5:6d:08:f0:d1:63:7b:c0:b5:90:f5:3a:ee:fd:12:dc:6e:
         4c:fc:b5:51:a9:a1:8f:af:d2:14:7e:56:1c:c0:93:da:78:9a:
         49:16:04:70:96:eb:0c:ca:24:74:ec:5c:5d:0c:69:a5:39:9e:
         4a:35:58:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 08:46:31 2026 by rpki-client