Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/422e653b-2db0-342b-9bc3-6b82effd0286.roa
File:                     422e653b-2db0-342b-9bc3-6b82effd0286.roa (raw, json)
Hash identifier:          b3I3BxCfwYw/NygIVEHGJAx3BsN18OJyo1rUfBSSI2g=
Subject key identifier:   BD:D6:BE:43:68:28:A0:7A:F0:41:B1:D4:37:64:3F:8A:DF:98:41:8A
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F4328584D07ACE1E01CE4F7A9D1359620
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/422e653b-2db0-342b-9bc3-6b82effd0286.roa
Signing time:             Mon 02 Mar 2026 02:00:31 +0000
ROA not before:           Mon 02 Mar 2026 02:00:31 +0000
ROA not after:            Sun 31 May 2026 01:00:31 +0000
asID:                     200017
IP address blocks:        166.0.76.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 22 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:07:ac:e1:e0:1c:e4:f7:a9:d1:35:96:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Mar  2 02:00:31 2026 GMT
            Not After : May 31 01:00:31 2026 GMT
        Subject: CN=e9289667-005d-47c9-83d4-cc76b5934f11
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:7a:a3:54:b2:8a:85:90:8f:a7:66:00:6d:a9:
                    cf:8a:4c:38:4c:30:8d:10:f9:5b:16:88:70:74:c5:
                    7d:79:45:82:20:ca:02:da:d2:b1:a3:fd:1e:cb:4a:
                    03:22:94:68:19:7e:61:70:cd:88:4d:2b:9f:75:ed:
                    e6:24:d0:06:b0:4d:2b:fb:ab:a2:da:c5:44:fd:59:
                    45:f5:05:2c:92:4f:f7:3d:c8:45:b3:2b:90:d3:09:
                    32:5c:28:b2:e2:a2:30:e2:36:c4:9c:29:c7:4e:44:
                    82:ba:25:71:05:db:5b:e2:38:68:68:c0:b7:83:7a:
                    8a:47:d0:01:05:fe:ac:00:99:56:ad:23:b7:69:3e:
                    db:b1:56:c5:42:b7:6c:9e:27:a8:5b:dc:bd:24:d8:
                    e9:c7:5e:6e:42:17:28:0e:e5:bc:bc:a4:93:0b:ae:
                    2a:60:83:9b:00:6e:7b:67:06:c9:c6:9d:7b:08:1b:
                    1a:c2:7c:1e:7f:d4:42:2e:16:11:bd:03:73:4c:2f:
                    1c:b3:fd:35:32:61:b1:2a:80:70:78:94:37:0b:86:
                    d9:36:8f:76:48:ac:48:ab:87:02:19:3b:fe:34:c3:
                    f6:7a:d5:dc:79:df:16:ca:ce:0c:e6:62:7d:db:87:
                    e9:d9:4e:84:fe:f6:f5:1a:d4:d9:2b:82:f9:3b:e6:
                    ac:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:D6:BE:43:68:28:A0:7A:F0:41:B1:D4:37:64:3F:8A:DF:98:41:8A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/422e653b-2db0-342b-9bc3-6b82effd0286.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.0.76.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         79:90:89:b0:6b:65:d3:21:dd:36:e9:a7:9a:ae:fd:b6:66:05:
         d8:75:9d:8f:f4:bd:a1:cc:88:e1:eb:e2:a1:2f:76:22:70:4b:
         da:32:44:18:8f:2b:4c:48:df:10:4f:91:60:c5:b6:ac:eb:84:
         8f:e0:1f:dc:57:78:52:50:0a:56:4d:4b:29:0c:68:5c:14:c5:
         ea:91:bb:7c:8b:3a:e3:5a:74:7c:f8:02:2b:de:f7:f9:07:96:
         71:37:d5:23:ff:5f:49:9a:13:df:42:96:e5:dc:3f:3a:04:73:
         86:56:36:25:d4:f8:a5:21:b8:8a:40:3a:2a:7f:d6:2b:a4:7b:
         25:7d:8a:e0:67:79:ce:5a:a8:b6:50:59:f3:81:ff:68:76:b4:
         70:0c:0d:dc:d3:b5:d3:2a:9f:fb:b0:07:d2:ab:33:97:c4:6a:
         38:5c:69:74:e3:1e:7b:28:74:59:b0:f0:cf:d2:7d:55:27:20:
         81:80:97:9d:a1:e7:0b:74:4c:d9:b3:aa:24:21:7c:be:38:c3:
         53:de:46:61:13:38:c9:ff:32:70:dc:32:f6:c2:f1:7d:0b:83:
         a1:b0:67:f3:a0:f6:22:0a:db:d6:72:13:cb:5e:9f:6f:31:ff:
         01:8d:74:35:bc:8d:40:df:a7:55:6d:4b:8f:ad:20:1e:3e:e2:
         c9:d5:4f:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 20 05:09:48 2026 by rpki-client