Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/28e6192f-5104-36a7-a314-32d941e6e04b.roa
File:                     28e6192f-5104-36a7-a314-32d941e6e04b.roa (raw, json)
Hash identifier:          M2zviBLEicZsWNTl9+0szH+gAco5m4jsbJByi+7sHfI=
Subject key identifier:   40:04:15:4B:54:E6:D3:68:B9:57:96:70:25:A6:8C:CE:1C:54:A1:72
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F4328584F549D5801B52302944AAEB180
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/28e6192f-5104-36a7-a314-32d941e6e04b.roa
Signing time:             Tue 29 Sep 2026 01:00:12 +0000
ROA not before:           Tue 29 Sep 2026 01:00:12 +0000
ROA not after:            Mon 28 Dec 2026 02:00:12 +0000
asID:                     200017
IP address blocks:        166.0.163.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 28 Oct 2026 08:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:54:9d:58:01:b5:23:02:94:4a:ae:b1:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Sep 29 01:00:12 2026 GMT
            Not After : Dec 28 02:00:12 2026 GMT
        Subject: CN=18f79dd7-1db6-4d47-9150-e55ef0f8b051
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:b6:bf:50:c4:68:00:a3:1a:c1:fa:79:7f:94:
                    16:c5:10:42:32:a4:4b:39:3a:84:af:fc:17:d6:3f:
                    08:bc:8d:8e:7a:fb:14:ee:44:25:10:e5:0f:78:21:
                    a5:12:b9:91:b9:75:ff:fa:ce:48:37:68:e0:d8:ad:
                    9d:a8:97:42:96:9d:4f:70:14:94:8f:69:e1:c9:fd:
                    8c:5c:b0:74:6a:9a:e8:9a:df:43:5f:ef:da:e3:4f:
                    a7:6d:67:c6:76:cd:09:62:13:fe:65:f3:c5:af:a3:
                    7e:91:b8:78:de:2e:70:53:ee:15:f3:51:d7:c1:ee:
                    66:f8:d8:dd:a9:14:ec:6d:37:32:88:61:55:f6:ad:
                    74:8d:ba:8b:9b:c9:7d:7d:5c:48:c7:7b:42:2f:bc:
                    d9:7f:1e:45:5b:54:e6:1a:83:5e:5f:af:af:5c:9c:
                    ef:da:06:6e:36:d0:8f:0d:bb:c7:25:60:b4:94:27:
                    f0:aa:d5:b8:7c:2a:8b:e5:80:a2:d1:02:a0:03:b1:
                    3e:c3:0c:e7:85:38:39:6c:53:ef:b4:5e:35:e8:ec:
                    6a:fc:74:1d:31:f1:fb:d7:8f:e6:d6:a2:2d:4c:a4:
                    b3:23:6a:2d:42:c6:d8:d9:62:8b:bc:35:55:e6:0f:
                    99:48:8f:9c:41:a3:5e:ea:0c:c1:10:68:6f:8e:fc:
                    b2:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:04:15:4B:54:E6:D3:68:B9:57:96:70:25:A6:8C:CE:1C:54:A1:72
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/28e6192f-5104-36a7-a314-32d941e6e04b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.0.163.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         74:bb:35:78:cb:12:46:a9:16:ad:b1:43:88:3d:84:78:1c:eb:
         aa:5e:81:12:53:cc:5b:e4:28:9d:17:11:a1:97:8b:89:45:6b:
         e3:af:68:25:11:07:fc:e2:9b:de:df:2c:5a:d4:0f:17:08:ce:
         29:49:19:2a:c0:06:d2:05:d6:78:df:09:44:d4:71:27:f0:c3:
         78:05:f5:7d:88:aa:af:02:32:42:9f:a1:a6:50:a1:84:bf:49:
         cf:ff:ce:83:48:30:21:b4:79:e2:f6:6e:5a:66:ee:90:6a:0b:
         bf:c8:94:b6:3c:fa:48:54:56:6a:bf:62:f0:b4:e2:52:f7:3e:
         e4:ad:37:c1:c1:e8:c7:a2:3d:50:ed:53:98:3f:a4:21:f4:3e:
         2e:d3:45:94:a2:48:cb:c0:a2:75:f4:e8:65:a0:a6:2e:b3:cf:
         75:07:8b:ff:46:59:ad:7f:4b:c5:0e:e0:f5:43:d8:b5:d2:8e:
         00:06:28:15:74:fa:d3:92:f2:fd:8f:96:8d:e3:95:fd:5a:df:
         0f:71:b5:fa:a2:9d:d5:64:de:dd:ee:cd:08:df:5c:ce:f4:67:
         a0:69:f4:62:f7:dd:26:51:80:83:31:bb:a1:39:6b:12:1a:88:
         37:36:10:f3:56:f6:d4:b1:31:5a:27:c1:27:72:c2:e8:21:42:
         db:50:5d:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 08:57:10 2026 by rpki-client