Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/76b1c4dc-43b7-3410-a4b9-e08a2bad348b.roa
File:                     76b1c4dc-43b7-3410-a4b9-e08a2bad348b.roa (raw, json)
Hash identifier:          dzSy04WTqnLUpUvyQmIUgZXUhiIrNHw7+ysscoCb4v4=
Subject key identifier:   31:3A:EF:20:10:05:4F:8E:DF:93:0A:45:0E:43:60:D9:FC:94:DA:EB
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F4328584DABAF820E2F33EB7F76D1F980
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/76b1c4dc-43b7-3410-a4b9-e08a2bad348b.roa
Signing time:             Wed 29 Apr 2026 19:58:26 +0000
ROA not before:           Wed 29 Apr 2026 19:58:26 +0000
ROA not after:            Tue 28 Jul 2026 19:58:26 +0000
asID:                     401152
IP address blocks:        166.1.45.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 05 May 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:ab:af:82:0e:2f:33:eb:7f:76:d1:f9:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Apr 29 19:58:26 2026 GMT
            Not After : Jul 28 19:58:26 2026 GMT
        Subject: CN=9e234303-8d49-4408-90fa-62ced52bdd23
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:c6:de:0e:88:d6:6f:ef:5f:a5:1f:82:c8:63:
                    62:ba:bf:b8:6a:8d:8d:8f:27:ed:a6:db:ad:48:6e:
                    93:d6:ac:cf:0b:4c:1c:c7:a1:3d:13:8c:91:c2:b3:
                    0d:30:ca:8a:91:9e:b7:d4:dd:ef:35:7d:7d:af:31:
                    95:03:e7:87:0e:62:97:fd:e1:db:c5:9f:00:71:3a:
                    93:64:27:c7:31:52:66:b3:82:a0:2d:17:77:16:2b:
                    49:35:1f:49:19:66:cb:da:c3:a1:c0:ac:21:02:e7:
                    99:69:c8:2d:f1:e3:35:a5:f9:c8:be:7e:62:c9:34:
                    7f:b2:b5:3a:1a:81:0e:3c:eb:38:da:76:ff:4f:66:
                    0d:ca:74:eb:0b:24:ee:b0:02:1a:00:17:19:67:aa:
                    9b:bd:8a:ac:af:05:87:99:70:3d:e4:19:75:d0:41:
                    61:d2:ae:c1:c4:15:61:10:3c:b4:b8:a5:53:43:59:
                    a3:b6:92:fd:b5:50:5e:f5:cf:ad:9b:eb:27:31:c3:
                    fd:a9:84:5c:d3:12:9f:a3:46:21:a8:33:23:87:80:
                    05:37:b5:85:9a:35:2f:5a:c3:3c:ab:d1:76:04:6e:
                    c7:11:ce:ff:2a:28:e8:0e:15:c5:ff:be:56:d7:d9:
                    57:94:63:77:45:3f:cf:f1:ee:0d:e9:4b:f7:db:fb:
                    cd:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:3A:EF:20:10:05:4F:8E:DF:93:0A:45:0E:43:60:D9:FC:94:DA:EB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/76b1c4dc-43b7-3410-a4b9-e08a2bad348b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.1.45.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         06:09:80:d0:36:76:8a:09:fb:c9:98:28:1c:a4:81:e3:f0:7c:
         8a:bb:65:53:6b:19:52:43:9f:4a:43:43:22:48:37:4f:ad:f8:
         70:d6:a3:38:26:2d:fc:1d:9b:dd:33:23:bb:c7:29:97:38:da:
         5d:c2:13:41:67:d4:ca:2b:67:cc:5d:c7:b3:f4:bb:d4:cb:c9:
         36:23:1c:e2:d0:3e:2c:e6:2b:81:ed:67:b5:31:85:a5:e5:4d:
         6f:89:24:f8:a2:ca:d2:43:38:6f:96:34:32:04:9d:b9:81:e0:
         52:a6:9d:3b:f4:08:ef:39:d0:55:ae:5a:8a:ab:2d:1e:01:7c:
         98:93:e1:dd:96:0f:3a:aa:a9:a7:47:f1:04:cc:bb:91:c4:48:
         4d:63:35:67:ac:eb:d2:f6:ca:5b:b9:69:1b:be:34:b3:43:ed:
         d6:68:2e:c7:68:ae:64:42:48:83:1c:16:8d:0e:5d:22:21:d4:
         00:c8:21:bf:f5:c0:b3:32:38:8c:44:62:e5:cd:9c:af:d6:86:
         c5:23:ae:40:67:f3:d0:83:bd:8b:3b:1f:b7:bd:67:bf:7f:20:
         0f:b5:61:a5:9b:c7:9f:05:a2:02:ba:c0:10:6e:69:a0:59:2f:
         85:87:ea:d4:e7:ee:7d:67:be:ec:42:d6:47:2f:4b:f3:12:6a:
         07:dd:71:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 2 23:07:32 2026 by rpki-client