Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/4f7a35f1-1829-3b67-b3c9-517e36d627f2.roa
File:                     4f7a35f1-1829-3b67-b3c9-517e36d627f2.roa (raw, json)
Hash identifier:          MqJt45OC1bBtWFb/d5r7GhvGRxJ7jSIiQ/LhfX0C9/o=
Subject key identifier:   C5:06:31:7E:42:29:0B:4A:F4:AB:8A:C4:B2:A6:FE:6A:E3:26:38:1D
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F4328584EB7AA5BF2EA01EF565914F400
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/4f7a35f1-1829-3b67-b3c9-517e36d627f2.roa
Signing time:             Mon 03 Aug 2026 19:44:42 +0000
ROA not before:           Mon 03 Aug 2026 19:44:42 +0000
ROA not after:            Sun 01 Nov 2026 20:44:42 +0000
asID:                     6079
IP address blocks:        166.1.141.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 05 Aug 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:b7:aa:5b:f2:ea:01:ef:56:59:14:f4:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Aug  3 19:44:42 2026 GMT
            Not After : Nov  1 20:44:42 2026 GMT
        Subject: CN=a3f5f8d2-1afc-4bc7-93f0-e8bd27de1482
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:20:00:15:45:bc:51:20:6b:91:78:3f:f6:78:
                    18:50:ff:78:b9:fc:fa:4a:93:42:da:3e:4b:41:b8:
                    26:35:3e:31:e9:f8:1f:30:e8:28:a2:db:d2:b5:9e:
                    7b:b9:9c:f5:35:f0:57:eb:f2:90:01:7f:03:06:d4:
                    8a:a6:76:e9:df:18:da:4e:0a:58:9c:78:f3:2e:3a:
                    47:43:6e:81:db:66:6a:5a:f1:3e:b0:d4:7d:a6:e4:
                    b4:fb:7a:e9:b5:df:49:c6:42:02:f8:4d:48:f1:06:
                    a9:51:e3:ae:85:e6:fc:44:a5:1c:af:0e:69:32:52:
                    5a:dc:3a:9c:dd:f3:3f:84:ec:07:96:ec:a6:7a:89:
                    4f:33:d0:72:e6:da:57:2b:55:78:94:64:a9:0b:7c:
                    51:28:13:1f:53:5e:ce:94:d9:b6:9d:11:72:87:a6:
                    74:d8:29:58:82:16:03:3c:f9:39:bf:9c:fb:68:f9:
                    2b:c2:34:22:b4:6a:76:b3:e4:7e:96:1a:a2:78:6c:
                    e1:f2:ee:14:6c:37:0b:df:2c:26:1b:29:7c:ad:52:
                    7b:25:25:b6:40:80:1f:50:05:fc:d8:87:21:c3:b1:
                    b4:5d:e2:94:37:2c:2f:5e:5f:0d:75:c4:c4:90:9f:
                    e2:5e:57:cd:68:29:f0:f2:63:f9:4f:fd:99:9c:1c:
                    bb:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:06:31:7E:42:29:0B:4A:F4:AB:8A:C4:B2:A6:FE:6A:E3:26:38:1D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/4f7a35f1-1829-3b67-b3c9-517e36d627f2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.1.141.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a3:7b:fe:2d:55:17:52:32:3b:19:52:88:ca:76:f7:9f:b6:27:
         41:9c:6a:36:08:76:68:73:af:a7:9e:6f:62:22:41:e9:77:91:
         b6:98:02:fb:85:ce:2d:19:7c:bd:7f:2e:1f:b6:d5:10:2f:0e:
         29:d3:a9:19:22:ba:0c:8d:66:9b:78:2d:dd:06:54:c4:fe:87:
         d0:4e:af:e2:cb:1f:86:4c:ca:0a:4a:f0:c3:52:aa:2b:cc:27:
         01:74:48:00:15:c3:b6:09:bd:53:82:d4:fc:cd:11:79:72:d5:
         07:da:0f:56:86:dc:8a:39:ac:5d:3b:62:0c:5e:fa:1a:6a:71:
         e6:c3:68:11:ab:60:77:38:bf:b1:83:a6:7d:a6:73:62:21:dd:
         30:e4:5a:9b:b4:0e:0d:4f:c8:2b:59:92:9d:65:03:74:72:de:
         12:47:2f:27:b0:6b:15:27:bb:04:41:cb:cb:c0:68:a8:d1:ad:
         1f:87:e5:0a:3a:b2:cb:95:de:58:bb:56:16:aa:fd:11:ed:a9:
         0c:10:56:d1:d4:d3:dd:d6:1b:de:b7:83:77:90:6f:87:94:1c:
         6f:b2:f5:05:3b:2b:b9:77:44:36:f0:03:94:c9:9e:da:d9:da:
         9f:be:d0:77:a7:a0:c3:7c:17:be:38:27:ed:f0:46:9d:6c:c5:
         46:95:98:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 4 13:34:19 2026 by rpki-client