Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/18b62d35-0183-3869-bf9f-df24ac770d0f.roa
File:                     18b62d35-0183-3869-bf9f-df24ac770d0f.roa (raw, json)
Hash identifier:          MXExEi5K8Yb0c804slsnp715AthbNGLwsevl3fZHXWw=
Subject key identifier:   05:75:48:0F:62:4E:51:43:A6:E6:93:F4:B7:09:8E:71:67:3B:11:BE
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F4328584D30DDDF6BF258B3C8F0A97080
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/18b62d35-0183-3869-bf9f-df24ac770d0f.roa
Signing time:             Mon 16 Mar 2026 20:07:25 +0000
ROA not before:           Mon 16 Mar 2026 20:07:25 +0000
ROA not after:            Sun 14 Jun 2026 20:07:25 +0000
asID:                     401152
IP address blocks:        166.1.101.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 18 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:30:dd:df:6b:f2:58:b3:c8:f0:a9:70:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Mar 16 20:07:25 2026 GMT
            Not After : Jun 14 20:07:25 2026 GMT
        Subject: CN=e48186b6-a1fb-4bf4-9e05-a3f3cca5d3ce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:97:f6:ca:77:40:13:83:7d:26:a1:cd:27:64:
                    f7:56:1d:b3:48:77:b3:09:c8:fb:5b:da:f4:33:fb:
                    31:59:35:aa:e6:9a:15:da:d0:f4:1b:28:33:89:7c:
                    90:96:3d:08:d0:17:b3:22:85:dc:8b:9d:64:a2:07:
                    9e:4b:a6:85:08:33:ff:1b:3f:bb:ec:3e:77:24:4e:
                    e0:5b:56:32:47:48:98:15:b1:d5:ba:29:cd:01:20:
                    16:6b:32:33:2d:0b:6a:a2:f4:09:3c:3d:4d:8d:1d:
                    32:5d:3e:eb:22:78:25:d1:ca:a8:22:38:ef:61:6a:
                    71:e5:ea:69:0d:23:dd:f4:7d:46:38:2e:7a:fa:0c:
                    ae:dc:43:8e:cb:d8:d8:cd:cb:7e:17:0b:6a:29:a0:
                    d7:e7:36:2d:c2:00:25:a5:26:47:72:bc:f4:2e:53:
                    e8:d3:5c:cc:df:eb:12:85:94:77:a5:91:d3:3c:51:
                    62:35:c3:3e:b0:ba:ea:f0:5e:03:e3:2b:ad:13:b0:
                    ba:84:e7:9d:a2:c6:ce:d3:97:e0:b8:6c:62:2f:0c:
                    d7:01:84:c2:c5:36:fa:c4:ab:93:d6:fc:bd:4b:39:
                    f6:5d:7e:82:31:9a:1b:57:20:df:90:98:f1:5b:61:
                    09:42:86:de:9c:a6:e9:ed:1e:83:0c:8c:a6:08:95:
                    b1:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:75:48:0F:62:4E:51:43:A6:E6:93:F4:B7:09:8E:71:67:3B:11:BE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/18b62d35-0183-3869-bf9f-df24ac770d0f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.1.101.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8c:2c:b7:72:60:ce:45:cd:6e:d2:de:86:55:3f:7a:b6:47:ba:
         47:f0:56:36:bb:bf:3b:54:7c:e8:9e:0f:8c:5e:68:07:89:93:
         cd:5d:8f:03:f9:dd:c8:9d:79:d8:62:1b:b5:98:c0:9c:8a:61:
         77:b5:ae:6e:78:56:3c:ff:11:5e:0d:50:60:78:20:d0:ac:06:
         40:b7:e0:72:f0:b9:05:45:2d:5f:ca:25:8e:cf:7b:90:d5:93:
         f3:bd:3f:ae:17:9a:bc:82:31:de:f1:d3:2d:a8:cf:88:93:46:
         a7:09:d9:9a:47:2d:c7:36:30:01:6f:ce:58:e7:8f:94:a1:09:
         4f:a2:4e:f6:58:7e:fd:8a:6d:6a:b9:01:9e:74:af:d6:11:5a:
         08:b0:55:fe:5c:9e:7f:94:4f:55:d5:04:5e:bf:50:6e:f6:ff:
         59:7a:e5:10:d4:63:02:6a:81:4b:b0:a1:d8:ad:9c:4a:9b:cb:
         8c:2d:83:d6:15:ed:9e:54:f6:a1:a2:78:fc:7a:db:bb:1f:92:
         72:1b:56:ac:a1:00:77:34:63:f5:fd:ab:d3:98:1e:57:6f:b1:
         b2:b7:1f:55:d0:db:d9:eb:9a:14:2e:89:e2:55:5c:18:a7:f1:
         87:55:64:63:47:8d:70:20:7e:0a:60:df:52:96:1c:9d:fd:ee:
         65:1e:fb:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 17 00:40:09 2026 by rpki-client