Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/a0775e72-3a4c-3546-ada2-de5824ee8c3d.roa
File:                     a0775e72-3a4c-3546-ada2-de5824ee8c3d.roa (raw, json)
Hash identifier:          9PEq/0jFCQqr5P7yXG/P1mKavaswGEHV78O8heI/zZY=
Subject key identifier:   3B:84:0F:B5:1E:17:57:2E:5B:17:FF:4F:9A:35:CF:62:07:91:88:4E
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F4328584D27AA141F4BA650611DC2E480
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/a0775e72-3a4c-3546-ada2-de5824ee8c3d.roa
Signing time:             Fri 13 Mar 2026 13:00:40 +0000
ROA not before:           Fri 13 Mar 2026 13:00:40 +0000
ROA not after:            Thu 11 Jun 2026 13:00:40 +0000
asID:                     44559
IP address blocks:        166.1.168.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 22 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:27:aa:14:1f:4b:a6:50:61:1d:c2:e4:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Mar 13 13:00:40 2026 GMT
            Not After : Jun 11 13:00:40 2026 GMT
        Subject: CN=0decde86-52f8-41a6-9eaf-d7ff5bc8b335
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:c0:1e:6e:71:df:9f:31:13:dd:55:4b:61:1d:
                    7e:70:0b:b2:25:22:e6:c2:b2:c3:c3:3e:c9:d0:28:
                    fe:86:63:2d:e6:cd:01:05:86:f4:d2:e6:62:36:cc:
                    18:9b:3c:49:2b:83:28:44:61:17:e9:ea:fc:bc:b9:
                    a4:5e:fc:11:06:70:84:7a:79:e1:db:17:af:79:1f:
                    f2:d4:ce:0b:3f:6d:b3:6f:a6:af:13:94:6a:81:b3:
                    67:f3:f5:20:28:f8:87:91:4d:8a:8b:b0:d2:7b:60:
                    b9:11:7b:1a:4d:14:f5:ec:8b:f5:de:6d:00:26:7d:
                    ab:2d:2b:ac:e5:b5:8c:fb:7e:37:67:d7:10:49:4a:
                    bc:d9:5b:e2:db:39:6b:67:4d:fb:02:fe:8e:6c:01:
                    36:c0:c0:f1:a4:5a:16:5b:08:e1:22:97:f1:37:02:
                    b1:1e:ae:6d:9e:ba:4c:11:78:b8:1b:85:76:82:2f:
                    6d:a0:34:57:41:67:6a:e7:b1:45:75:0b:ac:88:e7:
                    b7:f3:93:f6:db:7a:2a:fc:86:8b:45:d4:66:bd:31:
                    01:ac:ac:6c:14:06:9e:ee:0e:8e:73:79:2f:db:a9:
                    8b:1a:7e:81:69:41:a4:60:cd:a6:74:c3:cc:99:77:
                    fe:f2:aa:64:b7:42:fd:a2:13:39:b8:9f:ce:68:e4:
                    fc:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:84:0F:B5:1E:17:57:2E:5B:17:FF:4F:9A:35:CF:62:07:91:88:4E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/a0775e72-3a4c-3546-ada2-de5824ee8c3d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.1.168.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         40:00:15:ba:fe:09:58:2d:2a:0b:4b:c1:28:c2:71:ed:c1:48:
         c1:db:1f:43:07:89:2e:64:af:27:69:99:a1:d9:96:8e:3e:3f:
         68:e6:dd:98:3e:27:52:c2:80:51:c3:6d:07:a4:54:96:de:9e:
         19:c7:f3:43:f1:6f:a4:c4:ad:1c:74:47:49:42:ea:80:d0:f6:
         0b:96:ae:4c:9d:28:2b:64:44:4f:75:6d:de:69:9a:98:69:32:
         67:08:b2:b5:03:0d:e4:ef:33:ba:fa:0a:bc:f1:ac:37:23:fc:
         64:84:fc:95:9a:f3:c2:af:bb:34:5c:92:ca:c9:aa:49:73:5f:
         9e:95:0f:6d:07:ef:98:d1:41:52:34:a4:a0:da:e6:5f:11:71:
         31:55:74:16:63:4f:f3:16:01:f1:cd:b3:f9:d9:90:bb:ab:b6:
         65:dd:1a:90:cb:87:83:26:4c:a1:40:70:8f:72:6c:b5:d7:0d:
         a8:ba:b2:de:c9:b0:4b:21:3f:b3:5a:0e:c3:48:c5:42:ab:61:
         41:e9:47:31:1a:f3:45:65:71:13:9c:eb:ee:77:a1:bb:2a:59:
         a6:40:d4:10:7d:4e:23:57:67:8b:39:67:26:51:d9:26:02:89:
         5b:20:fd:02:84:ce:ee:01:a4:47:03:a8:72:8f:dd:1c:0d:05:
         b7:5e:06:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 20 05:10:28 2026 by rpki-client