Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/99992f30-4f4a-3579-b51d-4dfe3aa98fdc.roa
File:                     99992f30-4f4a-3579-b51d-4dfe3aa98fdc.roa (raw, json)
Hash identifier:          WnPc10UYUQmsncH917LXAi3WaEXAPS5ZCEewETMMxmw=
Subject key identifier:   E9:C2:9F:3D:FA:A3:EE:AC:C6:4D:09:CC:9D:07:BA:2F:C3:86:C9:BD
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F4328584F331D261DC3F170B11DBACD00
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/99992f30-4f4a-3579-b51d-4dfe3aa98fdc.roa
Signing time:             Thu 17 Sep 2026 01:00:11 +0000
ROA not before:           Thu 17 Sep 2026 01:00:11 +0000
ROA not after:            Wed 16 Dec 2026 02:00:11 +0000
asID:                     8881
IP address blocks:        166.0.50.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 22 Sep 2026 08:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:33:1d:26:1d:c3:f1:70:b1:1d:ba:cd:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Sep 17 01:00:11 2026 GMT
            Not After : Dec 16 02:00:11 2026 GMT
        Subject: CN=03034f4f-94a6-401f-8eac-02983cd85f63
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:18:ee:2f:bd:e0:54:60:a8:ec:1f:83:6a:87:
                    41:d7:a3:9f:84:41:41:c0:97:be:f9:eb:e6:e3:77:
                    cc:1b:c2:59:82:3e:02:fd:12:7e:3d:8b:3c:67:33:
                    c4:b6:0b:99:47:57:7b:c3:0f:25:ba:81:b8:4d:40:
                    06:1a:77:ea:e7:ab:6d:26:9b:eb:fd:70:46:cc:76:
                    f6:c1:c4:c7:36:f7:fc:87:20:84:cf:67:9a:09:27:
                    0b:ed:2d:69:ee:30:41:42:05:b5:5b:dc:e4:35:07:
                    75:1f:5a:68:00:cc:71:1a:ea:e7:1b:a5:08:25:65:
                    6f:90:2f:39:bc:22:33:4d:7d:e7:0d:0c:19:25:c4:
                    6e:b4:ed:27:94:64:c3:0f:af:4a:e9:ab:1b:cb:86:
                    ef:9d:9f:17:05:70:fc:e0:ff:b3:7c:ce:04:a7:62:
                    59:8f:5f:22:b4:90:22:29:de:3a:f3:2d:4a:87:45:
                    b6:14:8a:4a:4d:96:46:8d:c0:62:72:d2:b4:fd:9a:
                    e5:34:19:6b:63:e4:d1:36:91:89:c2:62:de:4d:4f:
                    23:7f:6a:9c:f5:f4:ba:42:26:f0:1f:73:eb:7b:dc:
                    04:3a:78:40:01:45:5c:ed:75:60:30:fb:ed:e0:30:
                    06:24:08:8d:b1:5a:33:41:93:6e:93:67:97:ed:ee:
                    9c:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:C2:9F:3D:FA:A3:EE:AC:C6:4D:09:CC:9D:07:BA:2F:C3:86:C9:BD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/99992f30-4f4a-3579-b51d-4dfe3aa98fdc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.0.50.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6f:0a:9e:25:b5:54:4d:e4:b5:01:55:1e:91:5b:bc:f7:c3:4f:
         ba:f5:76:be:7a:84:09:21:5f:da:3e:06:bc:d0:7b:23:1c:6a:
         6c:9e:5d:7b:a6:28:9c:c7:96:ca:d5:04:75:1e:c2:cc:19:09:
         58:7e:eb:36:66:20:70:4f:9b:0c:7d:9b:a4:74:2c:34:99:ef:
         99:ee:db:6c:2f:51:ed:4c:94:fe:92:20:76:21:a8:7c:c5:bf:
         d3:46:e4:0f:64:c9:d8:43:74:19:d8:68:90:9a:03:a3:e0:7c:
         33:a9:11:36:5a:86:c5:71:e6:7b:a7:87:d3:b2:2d:58:36:ff:
         ab:8f:22:84:3f:7a:d4:30:43:d1:01:d4:94:92:ae:0e:eb:e5:
         02:63:45:6e:a6:52:4b:7b:a0:83:db:3e:56:7e:5f:84:5f:29:
         fb:80:75:fe:0b:d5:29:35:8b:df:0e:68:5b:d3:0d:08:d7:53:
         66:9b:de:7d:2f:93:67:ca:5e:89:f8:f4:75:1c:fe:2a:05:8b:
         23:4f:8f:ff:7b:97:fa:83:47:c6:28:63:d2:43:25:65:16:2f:
         d2:41:23:b3:bb:2f:26:9a:e8:3b:4c:46:6f:e2:34:b1:73:48:
         40:44:7a:b9:05:7a:92:3b:92:6c:bb:8a:aa:fa:99:94:17:64:
         34:fc:4f:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 06:19:09 2026 by rpki-client