Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/87991f72-7aa6-3b3a-acc3-cd9a6c50d33f.roa
File:                     87991f72-7aa6-3b3a-acc3-cd9a6c50d33f.roa (raw, json)
Hash identifier:          MEwqVjhOOkRnDGGaMH0Hz0Dh6+MlA4k8hRGZWzb+gQM=
Subject key identifier:   B1:8C:E1:84:A3:58:07:47:9D:D1:FC:88:54:2A:57:81:16:A4:B7:E3
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F4328584EF2E76CE7C9F00D12C4AE60C0
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/87991f72-7aa6-3b3a-acc3-cd9a6c50d33f.roa
Signing time:             Tue 25 Aug 2026 01:00:12 +0000
ROA not before:           Tue 25 Aug 2026 01:00:12 +0000
ROA not after:            Mon 23 Nov 2026 02:00:12 +0000
asID:                     205220
IP address blocks:        166.0.118.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 27 Aug 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:f2:e7:6c:e7:c9:f0:0d:12:c4:ae:60:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Aug 25 01:00:12 2026 GMT
            Not After : Nov 23 02:00:12 2026 GMT
        Subject: CN=84f1c202-240a-47a1-84b1-7036e95d3c51
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:8f:e9:90:f9:47:91:0a:35:47:86:29:d3:26:
                    77:fb:60:30:bb:58:e2:3a:71:c1:5f:d8:8b:73:17:
                    0d:5b:64:08:6a:2b:b9:6b:5e:55:27:28:6a:83:a3:
                    fd:68:1e:3e:50:82:d9:b5:d0:85:ac:8e:37:4b:a0:
                    dd:08:13:c2:9a:66:1c:d7:0b:b1:d5:f1:62:77:38:
                    5a:ae:1d:88:c0:00:6e:81:29:1d:97:fb:2b:a5:1c:
                    a9:11:f0:54:2d:87:34:9e:27:29:68:0b:02:75:66:
                    73:97:f1:37:af:8b:34:c2:c7:6c:41:f9:fa:cf:e4:
                    c8:d7:8d:e2:4b:8e:a6:bb:94:dd:67:c7:66:d6:8a:
                    a5:59:be:18:e4:0e:d1:71:7b:59:f9:ec:12:27:26:
                    77:25:a3:a9:5e:14:90:59:b8:cc:f8:8e:b9:c8:cf:
                    99:26:0f:9a:60:1f:82:e9:96:db:a1:87:2d:95:5a:
                    98:ec:89:41:aa:77:54:be:d0:d3:6d:75:af:ec:1a:
                    85:89:c0:34:0b:78:0e:6d:85:58:9f:43:af:f1:61:
                    0d:b4:65:06:80:e1:ed:e0:2d:31:bf:05:07:81:ca:
                    7c:d6:7b:c2:b4:6b:3e:79:3b:f3:6d:49:e0:5a:c8:
                    a5:49:f0:da:35:25:65:7c:bb:62:6d:07:9a:10:d1:
                    f1:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:8C:E1:84:A3:58:07:47:9D:D1:FC:88:54:2A:57:81:16:A4:B7:E3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/87991f72-7aa6-3b3a-acc3-cd9a6c50d33f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.0.118.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0e:15:8e:33:ca:04:c7:56:cc:5d:b3:56:e2:20:fa:16:5a:62:
         f6:22:7e:fd:6a:23:b0:6f:e1:b4:2a:75:0e:50:19:b7:f1:b0:
         7a:05:fa:5f:50:3c:db:8a:b4:5e:12:dc:c2:64:b3:81:3c:ce:
         99:ab:80:d6:9d:c4:e0:87:d1:89:e2:35:d0:e0:b4:f0:67:92:
         0b:92:73:8d:a5:fe:43:09:e5:4c:95:a5:9f:2f:dc:74:17:f3:
         4d:98:39:06:87:0c:e5:e8:d8:7f:55:a2:41:2d:1b:57:a5:e3:
         de:dc:ce:dc:3a:01:9c:8a:95:8a:61:da:e0:74:de:f6:b5:55:
         e1:eb:4b:8f:7e:e3:3f:7a:fd:a3:38:1b:04:e0:b4:ea:7e:60:
         78:4d:1a:21:f8:27:25:60:7e:2c:65:e8:6d:b5:0c:0e:28:08:
         4e:78:3b:a0:3e:9c:1b:c4:a3:49:8a:45:2d:88:1d:f5:83:06:
         f4:5b:6e:2e:07:72:07:d7:9a:8f:6f:8c:fe:5f:8f:8b:44:03:
         99:8a:f2:44:8e:1d:98:71:3e:be:d1:f8:8a:b9:00:be:c6:93:
         d8:c1:13:b5:59:3e:69:49:28:cb:76:e3:6d:1b:48:a7:73:c0:
         33:8b:dc:1b:42:f4:d2:21:e9:72:24:2b:6f:79:a9:6a:c8:f0:
         b5:2c:b7:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 25 04:24:00 2026 by rpki-client