Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/0f35f1eb-552d-3c2a-a2f9-bf05a8d43f04.roa
File:                     0f35f1eb-552d-3c2a-a2f9-bf05a8d43f04.roa (raw, json)
Hash identifier:          Ks409qzXgyWJ7QAlBz+fOMERRAVxvppZmiuy2p/qxwI=
Subject key identifier:   7A:C2:DB:9C:6D:FA:20:8A:D2:3C:9F:8E:EA:B0:5D:B2:C2:5D:36:6B
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F4328584E6ECEDBBBD4E6307A57ACCEC0
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/0f35f1eb-552d-3c2a-a2f9-bf05a8d43f04.roa
Signing time:             Wed 08 Jul 2026 17:24:13 +0000
ROA not before:           Wed 08 Jul 2026 17:24:13 +0000
ROA not after:            Tue 06 Oct 2026 17:24:13 +0000
asID:                     401152
IP address blocks:        166.1.194.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 10 Jul 2026 08:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:6e:ce:db:bb:d4:e6:30:7a:57:ac:ce:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Jul  8 17:24:13 2026 GMT
            Not After : Oct  6 17:24:13 2026 GMT
        Subject: CN=0af6161f-f482-4836-a883-65010728d864
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:89:b2:a7:ad:1a:55:de:8a:5b:03:ef:68:0d:
                    e9:35:a7:d8:27:47:54:4a:94:09:8c:b4:de:eb:71:
                    b1:b6:21:ce:a2:bd:d5:13:80:08:25:1c:e6:2e:e6:
                    de:cb:29:be:a9:27:9b:a5:4c:21:4d:a2:16:50:fd:
                    c9:79:c2:12:91:0b:6b:e2:ee:74:69:58:9a:b7:a5:
                    45:b5:02:12:b2:8a:65:a7:f2:77:69:89:b7:0c:2d:
                    43:30:81:ab:20:05:37:dd:e4:e7:ed:b2:df:f2:a5:
                    cb:e0:c6:d4:55:b0:4d:5d:71:17:29:f2:71:c4:95:
                    9b:36:e0:df:0f:f4:af:db:06:2a:e4:f6:6c:67:89:
                    77:48:da:f3:03:ff:0e:90:a5:8d:92:fd:04:0f:80:
                    da:67:75:6e:5f:05:db:50:cf:3c:ef:4f:db:02:ad:
                    8c:c7:f5:58:5a:d7:ee:73:f5:05:32:76:44:f8:86:
                    3f:ee:cf:fe:6f:ba:63:c0:6f:06:53:e9:b0:a2:4d:
                    07:1b:13:b3:7b:2d:55:27:d5:7d:84:5f:30:3e:aa:
                    35:fc:92:f6:08:ec:b5:92:a3:5d:1f:14:f3:1c:8f:
                    f1:cd:ec:51:d9:cf:62:7e:47:ca:79:2f:f1:55:c6:
                    3d:0a:08:53:14:e2:ba:db:79:03:34:cf:31:fe:59:
                    7c:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:C2:DB:9C:6D:FA:20:8A:D2:3C:9F:8E:EA:B0:5D:B2:C2:5D:36:6B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/0f35f1eb-552d-3c2a-a2f9-bf05a8d43f04.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.1.194.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         50:6d:33:05:bc:5d:18:0c:6c:7c:2c:50:19:cd:55:1f:3a:ad:
         0f:a4:2f:1b:46:27:d9:b6:4b:ff:52:93:ac:4d:2d:25:3b:69:
         5c:1b:71:81:0c:41:63:f7:17:99:33:cf:f4:59:05:2f:59:3e:
         7e:ea:60:47:6a:f3:1d:57:78:5f:0c:fc:be:72:41:3f:76:e0:
         bc:39:a7:8f:06:e6:87:46:4d:61:c7:75:d5:00:d9:9d:bd:5f:
         4e:37:b3:f4:79:08:0f:0b:46:c5:c0:3b:60:01:18:2e:8e:07:
         98:0a:2a:fd:b4:df:a5:05:71:8c:e4:f6:d6:89:89:19:63:d4:
         11:5c:51:e9:65:cb:b1:96:8f:14:25:cf:36:f9:9e:64:cb:22:
         3b:15:fb:b6:3f:1b:fe:87:da:86:78:71:e6:10:91:df:fc:23:
         1c:96:dc:5d:51:09:8a:31:62:21:e2:cf:0e:e5:47:78:ff:08:
         d2:51:0c:fa:4e:1e:cd:92:65:ae:ad:b2:f6:3e:9c:3d:cc:4d:
         10:87:f7:6d:29:86:df:c1:fe:44:14:e4:7d:52:7b:37:ad:c9:
         6e:a8:7c:00:19:55:5e:0f:38:72:8e:76:7e:59:ca:ae:c2:04:
         7a:bb:35:91:56:9a:2c:31:c1:02:11:88:f8:8a:cc:1f:5f:0a:
         9d:5f:cf:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 9 08:54:56 2026 by rpki-client