Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/9cda626b-a121-3768-a87f-cb6c8d37e9ac.roa
File:                     9cda626b-a121-3768-a87f-cb6c8d37e9ac.roa (raw, json)
Hash identifier:          +Bw3DJBGHplcXSjF5VpSnmCPhJ3Ioo/5g7jSWvvpwOU=
Subject key identifier:   22:5A:55:D7:B4:91:65:09:89:9E:7C:D8:08:8E:84:EC:BC:4A:B5:F9
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F4328584EAA519BFD6E2118104CD29080
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/9cda626b-a121-3768-a87f-cb6c8d37e9ac.roa
Signing time:             Thu 30 Jul 2026 01:00:12 +0000
ROA not before:           Thu 30 Jul 2026 01:00:12 +0000
ROA not after:            Wed 28 Oct 2026 01:00:12 +0000
asID:                     262191
IP address blocks:        166.0.13.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 01 Aug 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:aa:51:9b:fd:6e:21:18:10:4c:d2:90:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Jul 30 01:00:12 2026 GMT
            Not After : Oct 28 01:00:12 2026 GMT
        Subject: CN=0482414e-1676-4e19-ae40-aae7c6c75b32
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:82:09:af:b0:a0:fd:36:9b:5b:58:ba:45:65:
                    8f:c9:cb:7a:76:d0:32:52:13:04:f1:82:12:df:f4:
                    27:5c:a9:66:6b:93:f4:69:60:c7:a7:f8:f3:a1:ae:
                    9b:08:de:d6:b0:71:b6:ba:fc:f6:e9:e3:b2:8d:95:
                    df:2d:f7:c2:f9:ab:39:e7:0a:11:f5:20:aa:8d:1c:
                    cf:47:ec:0a:3f:57:ab:48:9b:a2:92:76:0e:a9:27:
                    aa:a1:1b:a4:ef:d9:78:c0:e4:b8:9e:e8:4e:11:47:
                    1a:3d:c4:41:3e:62:b3:1b:05:aa:27:00:88:fb:f9:
                    15:57:27:b3:17:19:8b:d0:5e:2c:c4:66:7a:68:6d:
                    5f:58:6a:23:66:1d:58:d2:93:eb:aa:99:bb:87:ed:
                    22:3b:f5:8e:73:c4:3f:6c:c7:85:34:2b:85:e3:ce:
                    e3:f6:77:3b:be:75:bf:90:f3:30:9e:23:57:16:5c:
                    ee:20:da:5d:25:56:3b:4e:2b:a9:46:0f:39:67:99:
                    c9:ea:63:3b:36:4d:fc:8b:78:df:d1:5c:b9:36:5c:
                    e2:c6:58:4f:d3:86:17:14:bb:a3:4c:c3:6f:b3:86:
                    72:d3:3c:e1:d3:55:b8:c2:88:64:96:4b:ec:54:20:
                    b4:79:a7:34:50:9c:ae:a8:6c:3a:55:7c:36:77:fc:
                    6a:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:5A:55:D7:B4:91:65:09:89:9E:7C:D8:08:8E:84:EC:BC:4A:B5:F9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/9cda626b-a121-3768-a87f-cb6c8d37e9ac.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.0.13.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         71:39:a5:aa:ef:98:c0:cc:9b:36:c1:2a:c2:44:1f:fa:8f:6b:
         d8:24:92:69:eb:ca:83:ef:dd:fc:18:3f:c2:8b:b9:c5:7a:f0:
         f9:15:54:62:a2:98:af:ad:cf:19:3c:ee:d3:58:8c:48:16:4f:
         87:fd:75:ba:1b:f3:b5:be:1f:cf:6d:24:03:48:59:c5:b4:fe:
         1d:1e:42:62:18:16:b4:b1:3f:4b:ef:ed:ee:4b:65:61:20:bd:
         99:e2:00:82:cb:ba:79:75:a1:26:b1:09:c2:ea:76:66:fc:37:
         c0:f1:9b:64:0a:77:7e:f4:2c:95:6f:a4:49:48:91:98:82:f3:
         91:dd:c4:65:da:54:8d:91:2e:a9:96:c9:85:b9:83:80:de:c5:
         d4:3d:1b:ae:02:ec:57:2a:16:2c:33:6e:fd:2f:21:4f:22:e9:
         f0:10:ac:28:32:a3:9b:79:05:6d:2f:13:5a:ce:87:04:ce:15:
         ca:a1:f0:ad:2f:93:20:c8:90:f5:cb:40:0b:16:77:9c:5c:76:
         6e:c2:ed:4a:a2:c0:5a:82:a4:95:97:b3:2e:f2:72:4a:47:46:
         3e:f4:8b:a1:dc:a6:1a:b5:62:5b:73:27:61:6d:6f:6b:04:8a:
         5f:a1:61:5a:65:84:c9:e9:5f:9b:46:45:67:41:a4:a9:b6:ca:
         27:2f:bd:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 30 11:03:23 2026 by rpki-client