Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/81baecba-8312-30f8-ba64-d6d9ecab6cd2.roa
File:                     81baecba-8312-30f8-ba64-d6d9ecab6cd2.roa (raw, json)
Hash identifier:          PKhuiA8jcal+bibe+vQucaBzPXU+lWYRNWW87tunPNU=
Subject key identifier:   3D:37:FD:FC:52:85:B0:78:17:44:6C:71:A3:60:6F:CF:A7:86:2A:D0
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F4328584EA78753F0B8BDE5FF09BDC480
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/81baecba-8312-30f8-ba64-d6d9ecab6cd2.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     26383
IP address blocks:        166.1.235.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 13 Aug 2026 08:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:87:53:f0:b8:bd:e5:ff:09:bd:c4:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=edcc341a-107d-49f7-a535-9c97a99c3f76
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:7a:d8:99:f4:c5:3b:5f:c7:42:2d:b7:53:f7:
                    0f:f7:b0:56:47:96:16:fe:e0:d5:34:e8:47:3a:69:
                    57:2a:bb:dd:c8:b7:20:04:37:cc:dc:35:49:87:79:
                    fe:82:6a:ba:25:47:fe:ea:d7:f2:a2:85:a4:92:20:
                    8d:3d:ad:be:a6:6e:b6:dc:a1:8d:83:41:25:27:23:
                    9e:f9:b1:3b:5d:e8:13:81:ff:9b:9e:46:e9:ca:0f:
                    0c:b7:ad:a9:bf:2f:d3:90:14:ec:2c:37:4d:7e:18:
                    3d:fe:f4:57:b5:41:e5:ad:38:40:fb:db:a2:eb:ff:
                    70:2f:24:7b:f9:21:79:12:5e:cf:01:d2:b0:25:3d:
                    f2:6e:d3:6c:b5:ef:d5:30:21:47:68:55:82:9b:9e:
                    e0:9e:16:ca:5e:13:4f:5f:bc:1b:01:a0:ee:22:78:
                    3c:2c:b2:aa:cc:42:2c:9d:61:e5:89:4e:3c:2f:d7:
                    2d:fb:61:25:fb:8e:56:c1:93:07:8e:75:e9:f8:40:
                    30:7e:08:cb:66:8c:f3:49:62:64:4a:d5:d1:17:26:
                    02:f3:12:6d:8f:95:b4:05:87:29:d3:52:ed:1f:18:
                    ef:71:85:2e:21:49:a3:07:ba:95:0f:64:6b:7b:3d:
                    6c:37:15:a0:de:0e:b6:f7:51:f9:d3:ab:52:d3:6a:
                    3d:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:37:FD:FC:52:85:B0:78:17:44:6C:71:A3:60:6F:CF:A7:86:2A:D0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/81baecba-8312-30f8-ba64-d6d9ecab6cd2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.1.235.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         50:47:5d:0e:54:5c:8a:ce:d0:a8:27:dc:6a:15:ab:a7:f0:11:
         dd:bf:ee:a5:5a:e6:96:bd:72:73:41:65:e6:6f:65:83:18:c9:
         52:a3:a1:1e:d5:58:f0:0c:b4:c5:8f:5d:44:91:1a:ce:aa:a2:
         50:72:77:4b:d8:84:e1:7b:51:ea:e1:b4:52:32:56:d6:43:d2:
         72:aa:29:f5:9f:79:a1:c0:cd:74:78:1f:68:51:58:db:5a:23:
         c1:69:ed:c0:26:f0:0c:89:95:90:8d:5c:4e:6f:e1:e0:dd:66:
         ac:aa:34:0f:3e:d8:a6:5a:54:1f:d0:a6:f2:7f:66:10:48:30:
         d4:df:be:2f:2f:b9:91:8b:39:aa:51:6f:69:d0:06:f5:e7:6d:
         c3:4b:bf:84:ff:41:ba:4d:1f:dd:fa:4f:34:2b:86:75:72:46:
         6d:81:39:c6:d5:aa:00:ee:13:bc:89:9b:ba:15:95:3a:4e:00:
         4b:16:ad:a7:ba:18:f9:7a:cd:27:de:13:b8:24:a5:88:4c:32:
         63:21:76:63:46:66:b3:2a:7e:d9:be:45:ae:25:58:e7:c4:d8:
         c7:b0:b0:10:e9:73:36:3b:88:80:4c:42:3e:9c:a8:ab:72:64:
         78:9b:29:7b:be:3f:36:df:b7:3a:01:ee:4e:44:1f:8e:b1:c0:
         f4:80:ac:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 12 01:12:58 2026 by rpki-client