Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/2eb7589c-5aa0-3a20-8aef-d88954cd7f03.roa
File:                     2eb7589c-5aa0-3a20-8aef-d88954cd7f03.roa (raw, json)
Hash identifier:          QEc/ina2yHo7rINB2lRBw+Pg+a0GEGuc7jAMtp0FEFo=
Subject key identifier:   7F:EE:AE:67:01:57:DC:43:79:64:69:B6:76:7C:68:AD:E2:E7:B3:BC
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F4328584E6ECEDB74D40A7B45AF2C21C0
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/2eb7589c-5aa0-3a20-8aef-d88954cd7f03.roa
Signing time:             Wed 08 Jul 2026 17:24:13 +0000
ROA not before:           Wed 08 Jul 2026 17:24:13 +0000
ROA not after:            Tue 06 Oct 2026 17:24:13 +0000
asID:                     401152
IP address blocks:        166.1.191.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 10 Jul 2026 08:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:6e:ce:db:74:d4:0a:7b:45:af:2c:21:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Jul  8 17:24:13 2026 GMT
            Not After : Oct  6 17:24:13 2026 GMT
        Subject: CN=ad783311-b315-49de-87db-86a7938c2ae9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:7a:dd:e2:05:01:4f:85:cd:92:a1:d5:fb:3f:
                    ff:5a:e1:b8:4b:d8:77:aa:fc:fe:1e:01:55:a4:7a:
                    83:2e:08:bd:99:1b:ba:f9:aa:e4:8b:89:ee:a4:89:
                    3b:ef:25:09:65:54:04:54:c8:ef:b3:51:e3:d9:61:
                    bb:d6:f4:1d:53:b4:eb:64:24:3c:e4:ff:5b:00:d8:
                    92:97:ea:7d:71:e4:10:8b:54:e8:3f:3b:8d:bd:74:
                    91:d9:80:e1:44:a2:ad:15:c5:6d:00:bc:6d:05:10:
                    50:12:1b:1f:71:af:1d:13:c2:85:2a:12:d5:8a:ee:
                    56:80:1e:7e:75:e0:bc:11:72:60:69:d0:04:7d:d0:
                    9c:55:c6:58:fd:18:72:76:42:81:68:8b:06:20:84:
                    72:70:f3:7a:2b:2c:a7:c6:09:b7:90:7f:d1:cd:00:
                    f7:43:ec:29:f0:49:dc:62:7f:f0:06:db:fe:0b:d9:
                    51:15:6a:85:58:19:09:10:0e:0a:e6:c3:1e:eb:61:
                    21:cd:ff:66:91:ea:5a:80:f8:14:ac:12:4b:14:ab:
                    23:a0:00:99:6e:00:23:fb:5a:43:73:b0:69:dc:34:
                    6c:01:1d:a8:b3:49:f6:81:b8:b8:ed:49:8d:e7:87:
                    07:67:29:82:61:f5:8f:79:cc:e2:7d:83:23:82:3d:
                    21:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:EE:AE:67:01:57:DC:43:79:64:69:B6:76:7C:68:AD:E2:E7:B3:BC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/2eb7589c-5aa0-3a20-8aef-d88954cd7f03.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.1.191.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         80:e6:7c:f7:a3:a1:a8:ef:46:5c:62:79:1d:00:ee:62:60:19:
         75:fa:28:80:31:d9:bb:c3:2a:1c:dd:f0:6e:cd:67:90:f5:16:
         e3:1b:c9:01:40:47:c8:24:d8:a6:3a:bf:50:54:9d:b1:76:64:
         d9:82:25:df:f6:e6:46:6a:37:f1:b9:78:21:e7:8e:ab:df:21:
         97:da:bc:4b:6f:b2:db:1f:12:c2:62:1d:79:81:e5:5c:73:b4:
         df:20:ce:ff:aa:85:4d:6c:ee:8a:9d:0b:60:81:12:cb:8d:d7:
         46:0b:ee:e0:7d:9e:e9:08:74:be:7d:5b:f3:83:46:d7:70:0b:
         07:f6:cf:c6:1c:91:2c:50:77:de:2b:a5:60:39:62:fc:12:83:
         6d:15:ec:e2:80:52:1b:3f:41:35:98:67:18:c7:5e:0a:f0:05:
         a2:5b:06:23:97:cc:4f:b6:86:1c:21:29:f9:c4:d9:68:0a:4a:
         52:b0:27:46:68:c6:51:fe:0f:44:87:9e:26:38:76:63:dc:15:
         58:31:d8:e5:77:e1:b4:30:13:59:64:fb:7b:6f:9f:78:8b:d0:
         bc:8a:5a:ac:5a:92:f6:ca:2e:f4:7a:c4:87:fb:d0:a5:20:25:
         c0:57:49:2d:24:d8:de:5f:02:4e:1c:48:9c:2e:a5:fa:79:21:
         d3:41:42:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 9 08:54:56 2026 by rpki-client