Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/86ea9fbb-e4b3-3bbd-9617-52cf081078f5.roa
File:                     86ea9fbb-e4b3-3bbd-9617-52cf081078f5.roa (raw, json)
Hash identifier:          hQ2YhLSvbRfGRB8QLSja/bJldPIItYrDDOVaUXTZiL4=
Subject key identifier:   56:B6:C2:A2:ED:3E:5A:81:E4:E2:4E:F2:75:F5:15:23:E7:20:63:9C
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F4328584D62BCD6F172B6EFE25629BE00
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/86ea9fbb-e4b3-3bbd-9617-52cf081078f5.roa
Signing time:             Fri 03 Apr 2026 16:51:17 +0000
ROA not before:           Fri 03 Apr 2026 16:51:17 +0000
ROA not after:            Thu 02 Jul 2026 16:51:17 +0000
asID:                     10753
IP address blocks:        166.1.64.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 05 Apr 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:62:bc:d6:f1:72:b6:ef:e2:56:29:be:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Apr  3 16:51:17 2026 GMT
            Not After : Jul  2 16:51:17 2026 GMT
        Subject: CN=c6a4ff38-12e2-4822-831c-bc97b6a04ec0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:6f:fb:26:81:7b:1b:96:e7:f3:42:71:8c:df:
                    8c:05:76:78:19:6f:78:02:23:05:d0:57:e8:96:e1:
                    56:6c:7c:bb:04:f5:2c:a2:08:22:94:26:8c:41:b7:
                    95:62:d9:b0:96:9d:4d:9d:7d:e7:e5:6c:7a:ff:9b:
                    d3:0c:d2:ad:f4:2e:5c:59:23:a8:bc:b1:29:ec:33:
                    ea:ce:61:85:75:ce:bf:9b:59:88:6d:7b:d0:32:c9:
                    c9:65:0f:1b:ce:23:87:ab:e9:1f:ef:1b:7f:3d:1e:
                    e2:07:8d:8f:62:2d:7b:0c:70:90:f8:7e:61:8e:34:
                    1a:fc:57:12:7f:70:35:d9:fa:19:18:50:24:9b:0f:
                    c1:28:cf:52:3a:8d:fa:43:99:b1:fa:06:1c:dd:33:
                    30:03:8e:c5:32:52:6b:d0:fb:f0:40:dc:45:22:42:
                    e6:aa:a0:6a:a1:1b:78:ee:3f:26:09:dc:0c:cf:47:
                    d6:4c:7c:5e:a5:38:18:f3:a6:8d:6a:8b:52:b6:61:
                    86:3d:a7:5c:64:a0:d0:8a:99:63:37:8c:1e:51:71:
                    ae:82:01:d0:88:5e:fa:4b:28:76:bd:ae:69:36:1e:
                    f4:94:3f:3d:e5:e3:0b:03:59:ba:53:06:c9:bb:13:
                    15:4a:60:20:17:5f:56:84:fa:9d:ef:e4:29:d2:a1:
                    56:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:B6:C2:A2:ED:3E:5A:81:E4:E2:4E:F2:75:F5:15:23:E7:20:63:9C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/86ea9fbb-e4b3-3bbd-9617-52cf081078f5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.1.64.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         44:2a:25:fd:57:5a:cf:68:bb:ca:57:82:41:1c:a1:04:cc:3b:
         2f:17:df:9c:c9:c8:f1:29:00:91:d0:5e:bd:af:6e:0e:22:bf:
         02:11:ba:26:5d:dc:e4:da:59:58:2b:bf:1c:c6:32:c0:96:b6:
         1a:aa:e5:79:aa:15:cd:1b:ea:5a:7f:2a:ca:a1:69:dc:0a:04:
         8f:cd:d1:f3:0c:46:74:79:83:51:21:7d:c0:f6:0d:af:34:06:
         fd:8d:be:24:6c:98:95:b6:8b:70:f4:dc:d7:92:78:77:51:fa:
         ea:84:b4:3a:a6:7c:d3:43:20:61:fd:d9:e7:25:a1:29:c5:74:
         b1:80:ea:54:20:00:fc:16:37:e6:04:d0:aa:6e:c6:3b:f5:41:
         b4:08:87:8d:6d:43:c2:65:4a:80:b8:e1:c1:2d:55:c0:11:22:
         82:99:e3:5a:f5:6a:da:fe:95:7e:a9:9a:b1:d3:d7:ce:eb:85:
         2b:94:50:21:3f:25:ce:f4:0f:04:2f:6b:45:11:04:ab:05:08:
         61:ec:a0:4c:bb:e1:84:57:90:c4:12:b7:9b:65:db:b0:02:a7:
         f7:34:d7:f4:8b:6b:69:f0:68:51:22:46:4e:9a:86:37:0f:0d:
         49:8f:fa:ff:aa:c1:4c:a9:94:09:ae:b2:69:c3:8a:8f:63:e5:
         2e:23:eb:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 4 15:27:50 2026 by rpki-client