Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/a3c7d11e-a847-3cb4-b366-caba0d998eae.roa
File:                     a3c7d11e-a847-3cb4-b366-caba0d998eae.roa (raw, json)
Hash identifier:          R5OtpFNgYnXjGoFpEEOZksxiK6Q05mYkKVI8OWRhB64=
Subject key identifier:   30:6B:E4:AF:0D:C2:72:AB:AF:D4:D3:71:98:16:1A:15:90:F5:90:71
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F4328584D448506C89F046D179046CB00
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/a3c7d11e-a847-3cb4-b366-caba0d998eae.roa
Signing time:             Mon 23 Mar 2026 21:04:34 +0000
ROA not before:           Mon 23 Mar 2026 21:04:34 +0000
ROA not after:            Sun 21 Jun 2026 21:04:34 +0000
asID:                     26519
IP address blocks:        166.0.234.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 26 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:44:85:06:c8:9f:04:6d:17:90:46:cb:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Mar 23 21:04:34 2026 GMT
            Not After : Jun 21 21:04:34 2026 GMT
        Subject: CN=9c1f6ae3-adcc-4e7f-84e9-5231165f050f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:49:76:26:0a:40:d6:89:98:2b:83:17:89:58:
                    9e:5e:3f:d9:b2:51:3b:2e:c0:ac:dc:7a:fa:21:fe:
                    2e:59:b9:c8:5a:e1:74:e9:9a:e4:38:01:57:29:6c:
                    64:50:37:3f:88:86:dc:36:41:62:51:4a:d2:04:50:
                    01:0a:45:e2:f3:02:ec:52:7a:bc:3e:1a:97:30:d6:
                    99:54:52:8d:c9:56:43:d6:68:d8:c8:c8:51:5e:5f:
                    ba:b1:22:e0:4e:c0:31:68:ce:db:ab:82:5d:95:be:
                    f3:51:86:2e:63:ec:9a:7b:bf:55:39:57:25:bd:e9:
                    61:18:5a:6d:6e:7d:e5:cf:89:1b:c9:7c:0a:48:f0:
                    10:57:c8:f6:e0:d5:53:c9:c2:b9:c6:76:16:de:9b:
                    53:fc:6d:a7:05:dc:11:17:3b:c7:1e:e7:b6:4c:fb:
                    bf:d9:ab:f2:6b:a0:42:95:53:ba:93:04:7f:ee:7c:
                    dc:0c:8e:79:2d:a5:40:94:11:51:be:45:1b:70:f5:
                    ad:73:65:2d:b4:28:cb:b5:77:00:4d:42:d9:5d:04:
                    40:bb:90:fb:57:39:01:47:64:45:84:1c:17:5b:a8:
                    08:62:c5:41:42:5e:21:09:67:4a:96:d8:d9:c7:93:
                    5e:75:ff:2d:7f:eb:6d:ce:22:49:14:b2:7c:8a:08:
                    4d:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:6B:E4:AF:0D:C2:72:AB:AF:D4:D3:71:98:16:1A:15:90:F5:90:71
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/a3c7d11e-a847-3cb4-b366-caba0d998eae.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.0.234.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         11:20:7a:4e:8b:cf:52:7c:c0:c6:0c:19:28:38:31:61:51:ca:
         3d:ce:dc:f1:dd:56:26:b9:dd:0f:0f:77:ab:14:3a:95:30:12:
         50:ce:7e:d7:0e:32:6b:4a:ba:d9:cf:6b:c8:7a:fc:0a:8d:24:
         48:61:39:6a:39:65:b8:5f:2a:7c:35:90:e2:3d:2f:e1:26:93:
         26:bd:2e:01:b3:8d:02:ad:70:ea:60:da:5a:8e:43:fc:63:cd:
         21:80:db:c8:ea:f2:b6:eb:4e:f8:fd:9f:d9:72:e6:e1:38:4f:
         bb:2a:26:7e:a9:f5:37:34:75:f6:d2:83:ae:39:13:a8:df:6d:
         61:21:07:ac:1f:92:f7:83:96:60:11:64:f7:c3:8d:18:be:a8:
         df:d7:30:57:4b:a8:df:a7:ea:b9:ce:74:bb:3c:41:a3:88:2e:
         55:bc:3f:3f:18:6e:83:54:85:85:64:c9:c0:22:e3:9b:59:ea:
         c5:07:6e:4a:8f:f8:7c:49:44:4e:da:c8:07:15:36:c0:6f:b1:
         e9:0d:62:06:ef:ed:0a:e7:88:f9:ca:21:34:bb:39:29:75:0d:
         8b:90:4d:40:c9:a4:ff:50:66:6d:b9:3d:fd:c9:b6:94:00:e7:
         4a:87:3d:64:a6:4b:8e:1b:dc:0e:e6:4f:7c:0a:fc:db:15:12:
         40:4b:9f:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 24 22:30:09 2026 by rpki-client