Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/71e410da-6e4e-30a1-8de8-e68b0c7f83cf.roa
File:                     71e410da-6e4e-30a1-8de8-e68b0c7f83cf.roa (raw, json)
Hash identifier:          KCoXlgk/h8wVpDa+gmqRCm5bTGbd/r4xIRNSLxCCjkI=
Subject key identifier:   6D:02:89:B0:26:D5:09:24:7E:96:F8:5B:6D:18:68:81:17:6E:E6:64
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F4328584F497339A1F28D1A43ACD62980
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/71e410da-6e4e-30a1-8de8-e68b0c7f83cf.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     401152
IP address blocks:        166.0.232.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 07 Nov 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:73:39:a1:f2:8d:1a:43:ac:d6:29:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=35f8e773-32b1-4676-9022-f95b37903735
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:b4:6f:63:87:60:52:de:fa:4b:fd:9f:be:f6:
                    73:03:14:b7:12:3b:37:5a:bc:5d:a0:f7:38:54:e6:
                    ab:e8:df:5e:99:f6:9e:8d:27:16:59:57:9b:27:ea:
                    10:78:37:40:e3:0f:0e:03:ba:a9:85:eb:bd:af:6f:
                    d4:d7:14:bb:92:cd:1d:35:67:d0:0f:8d:a8:70:a5:
                    0d:c3:07:c8:f7:b3:47:44:5a:eb:15:e9:72:d4:b5:
                    88:fd:a2:8c:f9:9a:73:f0:54:1e:43:d2:a9:a0:98:
                    a9:8b:25:7f:cf:d5:98:40:72:14:cf:03:79:96:ff:
                    05:1c:80:50:6d:da:3f:a9:06:cb:d5:56:cb:6d:aa:
                    12:af:ef:53:0b:83:a1:95:81:00:48:ff:1a:3a:28:
                    9a:b2:aa:b2:0a:7f:40:d9:86:86:a2:95:04:2c:27:
                    5b:fe:b2:7d:27:c4:fb:24:65:09:73:01:c1:bc:dc:
                    38:f5:61:62:90:70:a0:42:c9:b6:e9:cd:16:f1:75:
                    95:cf:0d:98:da:16:44:88:a9:12:24:70:36:27:8a:
                    6b:12:ab:72:27:43:c4:6c:64:85:9e:5d:8a:4e:1f:
                    00:7f:f6:8f:88:5e:51:9a:0b:17:ff:7e:3c:03:b8:
                    f3:2e:4d:20:46:0f:2c:3a:d9:89:de:9f:69:28:ca:
                    6a:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:02:89:B0:26:D5:09:24:7E:96:F8:5B:6D:18:68:81:17:6E:E6:64
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/71e410da-6e4e-30a1-8de8-e68b0c7f83cf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.0.232.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3f:4b:3a:a6:03:9f:25:7b:c4:bb:2b:3f:8a:7e:1c:9f:40:b8:
         1c:6c:f2:cf:b2:ef:56:c7:ba:c6:9e:56:2f:1c:1c:31:f3:31:
         5e:e7:21:ec:c4:eb:d9:4b:d3:20:7d:7c:4f:a1:8b:da:71:52:
         6e:db:8f:61:9d:10:06:12:d8:8d:b9:c2:51:17:fb:c8:19:5e:
         dc:c6:c1:5c:9d:77:7c:83:87:dc:6e:de:bb:04:b5:65:64:fa:
         57:14:b8:0f:73:0d:aa:52:ca:68:99:6f:39:80:c2:91:3a:16:
         48:67:5c:8d:4a:12:6d:21:67:95:38:41:61:30:16:83:e5:5b:
         90:1c:60:24:b6:71:8f:ee:67:3f:39:9d:bf:9c:f4:6a:bc:93:
         f9:de:d4:54:cd:3d:5e:0b:9b:47:ff:cd:3a:20:88:62:1b:1b:
         21:5d:82:43:54:be:1b:dd:95:89:93:01:10:ab:f6:1b:8f:ab:
         d7:94:77:53:57:f4:47:dd:94:a7:32:ec:69:70:4b:49:b6:71:
         de:1f:7a:6a:e0:10:96:a2:ca:17:fc:75:6a:6c:dc:7e:6a:3f:
         76:8f:57:6e:67:32:65:32:36:09:b4:93:76:f1:ef:5b:ee:fe:
         7e:fa:c6:fa:55:00:a6:f6:2b:53:d0:08:63:fa:e1:f6:2c:79:
         33:8a:e0:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 4 20:12:54 2026 by rpki-client