Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/4ce76533-a11b-38c0-b302-572047e3905a.roa
File:                     4ce76533-a11b-38c0-b302-572047e3905a.roa (raw, json)
Hash identifier:          n2SRlLv2xC1G4At8iFye4cXC29svW3aZGtxaXkTsY3E=
Subject key identifier:   58:B7:CE:B7:BA:CB:B4:F5:92:53:48:D6:0F:50:34:6F:DE:9F:C4:17
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F4328584F682820C0E7BFB1F32DAB3080
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/4ce76533-a11b-38c0-b302-572047e3905a.roa
Signing time:             Tue 06 Oct 2026 01:00:13 +0000
ROA not before:           Tue 06 Oct 2026 01:00:13 +0000
ROA not after:            Mon 04 Jan 2027 02:00:13 +0000
asID:                     7488
IP address blocks:        166.1.218.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 30 Oct 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:68:28:20:c0:e7:bf:b1:f3:2d:ab:30:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Oct  6 01:00:13 2026 GMT
            Not After : Jan  4 02:00:13 2027 GMT
        Subject: CN=4d735254-d263-47d7-9969-a26360dce4d1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:47:d3:4d:21:8c:46:28:2a:6e:aa:c1:c8:b7:
                    9b:21:86:20:ab:cc:dc:31:ac:8d:f7:46:7f:ca:cf:
                    16:c5:bd:26:ee:63:22:4d:dd:4f:f8:c2:2e:45:90:
                    fd:93:09:cc:e9:20:50:5d:64:64:81:b8:ee:8a:a8:
                    29:08:de:69:97:0e:7d:29:e3:40:0e:3f:74:6c:33:
                    36:16:36:c9:19:66:46:fd:b0:93:b6:bd:87:b2:9b:
                    24:68:8c:ca:43:48:22:18:e9:c5:82:7f:0d:6d:db:
                    82:f6:1f:f2:0f:29:95:bb:c7:c4:7a:df:27:0c:d3:
                    c2:57:ec:89:05:3e:3d:82:62:8a:8d:b6:c8:cf:2e:
                    79:58:df:45:69:3a:3d:37:35:d4:62:57:d8:9f:de:
                    55:a0:da:eb:0a:44:48:c8:e2:cc:30:c2:7f:59:ac:
                    c8:94:a4:bb:2e:8b:9e:d1:7c:86:e0:f5:86:03:cb:
                    1c:a5:bb:d1:ea:63:ec:f6:92:d0:5f:43:67:d2:b7:
                    9f:c2:b5:50:5b:a3:fe:12:d6:50:91:6e:de:af:fd:
                    cc:f0:55:d9:e6:8f:be:f3:c1:da:0a:66:d6:4e:55:
                    5f:87:c7:5f:af:67:2e:d4:21:e9:ee:69:7a:65:57:
                    81:01:f8:e7:1f:aa:2f:2d:4f:a6:61:c8:95:be:b3:
                    22:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:B7:CE:B7:BA:CB:B4:F5:92:53:48:D6:0F:50:34:6F:DE:9F:C4:17
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/4ce76533-a11b-38c0-b302-572047e3905a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.1.218.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         60:91:1b:56:ed:33:5c:80:3d:14:4a:5c:85:0b:3f:9f:0c:ab:
         08:18:7e:24:82:08:3b:3f:40:a6:11:42:e5:be:33:05:89:01:
         1b:3b:d2:05:7a:3a:75:39:f1:af:a2:72:dc:5f:a4:62:06:ae:
         51:60:a7:e9:7b:52:67:4d:84:e0:b5:97:ab:43:66:5d:41:78:
         59:19:06:bd:bb:60:64:e6:c0:c6:79:e2:6e:b0:ae:be:f8:9e:
         fa:89:a3:97:97:68:66:b5:44:09:fb:32:44:dd:e5:e1:45:eb:
         7b:44:0d:74:4c:63:ce:87:5b:c0:e7:dd:10:96:79:b4:a0:71:
         67:d1:66:45:ec:c1:7e:36:bb:12:5d:63:c5:bb:ef:a8:a2:e5:
         e6:8a:54:27:45:30:d8:83:86:a8:ff:47:f3:48:a8:aa:7a:e6:
         35:18:a3:df:57:55:df:9d:b7:c8:7d:e9:5e:9b:c2:08:db:81:
         f4:0e:ba:8f:1a:ba:7f:f3:de:18:7d:9d:07:fa:06:68:56:ec:
         1c:cd:88:8d:e8:df:98:55:7f:d7:20:4a:fb:99:10:2d:dd:8b:
         40:02:58:4f:7c:f6:79:9a:a4:d8:3d:55:80:4d:e1:c0:2a:c0:
         ea:74:67:7a:0d:0f:47:3a:ab:98:02:b3:0a:b9:65:f4:7a:91:
         6c:da:f1:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 23:02:27 2026 by rpki-client