Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/b4fa7e98-9955-34c8-bb12-1922134062f8.roa
File:                     b4fa7e98-9955-34c8-bb12-1922134062f8.roa (raw, json)
Hash identifier:          SFSf5kTAuo6+8a22jrsYGTGAXLud0dZ15p8762gZM2E=
Subject key identifier:   76:82:3A:A8:D2:40:B7:C2:F6:C9:09:45:1C:32:FC:2C:E3:39:85:0F
Certificate issuer:       /CN=dc455e58-6189-4f28-b803-61a965a21c65
Certificate serial:       010D0C9F4328584E2D9F1F0C932199A89029B700
Authority key identifier: 66:46:BF:04:CF:10:3E:4C:AE:90:A0:E6:CD:25:36:50:B6:45:BC:3F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/b4fa7e98-9955-34c8-bb12-1922134062f8.roa
Signing time:             Mon 15 Jun 2026 09:00:12 +0000
ROA not before:           Mon 15 Jun 2026 09:00:12 +0000
ROA not after:            Sun 13 Sep 2026 09:00:12 +0000
asID:                     30103
IP address blocks:        166.108.96.0/23 maxlen: 24
                          166.108.98.0/23 maxlen: 24
                          166.108.100.0/23 maxlen: 24
                          166.108.102.0/23 maxlen: 24
                          166.108.104.0/23 maxlen: 24
                          166.108.106.0/23 maxlen: 24
                          166.108.108.0/23 maxlen: 24
                          166.108.110.0/23 maxlen: 24
                          166.108.112.0/23 maxlen: 24
                          166.108.114.0/23 maxlen: 24
                          166.108.116.0/23 maxlen: 24
                          166.108.118.0/23 maxlen: 24
                          166.108.120.0/23 maxlen: 24
                          166.108.122.0/23 maxlen: 24
                          166.108.124.0/23 maxlen: 24
                          166.108.126.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Jul 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:2d:9f:1f:0c:93:21:99:a8:90:29:b7:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dc455e58-6189-4f28-b803-61a965a21c65
        Validity
            Not Before: Jun 15 09:00:12 2026 GMT
            Not After : Sep 13 09:00:12 2026 GMT
        Subject: CN=d1f6ab2e-98b2-4c9e-9bf2-747fffcef89e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:d7:d4:76:82:55:6d:e8:f0:91:35:16:59:ab:
                    80:8a:8c:d4:eb:3d:17:b0:e5:64:aa:ef:e6:9d:46:
                    8c:fa:e4:88:5b:9c:47:de:28:12:e4:c2:00:04:24:
                    34:8b:1a:69:c0:9a:a8:08:0d:74:c4:e8:0f:2b:88:
                    68:30:77:da:21:db:f5:36:c4:45:79:75:c3:ba:16:
                    6b:53:7f:14:df:ca:d7:07:13:87:96:16:d7:87:2d:
                    b5:0c:4e:0b:f1:74:29:e0:32:25:f2:da:5b:ac:6d:
                    e6:58:a5:ac:06:04:02:5b:52:3b:9b:8e:15:71:2f:
                    29:d5:61:89:26:1c:6e:a8:f9:26:6b:be:2d:8f:58:
                    d9:be:e5:5b:fa:9c:fd:2d:7e:51:30:1c:bc:04:2d:
                    c3:5a:dc:0e:c4:17:fc:b2:03:32:57:2f:4b:41:87:
                    2f:a9:ec:05:a5:29:a1:26:74:c5:03:97:5b:55:d3:
                    91:7b:14:c4:3d:43:62:e1:1c:fc:b0:7a:fe:07:d9:
                    42:af:74:50:82:8d:bc:fd:79:e5:77:95:0f:9c:2b:
                    0c:cb:82:5f:bb:d8:15:59:42:21:07:77:39:d9:b2:
                    da:47:b2:c8:15:68:c3:85:77:9a:6f:98:19:f3:c0:
                    a0:3d:79:d7:ff:e2:bd:ac:b5:91:07:a6:58:ec:35:
                    59:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:82:3A:A8:D2:40:B7:C2:F6:C9:09:45:1C:32:FC:2C:E3:39:85:0F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/b4fa7e98-9955-34c8-bb12-1922134062f8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.crl

            X509v3 Authority Key Identifier:
                keyid:66:46:BF:04:CF:10:3E:4C:AE:90:A0:E6:CD:25:36:50:B6:45:BC:3F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.108.96.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0c:6c:c4:f9:a6:0f:70:b7:01:83:db:c4:de:06:8a:af:b1:da:
         96:33:25:f9:2a:45:0c:ba:94:44:29:84:b3:e0:9e:ac:4a:d3:
         15:2b:ea:77:77:6c:f3:38:6c:cd:b2:6d:ee:44:01:dc:92:81:
         85:a6:4e:49:09:e2:b5:bc:6f:f8:03:f6:7a:c4:5f:2a:da:be:
         f2:56:a0:40:0f:ba:43:ec:be:9e:03:2b:70:dc:8b:5c:f7:c4:
         18:6f:a2:ed:bb:eb:f0:1e:58:e4:1e:3a:b7:aa:a0:27:d7:8c:
         4c:73:d3:a5:78:8d:d9:ca:a3:9c:01:79:b9:d3:fc:f2:38:4a:
         ca:1e:bd:82:98:6a:a3:17:ae:7d:f0:af:78:b4:b5:7a:d1:24:
         ab:17:7d:e4:23:36:ca:50:36:24:c9:f7:1b:86:ee:2a:23:9d:
         18:6b:eb:83:2c:59:8c:c1:9d:28:fd:f0:32:9c:bc:1c:0f:9b:
         21:31:03:9d:60:86:0a:46:f0:18:69:6d:bc:62:12:90:5f:5e:
         0e:a2:47:a0:a9:d5:3a:94:91:e2:b2:a9:84:85:d7:26:8b:db:
         cb:d5:95:5e:2b:fd:30:39:e9:d5:7d:4e:76:1f:9b:b0:3a:f6:
         46:b1:36:2e:e6:26:89:a3:07:8c:90:e9:e7:d2:06:d4:c0:db:
         f3:fa:c9:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 22:23:02 2026 by rpki-client