Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/578f6c2b-2196-3a89-82da-ee15f98e2bd7.roa
File:                     578f6c2b-2196-3a89-82da-ee15f98e2bd7.roa (raw, json)
Hash identifier:          0lfs0zLxlYEq42/7rTIr1Zci9GA7xZyiobp4eT3XOLE=
Subject key identifier:   C2:17:6A:6D:14:11:2B:32:28:6F:2C:DC:4B:49:51:E9:B2:F0:C8:18
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F4328584D62BCD6E3E1F258E23883A040
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/578f6c2b-2196-3a89-82da-ee15f98e2bd7.roa
Signing time:             Fri 03 Apr 2026 16:51:17 +0000
ROA not before:           Fri 03 Apr 2026 16:51:17 +0000
ROA not after:            Thu 02 Jul 2026 16:51:17 +0000
asID:                     10753
IP address blocks:        166.0.88.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 05 Apr 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:62:bc:d6:e3:e1:f2:58:e2:38:83:a0:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Apr  3 16:51:17 2026 GMT
            Not After : Jul  2 16:51:17 2026 GMT
        Subject: CN=38636f6d-1177-4505-a647-c7838a946912
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:6f:fe:02:d6:49:c0:60:77:05:70:69:f7:db:
                    6c:c3:7e:9e:c0:15:84:98:71:07:d6:bf:8c:61:97:
                    15:c7:25:57:0a:e6:00:f7:be:4a:65:bb:df:a6:42:
                    5f:ec:a3:c7:00:85:c0:37:f3:0c:6e:e8:9a:48:16:
                    ac:8b:39:26:0f:ff:fa:c8:39:7c:a7:54:97:4a:40:
                    54:18:b6:6e:c0:9a:9b:af:3e:b5:52:74:3a:12:65:
                    a0:90:51:54:a2:83:f1:57:53:44:af:22:c4:99:20:
                    1d:31:df:fd:2e:a0:a4:17:bc:5f:07:16:d9:f2:d2:
                    2c:88:7b:52:d5:09:ca:3d:72:5a:fc:0b:70:a7:10:
                    35:4d:bd:67:b7:11:ee:d2:84:ad:d3:eb:11:35:0d:
                    c2:87:54:6a:e7:5b:e6:53:ff:cb:62:f1:d4:37:ec:
                    74:ff:20:13:c3:33:65:b8:c8:bf:b2:75:f6:46:b7:
                    ac:80:7a:d4:50:b1:35:26:07:b8:66:db:99:66:69:
                    cb:d4:fb:28:7b:d6:ba:21:89:71:c0:8c:dd:97:0f:
                    60:8e:59:71:11:d5:0b:a8:ec:c9:64:b7:3f:ca:02:
                    d8:0d:78:5a:55:b9:a6:c1:52:8c:7f:ee:d4:26:c6:
                    f4:24:6f:c4:35:8b:1d:58:9a:d9:7e:c9:c8:04:84:
                    9c:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:17:6A:6D:14:11:2B:32:28:6F:2C:DC:4B:49:51:E9:B2:F0:C8:18
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/578f6c2b-2196-3a89-82da-ee15f98e2bd7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.0.88.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         50:32:08:c6:61:01:fe:2e:1a:80:d7:bb:86:25:a1:de:c7:19:
         35:5a:50:ba:b3:82:41:4d:08:8c:8c:2c:93:d7:6d:af:ad:0f:
         17:0d:f5:15:0f:69:f5:47:ba:f2:ad:55:24:ce:95:96:11:ba:
         73:a0:af:62:5f:3c:1a:e2:73:1e:b3:8d:b4:4f:73:47:26:99:
         ab:ea:f2:9d:18:0a:b5:72:a4:53:15:1b:c7:6c:b2:80:fb:e9:
         63:58:7f:81:8d:1e:6f:76:e5:cb:56:56:ec:26:0a:10:36:51:
         72:42:ba:8f:ee:19:eb:bd:5f:0f:7b:d2:8a:c7:4c:08:42:36:
         e8:5f:98:8d:d3:49:2c:4c:f2:af:8f:b7:73:67:62:4b:0b:af:
         e3:ed:2c:cd:43:be:32:e6:7f:12:35:54:59:f9:5b:0e:37:de:
         37:f8:28:2a:fb:43:9f:1b:40:4c:8f:68:4e:95:82:3f:28:34:
         b9:0a:14:8a:31:29:8f:00:8e:bc:28:37:5a:a3:71:32:e9:7f:
         1a:13:bb:9b:e6:e2:ce:59:29:2b:b9:12:fc:b7:4f:b7:5a:6b:
         56:60:bc:8f:6f:1c:0f:2b:33:e6:7d:e8:16:41:98:30:70:b0:
         59:b3:1d:89:80:a6:87:99:ed:8e:e9:db:66:af:7d:28:77:d8:
         37:07:de:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 4 15:28:32 2026 by rpki-client