Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/4bb17d2f-0a29-33a6-b04d-930532a2393b.roa
File:                     4bb17d2f-0a29-33a6-b04d-930532a2393b.roa (raw, json)
Hash identifier:          DV4Dy64IWj1X0UL++Xyv6GO+GXalqme6TD8V8dgovwU=
Subject key identifier:   2A:43:0B:BB:0B:18:5B:39:F1:50:4C:A1:1A:97:B1:80:A9:16:F6:7B
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F4328584EA787775F2A398A60F0C17100
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/4bb17d2f-0a29-33a6-b04d-930532a2393b.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     57043
IP address blocks:        166.1.220.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 27 Aug 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:87:77:5f:2a:39:8a:60:f0:c1:71:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=b182e4ac-d797-4d0b-99a1-dea00d23e363
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:af:82:99:33:4c:03:c4:4f:cd:25:46:d0:09:
                    8d:a7:ad:99:26:88:f0:06:db:ef:be:cd:bb:15:1b:
                    f9:7b:63:8c:16:f5:1b:44:52:2a:25:2d:0e:73:6d:
                    fc:0e:6a:3c:15:cc:69:d9:b2:75:8a:74:e2:6a:d1:
                    11:cc:e2:7c:6f:be:02:29:eb:58:01:48:a1:61:4c:
                    c4:af:e5:80:a9:05:8f:2b:ac:c1:9b:80:01:88:b7:
                    b0:4a:f1:86:31:ab:be:9e:98:f0:9d:4a:e7:54:b6:
                    e2:64:15:87:3f:cd:3f:d8:e4:16:5c:b5:ce:b2:3a:
                    21:56:2f:78:cc:fc:c1:66:9d:19:c1:a5:5b:40:c0:
                    ed:61:30:b8:5d:bb:05:e3:9b:07:53:8c:f1:5d:c6:
                    af:6b:57:25:7d:8a:56:2f:2c:72:c2:c8:20:ee:81:
                    72:8d:e3:4f:5b:b9:0b:2b:16:b7:d0:92:3e:90:fc:
                    f4:51:aa:bb:18:22:fb:ad:94:56:ef:30:bf:15:2e:
                    35:41:2a:55:4d:25:83:c8:72:91:14:98:2f:0d:87:
                    49:53:11:f0:ce:20:f1:01:48:3b:0f:df:b5:da:67:
                    ea:87:c0:55:a5:13:7e:94:20:ed:38:07:14:63:02:
                    6f:f4:ca:ff:47:96:38:33:05:36:f4:29:33:cb:b5:
                    45:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:43:0B:BB:0B:18:5B:39:F1:50:4C:A1:1A:97:B1:80:A9:16:F6:7B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/4bb17d2f-0a29-33a6-b04d-930532a2393b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.1.220.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         34:1d:65:4b:d3:ac:49:fb:52:53:37:d0:40:c3:fc:e3:4d:46:
         f2:df:2a:13:ba:ac:d4:e8:54:38:47:a1:11:95:62:e0:f7:95:
         c9:bc:84:e8:15:26:c1:c6:1b:eb:25:1a:a9:62:00:59:d5:4f:
         fc:ef:a5:8a:fd:3e:de:f2:3a:b8:b8:34:b8:e4:3f:5a:f4:a6:
         fd:f5:ea:89:ef:60:4e:55:14:a4:60:ff:9a:52:d6:9f:56:8c:
         bf:6e:58:3c:99:e6:54:d7:78:db:29:b3:2f:5c:7f:a6:ff:f2:
         f7:57:61:79:e5:9d:6b:12:92:4d:54:18:99:80:37:a2:10:94:
         4a:79:78:50:93:49:14:27:31:fa:b6:72:4c:40:80:da:50:65:
         20:5f:5a:ea:17:35:2c:d9:b4:99:65:9f:59:2c:33:b3:b5:96:
         f1:6c:0f:12:82:02:b8:ef:38:7e:a9:07:48:50:0c:66:25:4c:
         4d:21:d2:cb:27:a3:74:d5:b9:37:29:c3:de:5a:8c:d8:b0:41:
         10:c7:03:85:12:c2:d1:a4:a5:fe:1b:20:5f:b9:60:b0:10:6b:
         62:88:33:3a:55:74:17:a2:32:51:d4:a4:8c:4c:49:a1:e8:4b:
         7d:5b:1c:df:cf:29:38:21:6f:1f:03:bc:dd:75:b7:e2:bc:44:
         f4:e5:ec:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 26 15:13:28 2026 by rpki-client