Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/3417126e-4349-36f3-92d4-d566e022cd1f.roa
File:                     3417126e-4349-36f3-92d4-d566e022cd1f.roa (raw, json)
Hash identifier:          yqMfGzIumz39lLT8mqpVUtpoTyd2YUCcCHtKHsIFB9U=
Subject key identifier:   7B:7D:E8:AB:CB:57:EC:45:5E:6A:08:BC:A3:40:03:59:10:F6:9A:F7
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F4328584EB57C55B528213D85234C1FA0
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/3417126e-4349-36f3-92d4-d566e022cd1f.roa
Signing time:             Mon 03 Aug 2026 01:00:11 +0000
ROA not before:           Mon 03 Aug 2026 01:00:11 +0000
ROA not after:            Sun 01 Nov 2026 01:00:11 +0000
asID:                     263812
IP address blocks:        166.0.108.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 05 Aug 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:b5:7c:55:b5:28:21:3d:85:23:4c:1f:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Aug  3 01:00:11 2026 GMT
            Not After : Nov  1 01:00:11 2026 GMT
        Subject: CN=cd2817e3-0924-4c59-a8ed-6f3c7cd149c6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:af:db:63:26:74:b3:80:a6:a5:6f:c3:ab:4f:
                    8e:91:e9:fd:1c:3e:67:1f:f0:89:7b:e7:29:e9:0c:
                    73:85:51:b7:2c:a9:ea:40:9d:ce:05:7a:d9:01:5e:
                    96:4c:44:64:86:a8:f7:5c:c3:35:f6:5a:06:bb:e4:
                    73:ac:5b:0e:47:9c:ee:58:42:c6:f8:be:74:d5:15:
                    cb:6f:15:16:69:33:a9:f2:93:b8:23:2f:bc:29:a5:
                    32:25:42:d0:0c:1a:7a:72:50:48:19:6a:81:d9:d5:
                    32:20:92:ff:f4:61:34:a7:14:ac:e2:c0:e1:93:f2:
                    07:54:7b:e7:a0:1f:6b:3a:9b:29:71:64:a6:96:62:
                    32:ed:c2:f9:93:72:d2:82:66:2f:bd:5f:66:5f:50:
                    21:fe:eb:a3:cb:7b:69:6c:14:2b:f3:3d:61:29:f1:
                    c2:d3:fd:55:1b:a5:8c:65:14:62:f6:0e:83:9f:70:
                    75:10:da:bd:41:f2:fe:ac:56:6b:89:ad:41:95:f8:
                    66:32:5b:f7:25:46:42:5e:78:07:ea:c6:fa:2d:f0:
                    cf:69:c4:31:b2:6e:17:02:30:36:44:b0:3e:88:8a:
                    49:3e:87:95:ec:5b:69:83:c4:ad:05:80:4a:da:5a:
                    16:b9:ac:c9:0d:05:cf:15:b4:67:e8:1e:b0:95:fe:
                    3b:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:7D:E8:AB:CB:57:EC:45:5E:6A:08:BC:A3:40:03:59:10:F6:9A:F7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/3417126e-4349-36f3-92d4-d566e022cd1f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.0.108.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         73:a3:31:a4:3a:36:f5:19:3a:4c:1a:e4:c7:1c:42:24:f0:8f:
         a0:e4:68:80:be:8b:1c:a5:10:9b:7e:5e:ae:14:a0:98:c8:1e:
         3c:9c:ac:7d:d2:16:f3:a9:23:96:7a:13:49:6c:1a:72:f4:3d:
         0e:32:75:02:0f:79:57:07:52:da:8f:4e:7b:8b:c1:ec:ee:cd:
         7f:a5:15:34:b0:bb:f7:9a:5d:25:c0:aa:a4:55:aa:b2:32:86:
         b5:39:ce:9e:c5:67:c8:15:a0:83:18:d3:25:36:c3:8b:93:66:
         b2:61:c4:ba:9f:ea:43:40:52:9a:92:e3:8c:6a:86:e6:0e:5e:
         66:c0:fe:8c:dc:63:b3:50:5a:de:82:33:91:69:2b:b3:16:da:
         d2:5f:93:76:59:12:f4:fa:e7:8f:1e:bf:96:0d:cf:94:7f:16:
         69:f3:df:c7:39:0a:f2:5d:71:32:51:fc:30:d9:df:32:07:87:
         d2:70:ba:96:bf:40:a8:7d:fa:a6:a6:16:47:2e:46:ca:c8:90:
         72:a3:05:b4:88:0b:5e:a8:7f:bf:30:ab:a7:3e:16:3b:82:cb:
         8e:6b:cb:7c:b3:d9:35:78:57:8e:ee:f2:c0:2f:0a:10:10:81:
         20:5a:09:3b:8d:d0:d6:8d:de:fa:2f:94:c4:56:f6:4c:d6:ca:
         ff:0a:bf:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 3 12:30:22 2026 by rpki-client