Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/4cd8ba19-7837-3319-b613-a9d17c17b070.roa
File:                     4cd8ba19-7837-3319-b613-a9d17c17b070.roa (raw, json)
Hash identifier:          hepJPDocMCm0MuKuMmOoSJ8dqmD3UwL2FJuuMB/zq4Y=
Subject key identifier:   01:63:14:1B:A3:F9:C5:D6:9A:B8:8F:E1:D3:FD:96:EC:C6:F5:CB:A3
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F4328584E9EAFF0074AE25A7788BD0800
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/4cd8ba19-7837-3319-b613-a9d17c17b070.roa
Signing time:             Sat 25 Jul 2026 21:00:12 +0000
ROA not before:           Sat 25 Jul 2026 21:00:12 +0000
ROA not after:            Fri 23 Oct 2026 21:00:12 +0000
asID:                     134465
IP address blocks:        166.0.242.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 28 Jul 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:9e:af:f0:07:4a:e2:5a:77:88:bd:08:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Jul 25 21:00:12 2026 GMT
            Not After : Oct 23 21:00:12 2026 GMT
        Subject: CN=abac8a5e-d66b-4ca1-9d0d-8b5d9f7fab83
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:e7:bd:8e:d8:f2:c0:a6:55:d2:66:77:4d:11:
                    e1:6b:5c:97:a7:ff:b4:37:02:3c:f1:80:f1:29:f4:
                    8d:21:bc:6e:26:27:05:f7:9f:f6:40:57:da:04:28:
                    aa:51:07:e6:b9:c1:59:91:5b:32:18:c9:eb:37:7c:
                    45:17:e1:e2:69:2f:b9:4f:49:6f:93:72:64:16:5c:
                    1d:21:00:26:a7:bb:52:15:f1:a3:9f:f5:cc:d6:4c:
                    c3:ff:e5:a7:90:83:99:0f:b7:a0:8a:d1:21:06:0b:
                    01:80:e3:1c:a2:8a:ee:e9:fb:23:3f:bf:cf:0c:3e:
                    90:c7:a9:92:e5:ae:4a:e2:af:0d:a8:57:fe:e4:0c:
                    83:c9:7b:be:7e:3b:50:6a:d0:53:e3:78:4d:71:e1:
                    16:35:fa:f4:e8:df:83:34:65:5b:3e:1c:d3:50:b9:
                    05:02:b8:a9:1b:5b:67:14:f7:9e:5c:48:dd:46:44:
                    23:fe:01:eb:c7:04:5a:bb:16:82:91:c1:56:6c:4a:
                    51:a9:24:cd:c4:54:be:e0:37:7d:d1:d6:02:f2:d9:
                    57:11:34:75:bc:4f:fb:20:0d:8c:97:89:ad:92:25:
                    d9:1d:71:5f:df:12:2c:36:3d:62:25:d9:93:96:23:
                    47:92:91:4f:1a:e9:9a:8f:91:4e:8d:af:c2:4e:93:
                    22:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:63:14:1B:A3:F9:C5:D6:9A:B8:8F:E1:D3:FD:96:EC:C6:F5:CB:A3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/4cd8ba19-7837-3319-b613-a9d17c17b070.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.0.242.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3a:59:2b:2f:15:f2:19:fd:18:d4:a8:d8:f1:d4:5e:da:8b:aa:
         26:90:1e:bd:7d:28:43:9e:ad:44:ab:db:6d:c0:f3:0b:07:ba:
         9a:22:ae:f0:7a:29:9d:e3:ff:cb:bd:2f:54:16:e5:6e:80:86:
         ac:c2:ce:f4:b3:95:bc:79:4b:db:3b:6e:1e:de:0b:86:0e:3a:
         1f:e6:8b:29:98:ff:d4:4c:76:ca:ee:a6:02:65:21:07:af:81:
         56:ef:c2:d5:16:f5:65:b3:10:77:87:4d:f5:10:ff:e5:28:c7:
         45:7b:31:c2:3d:44:8c:32:f0:ef:4d:d3:cf:ed:c0:38:fb:db:
         32:b6:e1:ec:85:da:c6:11:d7:e0:a0:a1:93:3e:dd:6b:25:2f:
         da:45:0f:71:93:3b:1a:61:25:6d:95:c2:75:31:d4:d1:79:e2:
         02:6b:88:87:0d:c0:61:d7:67:6b:f9:8e:b1:5c:82:a5:59:ff:
         ea:50:73:db:04:57:3e:5c:5d:c0:89:23:1c:0a:e8:66:84:38:
         98:4b:8a:f6:b9:8d:e4:37:57:9d:00:6e:c9:90:a6:ea:5a:b2:
         d3:7a:75:96:2d:41:e5:0b:fb:e4:f5:d3:1b:8b:f6:ce:23:11:
         41:64:64:1e:6c:83:bf:2b:1b:1f:0c:ce:42:e1:59:bc:d7:ac:
         74:3e:bb:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 26 23:38:07 2026 by rpki-client