Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/57ac4f23-2f1e-337f-b810-c3fab00c621e.roa
File:                     57ac4f23-2f1e-337f-b810-c3fab00c621e.roa (raw, json)
Hash identifier:          SY2rII+7N5Ayp+Ag1f49Qy0qCIPwKc1YF8LLhCNOBfc=
Subject key identifier:   97:BB:59:92:8E:3D:FA:FF:9D:2A:DD:40:AA:F4:02:11:3B:26:5E:35
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F4328584DB77B02A99B7386D39613D380
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/57ac4f23-2f1e-337f-b810-c3fab00c621e.roa
Signing time:             Mon 04 May 2026 01:22:21 +0000
ROA not before:           Mon 04 May 2026 01:22:21 +0000
ROA not after:            Sun 02 Aug 2026 01:22:21 +0000
asID:                     401152
IP address blocks:        166.1.208.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 05 May 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:b7:7b:02:a9:9b:73:86:d3:96:13:d3:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: May  4 01:22:21 2026 GMT
            Not After : Aug  2 01:22:21 2026 GMT
        Subject: CN=0f302ae2-43ec-40fc-8f56-40ad51c41bf2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:87:47:af:00:68:3c:aa:73:f4:71:31:b6:4d:
                    0a:28:a2:2d:ec:68:fd:e8:27:b1:7b:f6:4b:3e:b1:
                    97:f1:b3:d0:c2:80:ef:b7:60:85:23:45:9e:bc:99:
                    4d:31:d3:54:97:af:e4:94:12:b8:6f:13:82:0f:b7:
                    4a:a6:67:90:2a:d5:0f:47:60:7f:e3:dc:b6:ea:15:
                    78:23:87:93:b9:5a:03:a7:be:d1:64:81:32:ab:50:
                    c8:da:14:0d:a3:28:a5:3b:c8:67:c9:6b:08:2e:fe:
                    89:e8:12:74:f1:3d:6e:4f:1a:96:3a:76:51:35:30:
                    8a:6f:9a:63:1c:ec:5c:ed:2d:4b:ca:3e:66:cc:24:
                    9a:ee:8b:01:0f:17:e6:5a:01:1c:5e:eb:04:75:17:
                    da:79:77:1c:ca:e8:db:56:ff:f7:35:a6:d1:5a:6f:
                    3b:42:0a:99:69:12:42:98:d8:1e:3b:0b:c5:d6:cc:
                    15:80:ed:66:87:31:e1:42:14:d2:f3:8e:be:f2:3b:
                    7a:2e:ea:2e:d8:8d:2f:91:f6:73:07:ce:b6:b7:87:
                    6d:e9:cd:74:2b:e6:81:c4:8e:d5:b9:37:cc:78:e9:
                    eb:45:d0:f7:07:89:3d:d7:bf:7c:09:fc:d9:f9:93:
                    b8:a1:2d:d9:2b:c9:df:6d:8a:52:30:ca:5d:55:ef:
                    cc:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:BB:59:92:8E:3D:FA:FF:9D:2A:DD:40:AA:F4:02:11:3B:26:5E:35
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/57ac4f23-2f1e-337f-b810-c3fab00c621e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.1.208.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         98:d6:57:41:87:f3:ed:49:bb:95:a4:28:b0:dd:68:62:1b:75:
         65:95:29:2b:2f:a5:c1:e3:50:3e:7c:6d:78:de:b4:5a:96:d9:
         d1:54:1a:21:7f:69:b9:a4:2b:28:b7:7c:58:83:9e:d0:f4:e8:
         85:6f:9b:cc:83:3e:8d:5b:8a:4c:4e:28:7e:39:d3:5c:e5:ac:
         a2:56:d7:9e:71:2d:03:a6:7c:08:1c:a9:9f:f2:6e:93:d7:f2:
         a8:47:51:43:16:e2:79:de:b8:85:53:b5:b7:77:ee:97:14:b4:
         75:78:16:db:e3:66:f2:f1:da:42:71:5e:0e:0d:6f:50:09:63:
         e4:0e:e8:89:9c:e0:f2:63:bb:af:0d:d0:4b:e1:b5:44:2a:80:
         68:ac:25:5b:16:e2:ec:04:29:87:8f:bb:67:8f:e9:ec:3b:2c:
         a0:c1:01:ab:b6:d4:9a:3e:4f:8b:c5:fd:d0:40:c9:09:62:1a:
         98:fb:90:e5:76:46:4b:61:f2:2d:6d:74:67:9a:95:4b:71:5b:
         1c:2b:29:14:31:f1:84:cc:76:b1:88:4a:e1:bd:b1:03:08:eb:
         cd:75:63:2c:90:52:20:af:69:09:3b:c5:43:44:4b:b2:21:56:
         76:ee:45:c9:79:30:5a:c2:7f:a2:45:67:18:c6:d0:3d:80:a9:
         7f:04:ee:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 4 12:54:49 2026 by rpki-client