Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/2666f68d-6f74-3956-8320-2002c4e8fe70.roa
File:                     2666f68d-6f74-3956-8320-2002c4e8fe70.roa (raw, json)
Hash identifier:          KkWRK8Sfd2SI+nhcmrHbTClTly3ut1NdotLYPxUCXis=
Subject key identifier:   54:2F:D3:BF:F2:FF:E4:DD:37:5B:42:EE:01:34:6A:FB:5B:63:EA:8A
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F4328584DFC3FEE738F5E5125D0D22A00
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/2666f68d-6f74-3956-8320-2002c4e8fe70.roa
Signing time:             Thu 28 May 2026 16:34:06 +0000
ROA not before:           Thu 28 May 2026 16:34:06 +0000
ROA not after:            Wed 26 Aug 2026 16:34:06 +0000
asID:                     153671
IP address blocks:        166.0.15.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 31 May 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:fc:3f:ee:73:8f:5e:51:25:d0:d2:2a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: May 28 16:34:06 2026 GMT
            Not After : Aug 26 16:34:06 2026 GMT
        Subject: CN=8c63f121-952a-4391-bb75-4be7a93ca24f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:62:d7:e2:f8:05:1e:70:6c:6b:41:3c:b8:b7:
                    75:3f:0a:43:9a:b2:96:59:ec:11:61:aa:e1:04:a2:
                    29:b8:2a:39:3d:1e:8d:e1:f6:b2:3c:e9:c1:58:b9:
                    5b:00:34:c1:52:34:08:0c:11:b7:ef:7f:04:35:50:
                    83:4e:10:e0:ad:08:19:12:7b:d1:0e:e0:f6:63:0f:
                    9d:3e:4a:31:bb:99:95:cc:4e:ba:5f:ab:b2:28:73:
                    49:49:f6:31:f6:fe:ba:f7:bd:25:83:c4:77:ba:cc:
                    b9:63:ae:ec:92:0f:fc:46:9b:07:40:5a:7e:b3:7a:
                    fc:e6:ef:c6:0b:35:b3:74:25:8f:92:9c:6f:b4:57:
                    04:98:65:41:e1:27:f0:31:61:ea:39:85:53:ca:03:
                    11:d7:52:84:10:51:ad:30:df:bc:92:86:fd:d4:a9:
                    5c:f2:eb:25:82:ea:7e:df:55:0d:e8:41:f9:4b:8c:
                    ed:cd:1e:c6:30:bb:20:b9:e5:04:3b:79:71:20:4e:
                    be:b9:95:53:18:67:0a:3e:36:71:51:57:61:f6:24:
                    15:37:28:ce:a4:7c:1a:f9:f2:5b:7d:5d:5e:2b:98:
                    88:e0:87:6a:18:03:51:f8:81:13:10:6d:75:68:b9:
                    74:eb:c1:40:e4:53:ea:ca:91:7a:da:14:50:c4:89:
                    04:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:2F:D3:BF:F2:FF:E4:DD:37:5B:42:EE:01:34:6A:FB:5B:63:EA:8A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/2666f68d-6f74-3956-8320-2002c4e8fe70.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.0.15.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         81:52:fb:61:52:06:1f:89:49:af:d2:8e:a7:97:43:65:d6:0a:
         80:ef:b0:f6:03:49:90:bc:90:14:2e:ab:d7:39:e6:f2:9f:35:
         cc:0b:5d:34:29:eb:9c:b2:14:ae:26:6f:19:1c:a1:c8:b7:91:
         50:25:18:9c:84:c1:e7:a7:8c:f8:fa:10:10:f4:a8:5a:31:04:
         af:44:f4:c6:71:25:fa:f5:37:50:e6:f1:b2:13:a4:ed:56:f0:
         02:86:f5:cd:04:2d:b5:4c:77:d2:24:4b:3b:32:ed:61:b6:e5:
         ec:7c:30:fe:18:fd:13:43:8f:30:57:c8:23:9d:5f:0e:c1:14:
         76:a6:e0:22:a6:32:73:b7:41:36:32:d1:5e:51:a9:28:d7:01:
         ed:17:fc:3e:6b:d4:75:80:58:08:cb:f6:8f:79:07:57:45:a5:
         dd:f1:d5:1e:d9:b8:7b:83:48:a9:d2:71:2b:64:b5:ce:f2:ea:
         04:70:2d:b2:fd:cf:89:9d:10:07:d9:4d:e7:12:15:4b:f5:da:
         00:34:45:e8:ba:e4:cd:5f:57:54:0e:e4:22:d3:38:66:fd:33:
         d9:aa:4b:51:74:76:8c:53:04:31:0f:07:ea:09:f5:c5:78:55:
         5e:62:5b:06:8f:0b:bb:a6:10:33:32:9c:f4:54:ca:98:d6:28:
         9b:d1:ef:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 29 18:26:23 2026 by rpki-client