Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/6abcb42e-5fb4-3ce0-af96-c6fb5679661e.roa
File:                     6abcb42e-5fb4-3ce0-af96-c6fb5679661e.roa (raw, json)
Hash identifier:          2hCVYXDatVggW18vdyl458oirlrx3Be9AvafRiBJtO0=
Subject key identifier:   D5:7B:35:F9:B4:A7:63:E6:96:B7:4B:D5:F6:E8:08:99:77:D0:BA:BF
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F4328584F1674E129FA8E98EED7C814C0
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/6abcb42e-5fb4-3ce0-af96-c6fb5679661e.roa
Signing time:             Sun 06 Sep 2026 18:38:44 +0000
ROA not before:           Sun 06 Sep 2026 18:38:44 +0000
ROA not after:            Sat 05 Dec 2026 19:38:44 +0000
asID:                     401152
IP address blocks:        166.1.87.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 08 Sep 2026 08:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:16:74:e1:29:fa:8e:98:ee:d7:c8:14:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Sep  6 18:38:44 2026 GMT
            Not After : Dec  5 19:38:44 2026 GMT
        Subject: CN=39cf2bb2-94d8-4a5b-9a5d-03b8e6f4a503
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:83:d8:0b:26:5f:5a:8f:43:56:90:78:73:52:
                    0d:9b:b3:c9:9f:d7:3e:df:27:f6:d7:1b:59:ea:03:
                    b0:e9:b8:a5:78:4f:ef:4d:e0:4a:02:de:c9:14:49:
                    8a:95:49:23:53:79:d2:69:e3:67:2a:da:16:ee:c5:
                    ce:db:5c:ea:c0:9f:c1:6b:4c:fd:37:34:6b:b2:41:
                    59:d8:ab:4a:6a:8b:a9:5d:d6:47:5c:04:ed:13:c3:
                    82:48:43:38:1c:e6:46:9e:ac:0e:55:9a:34:c3:4b:
                    10:cb:ef:21:e0:9b:c8:12:44:ce:9f:45:dc:a5:19:
                    66:cd:29:37:92:b2:1a:a7:bb:55:de:12:47:c7:d7:
                    8b:65:2a:17:b5:3c:57:1b:37:dc:d8:93:a0:c2:3a:
                    fb:16:98:b4:27:3c:b2:66:66:f4:ae:48:ef:84:89:
                    3c:40:fb:b0:19:18:d2:0f:c3:3c:bf:e7:6b:7f:fb:
                    7b:28:66:ea:d7:cb:9a:54:14:6a:60:31:43:b9:6a:
                    2e:bd:6b:c5:8f:6e:a4:45:65:4b:38:53:95:58:f9:
                    53:9b:f8:20:b7:17:85:f1:e8:55:d2:c6:00:fc:1c:
                    dd:79:5f:7d:43:c6:c6:14:b4:b5:1f:9f:d5:e7:41:
                    4f:6f:a1:a4:23:ff:1a:c5:76:a5:0f:64:a8:a2:5c:
                    cf:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:7B:35:F9:B4:A7:63:E6:96:B7:4B:D5:F6:E8:08:99:77:D0:BA:BF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/6abcb42e-5fb4-3ce0-af96-c6fb5679661e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.1.87.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8e:9e:0b:35:04:1f:fe:fc:0b:d3:23:c2:e5:c3:0d:0f:ad:9e:
         aa:6e:c7:df:ff:5a:61:7c:c8:37:45:bd:f5:6a:7c:6b:c4:b9:
         49:8c:34:76:78:9a:3a:ee:9d:30:96:17:60:af:29:5c:bf:7b:
         7d:00:fe:9f:55:eb:ab:ff:70:f5:41:0d:b0:43:e0:17:f9:53:
         89:77:0f:f8:6b:7d:dd:65:f7:61:ce:7a:bb:26:f2:de:97:d6:
         f5:0a:ea:5d:94:6f:e2:d9:8d:a4:92:b5:f5:4d:c1:0d:c5:a2:
         41:1a:3e:ff:a6:e3:0e:fa:93:21:2e:84:33:0f:89:c5:4e:e2:
         0a:be:9d:24:84:10:97:8c:1c:b1:56:53:fb:64:d0:94:7e:d4:
         5a:a6:c4:69:b7:c7:a0:62:2a:3f:7d:f8:c9:72:6a:83:ee:00:
         4e:32:f3:0b:32:e0:d9:b1:e9:55:cb:f4:ca:c8:d3:2d:df:60:
         4d:4c:7e:12:83:9d:26:bb:7b:70:5e:01:0a:92:ba:d0:f5:70:
         5f:99:e6:bf:f2:58:f9:4f:40:e8:07:18:81:55:91:9a:35:09:
         01:82:2e:c3:a3:e1:ee:b9:fa:29:01:c2:1a:a3:48:56:d6:d8:
         f2:e1:19:40:9e:17:bd:8e:4d:c6:c4:54:14:b0:a9:6a:15:1b:
         b2:3f:81:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 7 03:55:42 2026 by rpki-client