Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/19a81a41-4348-33df-8cf5-a892937185b8.roa
File:                     19a81a41-4348-33df-8cf5-a892937185b8.roa (raw, json)
Hash identifier:          ctDq5nw6sKU0qCzO9m+E8wjJQH1LgPDHDsWYiaIgA2w=
Subject key identifier:   B0:57:46:16:68:74:0F:1E:AF:B0:BB:AE:4F:98:4F:A1:9E:B1:CC:48
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F4328584D9D78DE68277BCAB2AA57A100
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/19a81a41-4348-33df-8cf5-a892937185b8.roa
Signing time:             Fri 24 Apr 2026 17:47:01 +0000
ROA not before:           Fri 24 Apr 2026 17:47:01 +0000
ROA not after:            Thu 23 Jul 2026 17:47:01 +0000
asID:                     401152
IP address blocks:        166.1.0.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 29 Apr 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:9d:78:de:68:27:7b:ca:b2:aa:57:a1:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Apr 24 17:47:01 2026 GMT
            Not After : Jul 23 17:47:01 2026 GMT
        Subject: CN=0d6f01e0-3947-42b7-8749-cd2b1fe79984
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:49:dd:f9:eb:09:a8:ff:84:85:5b:9d:49:e2:
                    7b:91:53:d5:41:82:1d:c1:c4:79:39:dc:59:b7:fe:
                    01:c4:a2:aa:95:9a:32:ed:9a:86:6e:8b:f3:74:2e:
                    f1:98:13:d1:e9:77:56:6c:cd:40:2a:db:01:6a:05:
                    a0:96:3a:2f:8b:15:e6:85:d7:70:67:d5:19:16:50:
                    cd:02:d6:6b:4a:b2:db:55:d4:73:c1:49:51:45:b2:
                    2c:a5:8d:0d:59:ba:50:92:17:44:c5:b2:6b:86:8e:
                    99:21:6e:92:ee:d6:01:a3:68:ba:ab:7e:f9:d4:b3:
                    3f:e7:fe:75:d6:76:d0:c2:c1:74:f8:46:8e:49:39:
                    57:2c:68:08:2a:c3:c9:a0:91:57:fe:02:34:9b:92:
                    93:41:d9:f0:e0:c3:23:40:f7:d1:0c:2a:79:01:df:
                    f9:59:9b:70:e6:26:35:ca:55:06:0f:2a:f5:80:4a:
                    e7:03:ca:1d:6c:06:29:5f:ee:8f:fa:55:73:0d:6b:
                    a2:e0:1b:d5:7a:b8:87:df:1f:a8:e8:12:fb:f9:10:
                    73:f8:50:9c:84:d1:8a:ee:12:9d:6e:46:4f:ec:3a:
                    47:8e:33:76:19:71:da:1c:43:76:2c:f5:33:d1:33:
                    44:4d:a9:ad:6c:86:71:41:fe:23:8d:32:b3:8b:e3:
                    9f:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:57:46:16:68:74:0F:1E:AF:B0:BB:AE:4F:98:4F:A1:9E:B1:CC:48
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/19a81a41-4348-33df-8cf5-a892937185b8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.1.0.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2d:d6:37:11:b6:d4:66:8e:6f:bc:87:97:87:51:bc:14:1b:d0:
         c9:61:5a:a3:ff:ca:0c:84:d1:7a:38:6f:ef:b4:e7:b3:c6:03:
         26:24:50:b1:51:69:97:28:7f:d8:32:92:e9:19:ae:52:21:f9:
         b2:28:90:ed:46:77:62:e7:c8:dc:b3:4d:cb:fc:18:e4:80:f4:
         14:bf:e7:81:1f:64:3b:ec:95:62:62:7e:f7:8e:c0:e1:70:57:
         5b:1a:b5:92:af:7c:21:07:89:eb:6b:f4:ce:f8:b1:7e:1b:3f:
         7a:5f:cd:bc:c2:7a:45:a8:ce:04:61:f8:2d:ff:05:b9:bb:db:
         f6:97:a8:2b:31:ee:57:2e:bb:c3:da:02:5e:28:45:ae:d9:77:
         ef:f1:1c:71:bf:d7:44:dd:c0:7f:ed:89:5d:8f:5b:f4:34:63:
         63:a0:44:75:42:47:d4:82:5c:94:c7:49:b1:ae:1f:d2:c8:e6:
         7b:4f:f7:ac:ff:ae:d7:19:ed:6b:1f:fe:eb:92:6a:84:e4:01:
         16:f2:e7:44:1b:51:4f:ff:04:3f:bb:90:69:6d:34:15:a9:0c:
         e1:c3:7e:5c:66:29:4f:04:2f:81:be:08:df:ac:76:d3:72:7a:
         ce:6d:e7:29:10:87:47:51:18:06:5c:ae:04:2c:d0:c7:37:fb:
         a7:36:e1:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 26 21:36:14 2026 by rpki-client