Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/38faee66-cab9-3fb6-849f-a05e4591d6e0.roa
File:                     38faee66-cab9-3fb6-849f-a05e4591d6e0.roa (raw, json)
Hash identifier:          fwuNbE31bZjN66YvNcdoWZ9k/enMKYjfKVnPfNkJSPw=
Subject key identifier:   28:F9:79:41:8B:B0:04:53:3F:9C:F0:E4:A7:45:ED:62:8F:1F:13:14
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F4328584EC7A1C515F835B60FAE09BE80
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/38faee66-cab9-3fb6-849f-a05e4591d6e0.roa
Signing time:             Sun 09 Aug 2026 13:00:12 +0000
ROA not before:           Sun 09 Aug 2026 13:00:12 +0000
ROA not after:            Sat 07 Nov 2026 14:00:12 +0000
asID:                     11798
IP address blocks:        166.0.234.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 26 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:c7:a1:c5:15:f8:35:b6:0f:ae:09:be:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Aug  9 13:00:12 2026 GMT
            Not After : Nov  7 14:00:12 2026 GMT
        Subject: CN=51a8f8d8-900a-4ff5-8f59-d187832ae008
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:6d:68:87:ed:0c:39:53:39:af:11:71:f5:54:
                    cf:d9:04:1c:76:c2:cf:f5:cf:0d:c6:21:9d:46:5c:
                    c6:c0:a1:81:05:ef:bd:6a:52:db:dd:79:e3:22:c4:
                    b6:74:b5:73:c0:82:c6:56:77:47:b7:d2:b6:5b:dc:
                    0c:f7:88:80:c9:d8:8a:02:22:63:6d:8c:bc:3e:b4:
                    ab:de:83:f8:91:d5:14:7f:12:6f:ee:0e:70:a7:44:
                    5f:79:4e:97:bf:b6:f3:a2:55:51:db:c9:ca:43:67:
                    43:4e:4a:f1:39:9f:f3:13:34:7e:c2:b7:de:d0:df:
                    20:bd:51:45:45:87:b8:69:7e:a9:30:cf:fb:1f:c7:
                    a3:99:2b:15:e8:c9:cd:57:30:04:79:1b:ae:5c:c6:
                    d2:01:b8:c3:88:76:09:c3:e4:c6:dc:72:ac:01:56:
                    70:06:56:7c:03:9d:92:88:60:86:06:f0:9e:d2:d6:
                    4d:33:17:b3:39:f8:55:88:3b:62:99:9e:e9:6c:ef:
                    45:26:b7:95:6f:fd:73:95:18:da:d7:df:41:c8:f1:
                    75:f2:32:2e:78:bd:77:6d:47:95:11:a8:97:ee:6e:
                    73:19:df:c6:45:af:8e:6b:55:46:01:1a:c2:bb:97:
                    e8:90:e3:49:fa:b9:9f:79:1f:57:0f:ca:52:a2:7a:
                    76:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:F9:79:41:8B:B0:04:53:3F:9C:F0:E4:A7:45:ED:62:8F:1F:13:14
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/38faee66-cab9-3fb6-849f-a05e4591d6e0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.0.234.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         08:ad:10:3e:bd:0e:56:9f:bf:bf:a6:8c:19:5b:45:44:06:5a:
         0f:3b:73:f6:67:68:50:d9:c6:27:35:ec:49:92:aa:7a:9b:28:
         dd:3e:bf:3a:74:b3:a0:45:3e:fa:66:88:98:54:03:28:22:20:
         0e:16:b7:c7:76:a5:f4:78:88:ad:39:fb:ca:8e:e6:30:c0:6e:
         37:06:b5:80:a5:2f:ef:3e:40:3e:46:1b:bd:63:cc:24:b6:2d:
         70:13:ad:3d:3f:20:58:7e:2b:fb:4e:c7:63:1f:3f:b0:fa:8a:
         c8:75:1b:b5:2b:ee:f4:b1:10:3a:0a:c1:23:9f:3b:96:d5:b1:
         70:89:1d:3a:0b:a8:2a:b2:c3:01:f0:f8:9d:6a:90:a1:8c:9a:
         53:01:cc:ee:8a:6c:9e:b2:cc:f7:56:d8:ff:44:66:bf:83:dc:
         aa:c6:ff:5b:bc:17:61:35:57:23:1d:5e:ec:7b:89:5a:37:6e:
         d9:8c:bd:9d:4a:91:49:b0:67:37:07:e7:e1:91:ba:7f:9c:28:
         50:9e:12:e1:18:f0:e6:b9:2b:c2:18:b3:68:8d:44:35:2f:32:
         a6:d8:44:fd:ee:b4:b8:48:a6:dd:32:65:f0:fe:33:00:9f:ba:
         68:ab:23:bd:e0:01:93:a6:4a:67:08:50:44:30:c3:18:7d:85:
         47:89:ed:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 17:37:40 2026 by rpki-client