Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/09735ed3-b89f-3188-b4f2-ed36eca42c0d.roa
File:                     09735ed3-b89f-3188-b4f2-ed36eca42c0d.roa (raw, json)
Hash identifier:          H9h5ocgGjU9IlqTTS8ENPZAAaH/bJNBlgd1Nqw3heno=
Subject key identifier:   3C:9D:DE:43:CE:5F:A4:0E:93:FD:F1:09:6C:AC:C1:D8:46:C9:03:08
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F4328584DAE4FC7183E795E1D677F51C0
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/09735ed3-b89f-3188-b4f2-ed36eca42c0d.roa
Signing time:             Thu 30 Apr 2026 18:32:58 +0000
ROA not before:           Thu 30 Apr 2026 18:32:58 +0000
ROA not after:            Wed 29 Jul 2026 18:32:58 +0000
asID:                     62240
IP address blocks:        166.1.112.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 05 May 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:ae:4f:c7:18:3e:79:5e:1d:67:7f:51:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Apr 30 18:32:58 2026 GMT
            Not After : Jul 29 18:32:58 2026 GMT
        Subject: CN=cdd526fe-4fd3-4bd8-9964-c3de1729be20
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:80:95:17:8e:2b:06:65:4d:33:64:b7:e8:68:
                    21:5c:3a:55:8d:19:a2:9b:60:eb:21:f2:6c:6f:3b:
                    3a:42:94:a7:a5:69:b0:c1:ab:72:a8:0b:0f:40:58:
                    69:57:87:c5:30:06:a3:24:ef:42:f8:ae:d3:0a:b9:
                    d0:ed:21:d3:be:73:46:12:af:a7:ff:d4:a1:85:ed:
                    14:bf:6c:07:bf:bf:b6:11:7b:b2:39:df:b6:e5:85:
                    1a:d8:d1:55:70:42:01:0c:d1:9f:f4:7e:da:88:18:
                    05:d5:9a:cb:1f:3b:c6:e0:ef:fd:dc:38:7e:53:f9:
                    8a:2a:e4:56:48:2b:87:e6:0b:db:61:90:9d:fc:3e:
                    a4:02:8e:bd:03:1a:5d:12:36:03:a1:b3:1e:d3:2a:
                    dc:93:2c:67:eb:94:74:13:cb:5b:2a:e2:64:0e:ee:
                    76:69:96:9f:a0:82:01:c3:69:ce:26:bd:1b:f9:2a:
                    28:28:ab:eb:ec:d3:df:75:06:1b:9e:0d:14:d3:79:
                    eb:4c:7b:25:5b:b9:12:61:92:a5:13:cf:7c:72:42:
                    ec:e8:f8:ab:b6:f4:90:53:d1:e9:53:59:70:86:ab:
                    3b:2f:aa:0f:af:05:c2:f5:36:b0:3c:80:8e:2a:9b:
                    e4:1c:27:02:de:cc:9d:e2:30:b7:06:d3:d0:6e:55:
                    f4:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:9D:DE:43:CE:5F:A4:0E:93:FD:F1:09:6C:AC:C1:D8:46:C9:03:08
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/09735ed3-b89f-3188-b4f2-ed36eca42c0d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.1.112.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7e:df:c4:ac:03:3e:fa:db:c4:cd:ea:40:b9:0b:15:3e:5b:ab:
         96:82:8e:37:fc:00:8a:63:7f:0f:61:49:eb:ad:76:aa:cb:fe:
         a5:31:64:6f:5a:2f:6e:5f:81:7f:19:aa:98:ea:2f:88:ee:3e:
         32:b7:db:a6:15:fe:ea:23:ab:e5:d3:40:71:0e:dc:9f:7d:5b:
         a4:30:f6:78:fa:a9:86:bc:e1:b8:bf:ec:05:bf:d1:66:b6:d1:
         4f:95:42:3a:10:36:e8:63:96:0f:43:5e:3d:16:15:bb:7a:3f:
         5b:49:47:b1:b0:e1:af:43:96:56:6a:80:9f:09:a5:74:4f:ab:
         f8:34:f7:d9:4f:59:5f:cb:4d:2a:33:0a:02:6a:a6:cc:b1:23:
         16:2c:56:5c:1b:0b:0b:72:b7:b5:d7:74:84:ea:10:a0:83:aa:
         31:1e:51:03:7a:d9:f5:5c:8f:7c:79:7c:0b:96:84:fd:cb:d5:
         05:cf:4c:37:2f:b3:b5:d4:4a:40:ab:0c:c8:1c:0d:42:15:ef:
         f3:54:7e:66:d5:4e:b9:5a:c5:28:66:06:54:ad:88:83:a3:ce:
         18:17:e7:2d:a1:ea:8e:81:19:09:38:47:ac:92:44:af:8e:42:
         9f:86:05:71:04:5e:65:e4:e0:cf:b7:2e:fb:b1:ca:a9:77:ce:
         56:cc:15:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 2 23:08:31 2026 by rpki-client