Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/08a02d66-561e-3785-9b81-9c836bf82b02.roa
File:                     08a02d66-561e-3785-9b81-9c836bf82b02.roa (raw, json)
Hash identifier:          0F2j5eZUajtkB0oCPY3xWaj8xPoWop70HzLyZB/QT9A=
Subject key identifier:   CD:04:35:A8:9D:5A:72:36:5E:0A:20:E3:9A:2E:6C:2E:5B:D7:C8:E1
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F4328584EC63C704DB7730F8C96295140
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/08a02d66-561e-3785-9b81-9c836bf82b02.roa
Signing time:             Sun 09 Aug 2026 01:00:12 +0000
ROA not before:           Sun 09 Aug 2026 01:00:12 +0000
ROA not after:            Sat 07 Nov 2026 02:00:12 +0000
asID:                     11798
IP address blocks:        166.0.187.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 24 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:c6:3c:70:4d:b7:73:0f:8c:96:29:51:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Aug  9 01:00:12 2026 GMT
            Not After : Nov  7 02:00:12 2026 GMT
        Subject: CN=4f5c9fdb-d0a5-48b5-9796-5033651f4fa7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:67:89:1c:2a:68:34:3f:61:f8:8d:b8:bb:6b:
                    6f:ee:8d:57:57:13:1a:9e:14:de:a5:b1:00:0f:42:
                    9e:07:39:a0:4f:e1:df:42:7d:1d:a1:c7:59:fb:0c:
                    45:b5:66:37:47:c9:0d:b6:51:62:d7:08:1d:f4:80:
                    aa:f1:44:7b:b3:1c:e4:f0:c1:05:f4:59:ef:2a:08:
                    36:e1:f6:af:0c:0e:5a:e2:e4:87:57:ce:be:b5:17:
                    58:40:32:a7:c1:49:5f:3e:10:2d:0a:5a:1c:c7:5b:
                    c5:0e:8c:38:38:fd:83:6c:c4:f3:8f:0e:29:35:32:
                    01:b5:eb:52:40:6f:9d:d2:00:ad:d1:49:80:23:ca:
                    88:40:99:0f:2a:97:7f:3b:d1:7a:5e:6a:e9:a3:f4:
                    32:71:3b:18:6e:34:46:f8:1b:c0:76:f7:78:27:a6:
                    0d:1f:b5:aa:48:98:81:66:ca:47:3a:0c:51:15:6f:
                    0f:da:c7:ec:63:18:9e:20:f3:b3:af:f0:56:b1:ef:
                    c0:05:67:37:0a:c1:78:c0:71:a6:6d:73:c9:37:be:
                    fe:23:a3:8d:be:5d:0e:49:e5:9c:3f:62:d0:c7:da:
                    cb:13:a0:80:39:bc:13:68:fa:23:de:74:d5:9d:49:
                    b4:07:6e:bb:80:46:d9:b0:c1:ed:28:1d:a9:11:4b:
                    38:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:04:35:A8:9D:5A:72:36:5E:0A:20:E3:9A:2E:6C:2E:5B:D7:C8:E1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/08a02d66-561e-3785-9b81-9c836bf82b02.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.0.187.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         78:02:ba:16:25:5f:b1:5b:da:d3:d0:fc:5b:89:d3:1a:13:75:
         ee:d8:cf:f3:cc:58:38:2c:5a:41:fe:88:1e:2c:c9:3d:42:dd:
         ec:49:8b:bf:20:9a:a8:9d:ae:3d:79:6b:cf:00:a4:ce:b2:a0:
         8c:cf:07:f5:00:55:af:51:c0:a5:5a:6b:07:de:14:40:64:f6:
         3d:69:c7:43:6a:73:96:3b:d4:3f:2c:d7:a0:6c:12:44:f3:30:
         de:7a:43:53:60:48:aa:8f:90:5c:ab:2d:3b:a2:8a:93:b2:f2:
         f6:bd:b2:64:3b:db:b3:51:97:d2:e5:b5:0a:a8:89:14:89:5d:
         b1:7f:78:67:ce:8d:06:2e:3d:73:b0:5d:60:ba:6b:13:16:7b:
         ca:e3:04:fc:a8:e5:b8:28:96:16:8f:b5:0c:19:91:39:97:57:
         17:5a:07:5a:d1:96:09:7c:84:19:df:53:5f:02:31:ef:b4:39:
         d1:bc:96:8f:6e:fd:c3:23:a6:be:8a:88:55:ee:9f:b6:2a:f9:
         22:ff:a5:fb:a1:0b:4e:81:af:38:5c:84:40:50:1f:ce:66:f0:
         be:fa:ff:98:72:c7:29:ea:ad:f2:2b:ef:e7:dd:2f:d6:73:84:
         a1:7e:cb:6a:85:d5:8c:2d:19:92:d9:97:48:4b:4d:50:85:3e:
         19:33:c5:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 11:40:50 2026 by rpki-client