Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/a578fe30-e185-3fb8-9a2a-9102598d8956.roa
File:                     a578fe30-e185-3fb8-9a2a-9102598d8956.roa (raw, json)
Hash identifier:          feHPb2hvCjyFXB0tW0Wq7c+IQ7p3Q6YQfIMYHEbJE08=
Subject key identifier:   E9:41:FF:2E:4F:6F:46:B7:86:FF:04:87:EA:56:CC:6C:EC:55:C3:1E
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F4328584D4461DB7000FF0C0326F2E680
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/a578fe30-e185-3fb8-9a2a-9102598d8956.roa
Signing time:             Mon 23 Mar 2026 19:53:43 +0000
ROA not before:           Mon 23 Mar 2026 19:53:43 +0000
ROA not after:            Sun 21 Jun 2026 19:53:43 +0000
asID:                     11798
IP address blocks:        166.0.179.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 26 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:44:61:db:70:00:ff:0c:03:26:f2:e6:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Mar 23 19:53:43 2026 GMT
            Not After : Jun 21 19:53:43 2026 GMT
        Subject: CN=978e5187-fce7-4e3c-8e27-a79d328eeb2d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:c6:4e:59:f4:43:3e:77:a0:c8:ab:e5:ed:c0:
                    c3:ee:c8:08:03:66:18:ad:eb:40:7d:d3:6a:30:5a:
                    3e:de:5a:43:ab:2c:ea:3e:63:c7:23:42:94:2d:3d:
                    93:3b:04:4a:ef:bb:23:4a:34:7c:d7:77:3e:1f:2f:
                    b1:72:50:40:07:2f:a3:8e:c4:c2:4e:a6:7c:a6:7c:
                    64:4d:2e:28:9a:74:0d:35:25:2f:a9:1c:66:36:8d:
                    1b:40:24:6f:0d:d8:76:8b:86:1a:66:86:27:4c:a2:
                    23:08:fc:8b:ae:ef:d3:12:04:78:08:95:93:1b:3f:
                    67:9a:d5:16:34:bd:bc:04:18:b9:a6:09:92:24:ea:
                    ed:90:0e:b3:cc:09:cc:dd:95:dd:b0:d7:da:00:5c:
                    c8:d5:75:28:3d:8d:8d:65:c4:1c:99:6e:4f:68:2a:
                    15:cb:95:14:bb:28:d3:26:dc:cf:ba:eb:9b:82:ec:
                    b2:43:10:69:41:f0:16:0a:66:bd:7f:19:0f:3f:91:
                    3c:1b:95:0c:4e:73:e2:49:7d:da:6d:66:77:17:37:
                    e7:27:d1:3d:9a:5c:23:25:56:f1:f7:84:a7:05:98:
                    da:cf:4a:c4:4f:85:6f:24:2b:64:a1:96:c5:c6:3a:
                    92:dd:b5:5c:61:9e:58:d3:04:ff:96:b1:2b:98:8f:
                    9d:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:41:FF:2E:4F:6F:46:B7:86:FF:04:87:EA:56:CC:6C:EC:55:C3:1E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/a578fe30-e185-3fb8-9a2a-9102598d8956.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.0.179.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2e:9f:1d:cf:48:b0:6e:eb:d6:6c:c8:52:d9:3a:93:a3:cb:f1:
         c7:0a:d8:8b:c9:87:12:47:88:64:52:2d:61:41:7c:20:95:ee:
         b3:f1:ec:b8:e9:fc:70:98:e3:b0:42:05:ab:08:c4:1b:5c:ea:
         e2:28:0c:df:9c:45:59:f7:73:fe:7f:8d:6d:a3:06:b0:d6:4b:
         35:48:9f:8b:b8:36:5b:f8:2e:21:cb:30:57:32:8a:7c:dd:ee:
         c8:6e:32:53:d3:8c:5a:6a:24:d0:1a:f4:fe:d9:e0:c9:99:6b:
         c5:e7:26:24:e7:58:0a:ee:c5:00:a5:fd:7f:f1:d9:08:b8:48:
         82:42:42:35:13:44:53:89:0c:87:02:d8:c0:19:72:9f:4d:fd:
         1a:4e:d7:83:ef:5b:cc:85:40:d2:26:4f:d5:b8:f8:dc:22:6a:
         97:cf:1d:64:a2:d5:e1:4e:bb:7f:5d:e6:90:20:da:c6:fa:5b:
         e5:cb:c9:80:68:b0:28:14:94:75:69:fc:de:2c:c5:28:86:23:
         b2:1f:81:5a:5e:6c:0f:29:8d:71:17:4d:d0:fc:06:2b:3f:78:
         cc:17:de:84:54:75:f1:b4:ea:ac:2e:03:90:13:51:55:3c:f1:
         d3:d5:86:6b:22:f6:b3:4c:ae:4f:8c:94:dc:6a:e6:e8:8d:d5:
         e9:30:f9:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 24 22:31:16 2026 by rpki-client