Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/6dae219a-14f7-3467-aa58-1b7d698fa299.roa
File:                     6dae219a-14f7-3467-aa58-1b7d698fa299.roa (raw, json)
Hash identifier:          yU4swbAp6iEm8W3dCz9aAI4yQu5RLYILHB438C2L04s=
Subject key identifier:   72:84:0A:52:48:F2:66:09:99:36:D4:08:83:0F:A2:4D:FF:D5:B0:84
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F4328584D0912517F8564D4DB3D394E00
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/6dae219a-14f7-3467-aa58-1b7d698fa299.roa
Signing time:             Mon 02 Mar 2026 14:00:41 +0000
ROA not before:           Mon 02 Mar 2026 14:00:41 +0000
ROA not after:            Sun 31 May 2026 13:00:41 +0000
asID:                     61400
IP address blocks:        166.1.161.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 22 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:09:12:51:7f:85:64:d4:db:3d:39:4e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Mar  2 14:00:41 2026 GMT
            Not After : May 31 13:00:41 2026 GMT
        Subject: CN=9d557b39-e1b6-4898-a37e-1969f32109a5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:97:f9:19:b0:44:78:60:d8:58:a9:73:de:5e:
                    52:fc:c5:da:58:7f:fd:b7:2c:6f:c0:3b:d0:b6:66:
                    9d:7a:8a:fa:e5:13:89:3a:4f:77:df:c9:43:f1:60:
                    38:e5:0d:93:f5:ae:8d:ba:fb:a8:93:4b:e2:1d:b1:
                    92:8a:29:64:23:fd:8b:75:2b:26:d8:21:50:ce:37:
                    14:6c:e8:61:a6:d4:9a:75:6d:52:97:c3:4e:97:be:
                    f9:46:a7:14:62:a7:d6:7c:0e:9e:36:2d:38:9b:b3:
                    fa:eb:a6:de:f9:0c:1e:30:d7:63:c3:99:18:3d:f4:
                    cd:4b:ab:0a:d5:96:2d:1b:ea:d4:12:19:53:50:0e:
                    2a:a2:57:2e:e7:03:e4:e9:c7:5b:d4:de:41:d1:48:
                    df:a2:5d:af:82:31:0a:98:13:25:40:4c:9e:31:44:
                    32:6e:31:71:08:db:4a:87:b1:c9:66:eb:d1:e6:26:
                    e7:f0:22:e9:ff:5f:ed:b2:14:56:d8:71:01:d9:54:
                    15:51:81:d8:31:58:10:70:a9:4b:29:ff:9b:73:95:
                    ba:7f:84:56:96:63:b9:a1:26:24:e4:b1:5d:2a:21:
                    79:a9:e3:25:33:e7:7b:13:fa:c9:80:5b:3b:09:d7:
                    00:78:d5:fc:e4:f4:9d:ba:a5:0b:b7:24:94:43:90:
                    04:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:84:0A:52:48:F2:66:09:99:36:D4:08:83:0F:A2:4D:FF:D5:B0:84
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/6dae219a-14f7-3467-aa58-1b7d698fa299.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.1.161.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a6:66:43:87:5c:ec:9f:76:5f:95:45:2c:70:2f:47:7c:c7:d3:
         28:23:47:bd:ab:7e:4e:2b:a7:70:c8:8c:ee:41:be:aa:95:b4:
         b6:6e:a2:c1:c2:86:11:c3:dc:9c:cc:6e:07:89:6a:46:eb:1e:
         03:63:47:0b:96:23:f4:ee:e1:3a:78:81:f5:85:17:16:63:92:
         62:3f:94:95:3c:39:5a:7f:16:3c:b3:43:56:cf:0d:3b:19:e6:
         27:84:93:b4:f7:bb:3d:48:7e:69:8b:a8:ce:3a:eb:88:d7:fd:
         d5:15:d1:66:72:a9:76:40:39:3c:6c:1c:da:c6:b4:be:96:2d:
         c6:28:a5:33:e4:86:97:74:9f:ce:1f:d0:e9:0b:f7:f9:38:50:
         48:0e:3b:e9:b6:e6:ce:4f:5b:29:45:08:f0:be:d7:8f:d2:94:
         dc:06:d5:f1:04:76:97:2e:39:3a:11:90:30:d4:84:22:18:46:
         47:dc:14:f0:7f:fa:3c:2e:a1:91:55:97:9f:20:f5:29:5e:e5:
         53:cd:1f:f1:f8:05:ad:69:35:82:d6:4b:2e:b1:7e:9f:92:c0:
         be:39:d8:a3:30:29:9f:a5:1d:5a:6e:3e:3d:cb:32:ba:3a:1e:
         8f:de:3c:2c:7d:64:31:d9:71:4c:bb:b2:33:94:2b:5a:77:74:
         99:ed:06:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 20 05:14:12 2026 by rpki-client