Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/75e1c31e-6060-3d42-b3d2-472074b8980b.roa
File:                     75e1c31e-6060-3d42-b3d2-472074b8980b.roa (raw, json)
Hash identifier:          TvQobIzyI+cFLSJktBkjVIdxhr3713UDTFKdc7D4Cr0=
Subject key identifier:   6C:A1:FD:4D:15:D3:E5:26:F5:24:54:0D:73:C6:D2:E8:2A:F1:C0:17
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F4328584CFBF2399A9F42E57CAE8A9C80
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/75e1c31e-6060-3d42-b3d2-472074b8980b.roa
Signing time:             Wed 25 Feb 2026 21:10:35 +0000
ROA not before:           Wed 25 Feb 2026 21:10:35 +0000
ROA not after:            Tue 26 May 2026 20:10:35 +0000
asID:                     401152
IP address blocks:        166.0.196.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Feb 2026 08:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:fb:f2:39:9a:9f:42:e5:7c:ae:8a:9c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Feb 25 21:10:35 2026 GMT
            Not After : May 26 20:10:35 2026 GMT
        Subject: CN=bc8c433e-e3c1-4954-ba83-1e6a7adc20c6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:8b:a2:d0:59:70:97:4c:b6:c4:50:82:ba:ac:
                    ce:af:08:8d:28:ae:e2:54:5c:2d:e0:3b:11:ac:4f:
                    bb:5b:da:50:63:6e:14:e1:80:ff:56:b4:c7:8f:38:
                    d5:dd:ff:63:80:f3:01:a2:f3:f2:d4:47:66:76:4a:
                    3f:75:90:57:11:69:f4:b2:9a:43:4b:0a:9a:0f:65:
                    f7:1b:9e:f3:55:3e:31:2b:e1:64:0b:d7:a0:82:34:
                    f6:14:86:88:81:b6:38:0b:13:a8:84:6c:31:3b:db:
                    05:b7:3b:ce:10:64:41:d5:1e:2e:08:a7:f1:5d:1a:
                    ab:68:07:f9:9e:c6:95:8d:b1:c6:7f:ed:b0:31:ba:
                    16:6e:6c:a4:28:af:12:3c:47:91:d7:4c:3f:68:6c:
                    cc:af:91:80:40:a5:4a:e4:69:b4:52:22:9a:64:52:
                    ca:29:cd:d6:3f:c6:c3:c8:82:76:bc:3c:d5:82:47:
                    ca:09:13:1c:11:64:20:e9:1f:f0:ff:6b:3b:90:58:
                    4e:39:27:56:46:c6:08:64:ba:52:df:23:ad:69:1c:
                    a1:d3:55:31:a5:99:cc:56:be:71:d5:01:15:88:b7:
                    7a:ce:99:6e:5e:ae:f8:91:9b:88:f5:ae:25:87:18:
                    b9:7a:ff:5b:53:6d:ff:82:a8:bc:ec:a0:e6:2b:f4:
                    1c:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:A1:FD:4D:15:D3:E5:26:F5:24:54:0D:73:C6:D2:E8:2A:F1:C0:17
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/75e1c31e-6060-3d42-b3d2-472074b8980b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.0.196.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8b:e8:0a:c4:2c:80:34:bf:c8:6b:a9:67:13:9c:b6:63:35:bc:
         d1:21:ab:30:81:bf:bc:28:9b:58:a1:a7:c8:e4:87:09:b2:fd:
         d7:d8:6f:b7:f9:0c:6f:65:a3:8d:55:f2:7b:59:e2:0c:60:de:
         50:3d:75:d0:65:a5:68:05:c3:69:0e:05:b2:d3:e9:8a:d4:43:
         4d:b1:06:07:8e:18:c8:1e:fe:2b:c8:1d:0d:96:e4:4d:ea:14:
         f1:7f:1a:2b:a9:d7:9b:ec:21:5b:52:dd:32:c0:e6:a5:46:b4:
         92:61:b2:9d:51:25:b5:b9:1d:99:f8:ec:04:ee:fa:23:3f:cf:
         ea:82:67:cc:18:b7:dc:ac:05:40:5a:bf:33:37:dc:ac:71:35:
         32:56:92:fb:45:fa:9d:e1:7b:3f:6a:6a:cc:8d:ca:bd:fe:75:
         34:e4:d3:f4:27:e4:21:4e:d0:96:72:ce:63:69:e7:ae:3c:4c:
         d0:2b:5c:d2:c5:5a:43:6c:ff:97:0d:18:a0:67:32:b9:53:ae:
         da:41:dc:7b:4f:21:12:0a:a9:f7:aa:be:18:39:a3:13:7f:b3:
         98:41:72:59:f9:68:fa:89:15:5c:5e:e7:87:34:28:52:ab:a5:
         70:a5:95:eb:91:50:23:fd:50:07:63:f4:b2:e1:45:14:05:eb:
         b5:da:eb:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 27 08:12:29 2026 by rpki-client