Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/255a9125-9289-34ae-8896-bd57ac74090e.roa
File:                     255a9125-9289-34ae-8896-bd57ac74090e.roa (raw, json)
Hash identifier:          FoWga0pgzAeyyLIcsNK6DFcH9zoUwaxT9PVFx+0Ct5A=
Subject key identifier:   21:43:FC:1F:11:6A:86:A2:DD:7C:D4:6C:AB:CB:B2:B0:62:E1:92:54
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F4328584EC7A1BFC0EE24EFE707B0C400
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/255a9125-9289-34ae-8896-bd57ac74090e.roa
Signing time:             Sun 09 Aug 2026 13:00:12 +0000
ROA not before:           Sun 09 Aug 2026 13:00:12 +0000
ROA not after:            Sat 07 Nov 2026 14:00:12 +0000
asID:                     25868
IP address blocks:        166.0.234.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:c7:a1:bf:c0:ee:24:ef:e7:07:b0:c4:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Aug  9 13:00:12 2026 GMT
            Not After : Nov  7 14:00:12 2026 GMT
        Subject: CN=deb46b4d-1842-4894-bbb0-fed2cb1c79d9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:3b:d4:13:c1:93:73:76:58:8b:5b:5f:a7:40:
                    87:4f:3b:37:cc:f1:3a:4d:41:f0:4e:31:8d:81:55:
                    ba:b3:fb:90:42:ec:f5:6a:12:0e:5f:ec:c4:7c:32:
                    e1:79:e8:92:a8:96:ab:2f:d6:f6:ab:e8:8f:7a:84:
                    5b:80:7e:bc:44:71:ca:5c:d5:1f:41:31:f3:f4:07:
                    75:ed:57:a0:af:4a:db:fa:00:a1:12:ae:b9:9a:fd:
                    d2:44:e2:97:4d:1e:43:37:e2:e8:f9:3e:52:4a:d1:
                    43:59:19:c9:4b:38:6b:04:2e:09:e0:d9:83:5d:59:
                    8c:37:de:5a:7c:7c:9a:0c:08:ea:67:0e:80:b1:d5:
                    4c:be:a4:fe:e3:8f:10:2c:c7:3b:84:eb:ce:fa:d8:
                    0e:e6:c4:0d:fd:67:39:a8:84:cf:15:e5:7c:bf:3f:
                    0c:3b:c7:70:bd:1e:0a:d3:b0:5e:cc:71:f8:c7:3f:
                    e4:19:4c:15:8e:3f:7c:66:f7:55:f8:b9:80:ba:35:
                    53:23:4d:ad:90:b8:12:a6:0c:f9:3d:75:e2:31:d3:
                    77:e7:b5:78:0d:32:81:49:36:8f:8d:59:d7:ec:dc:
                    3e:1f:eb:d8:2a:97:9c:42:9d:58:17:55:32:97:16:
                    92:47:aa:b1:f2:08:c4:66:dd:4a:56:8c:27:77:fd:
                    9e:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:43:FC:1F:11:6A:86:A2:DD:7C:D4:6C:AB:CB:B2:B0:62:E1:92:54
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/255a9125-9289-34ae-8896-bd57ac74090e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.0.234.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         53:e9:fc:6b:c3:7a:b4:ff:15:63:48:fc:21:67:a9:d9:be:af:
         9b:78:40:3d:21:83:77:f1:da:63:ec:e4:51:1f:a1:83:3e:9d:
         bf:a5:b9:9a:10:0f:58:9c:81:bd:3d:80:82:8d:23:e7:b1:13:
         ba:7e:3c:80:2c:58:fe:26:5f:5d:12:39:24:7a:df:35:d9:79:
         64:91:7c:9f:9e:9a:25:ab:bf:1d:fa:da:bd:d3:9d:f1:a9:8f:
         45:8b:1f:df:70:24:fd:ac:a4:a0:ec:51:38:8b:34:c5:e7:55:
         4c:d9:7d:8e:a8:99:e2:c4:f9:48:3a:5a:8c:7f:fd:48:03:47:
         d8:83:0a:1a:0f:32:b3:d1:ef:fe:4e:02:23:6d:91:88:c1:20:
         65:31:34:ef:97:d2:f2:10:12:29:f4:6c:00:c2:17:7e:b3:77:
         33:87:8e:94:6b:d2:77:9c:84:13:97:71:7c:5a:31:89:6f:f6:
         5a:96:d1:ad:41:5c:78:12:5a:db:2a:7c:11:33:7b:54:e3:4e:
         0e:fc:e9:3e:97:71:9b:12:dd:74:c4:25:77:09:d0:8c:41:f7:
         58:ac:40:9d:1d:e5:0d:3e:94:34:ab:23:e1:d3:0c:b1:34:80:
         fc:c9:30:a4:b0:7e:e8:fe:12:23:ac:d2:04:8f:f1:25:d2:b3:
         40:26:b4:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 15:26:10 2026 by rpki-client