Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/2a6f18c7-fa98-3132-a859-1033145a617e.roa
File:                     2a6f18c7-fa98-3132-a859-1033145a617e.roa (raw, json)
Hash identifier:          HDudpc2ft399dAGRSA9t89MwZHqlcaArTh7rBKCaQiE=
Subject key identifier:   9F:1D:8F:52:23:94:FD:1F:FF:F8:A8:2C:D7:31:3B:EE:A3:7E:28:60
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F4328584DAE4FCF7D2390D55AACBC8000
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/2a6f18c7-fa98-3132-a859-1033145a617e.roa
Signing time:             Thu 30 Apr 2026 18:33:02 +0000
ROA not before:           Thu 30 Apr 2026 18:33:02 +0000
ROA not after:            Wed 29 Jul 2026 18:33:02 +0000
asID:                     44559
IP address blocks:        166.1.192.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 05 May 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:ae:4f:cf:7d:23:90:d5:5a:ac:bc:80:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Apr 30 18:33:02 2026 GMT
            Not After : Jul 29 18:33:02 2026 GMT
        Subject: CN=6a3ff9dd-80e3-4969-8a20-00d8e4f4cd48
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:c3:f3:22:7d:6d:6d:14:bb:68:ea:80:16:54:
                    0b:4b:bb:15:e4:ff:dd:3b:5c:ae:2e:df:31:a8:e9:
                    1d:12:2c:bb:b3:4b:48:ac:27:fc:a8:bb:66:e6:da:
                    cb:7a:cc:0c:80:00:7d:fe:14:4e:a7:06:b6:ed:78:
                    96:b3:52:8f:58:46:f3:a1:2a:cf:01:a2:39:11:a6:
                    b7:58:af:9c:b8:32:97:e0:50:42:e1:13:1c:42:20:
                    a5:11:a5:76:2a:b3:f3:3c:55:0a:47:eb:8c:dc:8b:
                    dc:38:11:84:af:f7:91:99:63:bf:8f:91:11:08:bb:
                    8f:c3:f2:f4:11:14:9c:7c:05:0e:02:26:13:ad:22:
                    11:a4:2f:da:c5:de:99:02:c7:4b:b6:26:83:7a:82:
                    97:04:ae:c4:23:6f:ef:34:cf:8b:19:f2:3e:be:ef:
                    6f:08:41:fd:41:01:d5:7e:20:67:2a:7f:41:fa:0e:
                    f0:4b:27:77:64:44:8d:b3:21:1e:e9:94:15:67:0c:
                    23:58:60:ae:13:d7:5b:77:8b:4c:23:0b:01:0d:26:
                    2f:47:1e:d9:0b:87:ec:36:e2:63:2b:6c:7e:9b:02:
                    72:f4:51:ec:9d:4d:48:4d:24:1d:75:80:f5:07:86:
                    51:e6:0b:e2:c1:b2:22:f4:6e:cb:63:00:0d:6e:ac:
                    83:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:1D:8F:52:23:94:FD:1F:FF:F8:A8:2C:D7:31:3B:EE:A3:7E:28:60
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/2a6f18c7-fa98-3132-a859-1033145a617e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.1.192.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         72:fc:d6:09:ef:ff:b8:cc:6f:dc:a8:d9:8a:75:e9:e0:c7:22:
         2d:2f:26:37:e8:0a:21:b0:6f:d2:e8:91:f9:23:06:14:a4:c3:
         cd:6e:22:44:61:34:8d:c5:aa:ca:21:74:9f:ab:b3:3f:b9:59:
         7b:fe:b3:da:a5:2f:a4:c1:d6:0c:40:4d:f0:22:86:0d:4d:9d:
         13:8c:9b:33:27:53:8e:0a:2d:cb:d0:83:26:b0:88:d2:ed:9d:
         85:41:b9:d1:ae:95:d2:64:14:7d:21:20:1f:2b:22:ad:8c:69:
         42:2b:96:fd:ea:d5:e4:5d:92:9f:d9:83:73:80:5a:38:43:00:
         b4:2c:86:a1:72:dc:89:24:a9:42:c4:33:86:d0:f9:2a:81:f0:
         e5:90:02:ba:73:a3:61:c6:17:22:68:91:fe:ba:25:1b:0a:6c:
         ca:a2:9c:15:43:23:3f:23:c7:47:42:46:d5:da:17:82:9e:fc:
         30:c8:d2:d2:0f:be:cb:d9:20:fe:a4:df:11:01:f3:15:18:43:
         3d:f6:7e:1b:9b:df:b4:cd:17:75:62:24:b3:a7:47:5b:8b:2e:
         08:02:cb:b1:6a:92:da:79:f3:38:af:2f:d4:0a:ae:38:55:f5:
         b2:4f:ed:c5:02:9c:ec:23:77:c7:5e:54:bd:58:ec:4d:ad:78:
         ee:6e:1a:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 2 23:10:00 2026 by rpki-client