Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/757625a2-29e5-3ead-a25b-a7ccd77dcddf.roa
File:                     757625a2-29e5-3ead-a25b-a7ccd77dcddf.roa (raw, json)
Hash identifier:          ki4RddgftV/Vjjhh5BN0Q0PY3MtOmH4H4q7wvUp+LjI=
Subject key identifier:   98:FE:94:26:B8:CC:48:A8:05:EF:B4:30:2F:F6:76:52:F3:93:97:50
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F4328584D366F5C4D1D19A753F68B8D00
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/757625a2-29e5-3ead-a25b-a7ccd77dcddf.roa
Signing time:             Wed 18 Mar 2026 19:59:36 +0000
ROA not before:           Wed 18 Mar 2026 19:59:36 +0000
ROA not after:            Tue 16 Jun 2026 19:59:36 +0000
asID:                     401152
IP address blocks:        166.0.168.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 20 Mar 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:36:6f:5c:4d:1d:19:a7:53:f6:8b:8d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Mar 18 19:59:36 2026 GMT
            Not After : Jun 16 19:59:36 2026 GMT
        Subject: CN=f1c2bebf-db40-49fd-806b-051aeb6d4739
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:f6:bd:04:cb:44:08:f0:b9:82:3d:da:8a:b4:
                    60:39:5b:00:c9:b0:2e:1d:5e:ea:56:ad:11:86:4e:
                    27:c2:de:b4:a3:1b:38:44:c1:aa:8a:42:b9:42:fb:
                    a9:15:1b:0e:0d:dc:78:2d:24:0b:b4:0c:5e:0d:b8:
                    82:da:85:60:4f:f1:9a:4c:a8:be:56:b1:cd:74:eb:
                    a0:50:4e:10:d2:80:24:d6:94:d5:3f:30:c4:cd:f0:
                    27:f5:6d:e7:d6:34:6f:79:88:cf:7d:b4:82:3a:d9:
                    24:e4:f3:83:15:88:06:f7:2f:16:fc:30:5e:ac:7b:
                    ff:01:2a:3a:e6:98:4a:54:40:53:d8:97:93:e7:5d:
                    e1:b1:e5:0d:5d:f5:df:b9:5d:74:04:3a:bb:69:d1:
                    33:21:c5:b7:e8:b8:80:36:22:a3:2c:f9:6c:65:e7:
                    7b:c7:90:ee:8c:46:8b:0f:19:fc:4e:ab:fb:f9:2d:
                    08:bc:04:f5:28:30:a0:24:0a:3b:38:9b:c1:8d:06:
                    b5:ee:c3:a2:53:1b:50:bf:20:23:77:67:70:d6:99:
                    86:44:14:37:27:87:6d:e4:e5:d0:43:6c:4f:48:96:
                    43:6e:a1:ec:03:ce:e2:fa:c4:08:f8:bc:aa:d7:60:
                    47:80:71:6b:7d:56:dc:78:03:f9:1d:a5:3c:64:e5:
                    f3:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:FE:94:26:B8:CC:48:A8:05:EF:B4:30:2F:F6:76:52:F3:93:97:50
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/757625a2-29e5-3ead-a25b-a7ccd77dcddf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.0.168.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         14:9f:9b:56:59:6d:51:e5:89:f7:ed:83:5a:89:29:c4:86:45:
         52:13:c8:c9:f8:3e:9a:5d:a4:54:48:b5:a3:19:45:7f:7e:11:
         5b:12:99:ea:de:6a:5b:fd:d5:d1:17:40:45:75:e1:3e:6e:86:
         c2:82:0f:e0:6b:64:f2:cc:49:65:1d:09:a4:2f:34:53:b5:f2:
         ad:d0:31:27:68:58:c6:00:b0:4d:91:41:18:92:d5:6b:ed:a3:
         ef:02:b1:a3:32:74:a6:a2:7d:ce:3d:4d:ad:48:0e:50:25:90:
         a6:f3:c1:9c:06:6c:5c:98:7a:c9:9b:77:28:80:7f:b3:14:bf:
         60:4b:d9:f5:7a:67:77:97:1d:0d:39:19:59:5b:b1:5f:9a:32:
         fe:32:e3:ba:1e:d3:ea:dd:7b:b1:c5:11:0e:a3:74:19:2c:5c:
         9f:5b:36:6b:39:8a:5c:2a:61:60:0e:51:b2:14:b6:f3:93:be:
         97:06:ea:a4:ad:00:7f:19:36:96:31:ab:76:85:a7:db:c1:80:
         74:a0:b5:80:88:1a:ef:56:a2:a0:b5:a2:5a:60:5c:30:84:11:
         c8:39:ff:d8:dd:57:70:3d:de:0e:12:96:dc:2b:c5:22:71:57:
         60:6a:28:f5:59:7d:96:f3:db:98:10:83:77:25:b7:22:58:ba:
         b4:f4:bf:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 19 14:46:08 2026 by rpki-client