Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/f080e711-fe70-330e-9cf0-3fd861d40211.roa
File:                     f080e711-fe70-330e-9cf0-3fd861d40211.roa (raw, json)
Hash identifier:          KLd7BBzTvS3OAoEKvZcT56292fL7w06/dSJ7MfgmJYQ=
Subject key identifier:   62:E1:25:2D:F4:95:7C:CE:F7:27:89:A1:C8:7C:A2:C0:3E:60:39:A8
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F4328584E15E4AA911FB995B3059A4900
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/f080e711-fe70-330e-9cf0-3fd861d40211.roa
Signing time:             Sat 06 Jun 2026 21:00:13 +0000
ROA not before:           Sat 06 Jun 2026 21:00:13 +0000
ROA not after:            Fri 04 Sep 2026 21:00:13 +0000
asID:                     401152
IP address blocks:        166.0.240.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:15:e4:aa:91:1f:b9:95:b3:05:9a:49:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Jun  6 21:00:13 2026 GMT
            Not After : Sep  4 21:00:13 2026 GMT
        Subject: CN=85713b83-6219-45dd-8d72-a415534f45cf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:5b:04:b0:01:c9:5a:c8:b3:2f:49:17:c0:e1:
                    6c:92:dd:d1:ca:55:7f:43:67:91:97:af:76:db:0d:
                    61:40:22:22:eb:81:e5:f2:76:ec:b6:45:35:45:0a:
                    ac:11:10:38:62:39:66:f4:34:52:b3:dd:5d:81:d0:
                    4d:64:de:28:82:eb:03:f2:39:a0:84:ad:e6:ec:13:
                    3d:c8:69:54:76:a8:c6:63:b1:87:b4:46:50:98:a3:
                    ea:a5:16:17:8d:e8:f8:3f:73:ce:9d:60:e9:e0:61:
                    91:9f:c0:f9:c7:5b:05:2d:03:0b:8d:66:d7:1c:1d:
                    8c:fd:e9:28:e7:70:75:5b:19:f6:39:06:4f:13:0d:
                    8d:89:29:53:84:bc:83:a4:0c:fc:d4:70:76:5f:fb:
                    81:85:2c:29:20:80:3e:58:e9:08:31:7d:3b:b0:82:
                    65:ec:25:0a:98:52:d4:0a:40:ff:f6:5c:df:eb:e4:
                    d4:79:85:58:48:e2:fe:a8:00:71:72:92:1e:7f:30:
                    56:2d:86:18:7c:99:93:f5:53:0b:6f:17:b3:66:90:
                    ed:bf:9e:ec:55:14:49:bf:18:23:6b:5e:8d:6d:0c:
                    5d:60:1f:d0:35:26:0e:65:61:3a:10:81:25:e4:c8:
                    15:37:e4:b8:cc:56:eb:dc:eb:6e:49:a5:f5:0f:95:
                    f2:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:E1:25:2D:F4:95:7C:CE:F7:27:89:A1:C8:7C:A2:C0:3E:60:39:A8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/f080e711-fe70-330e-9cf0-3fd861d40211.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.0.240.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         32:13:26:49:c9:5d:23:f1:94:d6:4e:27:91:83:73:de:25:46:
         72:5c:72:94:6b:ca:e6:e4:1a:65:e2:24:e8:a1:23:f3:14:fc:
         9b:21:f1:c7:54:f3:be:8e:bf:d5:67:d4:33:c6:6e:ca:4e:08:
         14:75:ad:25:36:27:9f:7a:25:19:50:c9:0f:4e:ad:39:02:aa:
         ab:25:28:3f:fb:97:ac:6f:84:1c:db:8c:95:65:d7:8f:48:04:
         cd:b7:7c:1d:97:20:c9:3f:73:57:5b:17:57:4c:fe:61:7c:23:
         4f:1d:6a:8a:2e:fc:97:1e:9d:60:e1:46:73:9d:a0:1c:8f:d9:
         af:5e:5e:b2:da:e9:66:36:13:27:77:3a:d6:cb:a7:4e:57:f8:
         35:9b:96:fd:10:a1:1b:45:e7:d0:59:3c:a5:e3:2c:52:70:be:
         65:19:46:2a:f9:8f:0c:89:e7:54:9c:32:ef:84:6d:7a:a9:f5:
         98:42:bb:95:2d:33:7d:33:53:8e:19:c7:90:55:a6:d4:89:79:
         3d:ca:47:93:10:ff:76:ba:37:3b:3b:4e:4b:40:99:59:86:7d:
         c5:4a:dd:36:86:5c:86:6e:39:17:e8:a2:a6:12:5f:c4:f1:c2:
         ab:17:37:b1:0d:9a:26:1c:a3:bd:a0:4e:bf:34:a1:9c:ea:09:
         02:83:b5:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 14:58:14 2026 by rpki-client