Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/21e6778b-5823-360c-86be-9a87913016a0.roa
File:                     21e6778b-5823-360c-86be-9a87913016a0.roa (raw, json)
Hash identifier:          UYk3rJKYqPbCYvg1ThDJ1EzfZZKrYUZOIaBGZMDRdwY=
Subject key identifier:   84:BA:06:F0:CA:89:D5:9F:55:B8:F2:E8:8C:5A:E6:EE:C7:A8:41:33
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F4328584D1B1A0A84A08F1FA269134A80
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/21e6778b-5823-360c-86be-9a87913016a0.roa
Signing time:             Mon 09 Mar 2026 01:00:32 +0000
ROA not before:           Mon 09 Mar 2026 01:00:32 +0000
ROA not after:            Sun 07 Jun 2026 01:00:32 +0000
asID:                     19318
IP address blocks:        166.0.144.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 22 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:1b:1a:0a:84:a0:8f:1f:a2:69:13:4a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Mar  9 01:00:32 2026 GMT
            Not After : Jun  7 01:00:32 2026 GMT
        Subject: CN=51864671-d2bc-4a3d-993c-2f8e72cfb672
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:9d:f0:e5:85:ef:47:cf:0c:88:66:bc:bb:b8:
                    ec:d2:ae:35:0e:4b:3b:36:80:aa:6d:16:33:ec:7e:
                    ac:95:2c:0a:89:e0:f9:3c:09:7a:13:b1:e3:b5:b8:
                    ed:f6:8f:09:60:30:17:1d:57:af:49:bb:05:e8:83:
                    1c:13:e9:94:9e:d4:49:72:81:c6:96:b8:5c:6e:80:
                    48:e6:ce:f5:cc:a6:d2:4b:a7:0c:32:38:5e:e0:a3:
                    e8:5c:21:a6:31:b2:4d:4e:cd:33:12:f0:3e:3f:26:
                    9a:1c:ad:0a:9d:4a:01:94:71:ea:9a:28:c2:b5:68:
                    02:2a:0c:91:9c:5d:76:0a:2f:dd:58:31:12:19:29:
                    81:28:48:33:9c:30:9c:8d:7d:2e:05:7e:05:f6:29:
                    fb:be:a5:5d:2c:ad:d4:53:35:b7:fa:b3:e0:38:53:
                    e1:cd:da:63:dc:f0:7f:4a:51:c5:f4:7a:b7:b5:4a:
                    0a:93:54:9f:57:92:f8:ad:ac:13:83:cd:a4:dc:dc:
                    b5:79:1b:d3:af:d2:c2:12:e5:53:cf:61:76:cc:45:
                    91:c0:00:b4:36:ac:d4:74:af:8c:b3:5a:d2:d9:0a:
                    17:2c:bd:ab:be:de:63:1b:c7:8b:f3:8f:b3:c0:fb:
                    0c:40:f3:84:59:ad:3e:0a:17:dd:91:fe:80:fc:a2:
                    9e:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:BA:06:F0:CA:89:D5:9F:55:B8:F2:E8:8C:5A:E6:EE:C7:A8:41:33
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/21e6778b-5823-360c-86be-9a87913016a0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.0.144.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7a:d1:18:ec:8e:d5:de:a4:7b:aa:e4:39:38:e4:38:5a:65:d4:
         2b:47:bc:d4:15:dc:3f:ce:71:b6:cb:13:09:70:83:b9:3a:7e:
         5a:14:fc:d4:90:dd:61:04:7f:e8:cd:a6:4c:bd:54:89:d8:c9:
         11:5a:73:7d:d7:a1:77:b7:df:f8:ee:25:5c:52:91:a8:1e:8c:
         59:33:07:8f:b1:ea:b8:44:f9:e7:6f:6b:c9:66:87:37:e0:ba:
         02:2d:9f:93:c0:0f:6c:17:3a:14:86:22:ac:ed:0b:20:11:f2:
         c7:f1:80:a2:8b:58:12:55:b1:79:2c:8a:65:6c:e0:ed:ed:df:
         6c:66:e4:a5:79:16:c1:4b:b0:6c:eb:4f:01:4d:ed:83:40:0b:
         bb:9d:e2:50:de:ac:8e:de:87:58:fb:84:60:03:cc:8f:dd:81:
         09:05:29:0a:1e:01:00:a4:39:16:b5:f6:2a:5a:e0:99:b5:10:
         4a:b5:9c:09:3f:88:7d:5d:0d:ee:ce:91:31:b4:26:7c:b9:b5:
         a5:62:bb:fb:10:a8:03:52:d6:84:1d:1e:e7:48:f8:f9:16:ad:
         1f:9e:e5:b8:9d:df:77:1e:8e:08:1f:9b:37:7e:72:99:01:19:
         e1:c1:cc:8b:4b:95:98:45:78:86:84:e3:0c:50:5c:04:71:b5:
         01:4a:7a:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 20 05:16:37 2026 by rpki-client