Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/a77e7ddb-881a-3701-95cc-245946f5bc50.roa
File:                     a77e7ddb-881a-3701-95cc-245946f5bc50.roa (raw, json)
Hash identifier:          3MEInGrihh/7ws28wglWbHobmEmFq1Mfq05LZHXE/lA=
Subject key identifier:   63:DD:57:80:C2:AA:07:11:B4:A8:84:C0:08:F0:03:2E:24:89:A5:9C
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F4328584D62C0A6D05F7B7EA913E52EA0
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/a77e7ddb-881a-3701-95cc-245946f5bc50.roa
Signing time:             Fri 03 Apr 2026 16:58:58 +0000
ROA not before:           Fri 03 Apr 2026 16:58:58 +0000
ROA not after:            Thu 02 Jul 2026 16:58:58 +0000
asID:                     3320
IP address blocks:        166.0.164.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 05 Apr 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:62:c0:a6:d0:5f:7b:7e:a9:13:e5:2e:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Apr  3 16:58:58 2026 GMT
            Not After : Jul  2 16:58:58 2026 GMT
        Subject: CN=422e142f-b0bd-4237-a3e4-cb5df4a230bf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:58:eb:cc:1d:f9:b3:97:47:3a:ab:f7:bb:22:
                    a4:96:2b:ab:db:e3:71:db:2e:e3:d0:01:9d:36:f8:
                    3a:db:a5:f6:2a:30:47:2b:b4:51:37:93:7d:b3:a2:
                    c6:3d:d7:4f:a6:a5:83:72:cd:f8:9e:99:6f:2e:6e:
                    8d:e2:07:67:80:7e:6c:5d:ea:21:75:08:82:68:05:
                    20:c6:bc:bc:a7:95:4b:66:d1:ef:22:04:a4:05:2e:
                    f1:22:9c:6b:d3:8f:6c:9b:51:fe:13:f6:3b:e1:07:
                    58:09:dc:d9:cd:2f:da:82:40:ec:41:1b:aa:de:8d:
                    a4:ec:47:2e:ae:a4:da:e9:0b:1c:2d:c9:62:97:bd:
                    01:e1:e6:7d:77:0f:13:bd:9d:ef:e0:25:54:84:e1:
                    fa:6c:9f:ad:b7:c6:14:86:5e:48:e5:22:d4:ba:3c:
                    55:71:a9:29:c1:ed:f2:d3:44:db:e0:80:cc:3c:e2:
                    d3:00:75:37:4f:f8:02:dc:2a:53:57:b0:34:2f:20:
                    14:b8:77:34:96:3d:ad:ac:a4:72:cb:8b:64:4a:74:
                    4c:c9:52:f9:60:50:c9:b4:ac:0a:cb:4f:38:8d:8e:
                    6f:98:eb:b5:60:64:00:2f:a9:96:58:59:c7:d2:d6:
                    e9:e9:a3:af:51:6c:4b:cd:0f:51:88:5f:d7:b5:09:
                    93:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:DD:57:80:C2:AA:07:11:B4:A8:84:C0:08:F0:03:2E:24:89:A5:9C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/a77e7ddb-881a-3701-95cc-245946f5bc50.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.0.164.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         98:07:e0:62:2b:4d:dd:a6:62:5e:57:70:b0:e0:72:a3:a9:ad:
         05:a1:b7:ac:67:31:45:87:64:16:9e:24:77:95:4a:18:88:e0:
         c1:6e:3a:58:05:47:0b:01:11:36:e5:b8:87:4b:21:a5:6b:f5:
         de:8f:18:1f:23:a3:2b:97:9e:ad:19:2f:2f:2b:3b:5b:de:8f:
         7b:7a:78:aa:4d:b6:7f:3e:0f:ec:d2:ca:37:f9:10:13:14:b2:
         3e:72:cd:47:fb:6b:c7:e6:b2:af:c3:9a:ef:86:ca:06:12:fe:
         bf:bc:49:86:71:c5:15:08:aa:11:af:28:6b:66:38:c2:ed:f9:
         43:65:43:ef:f5:3f:1c:95:c4:99:5d:92:27:b0:58:a3:a4:1e:
         60:6b:3f:60:97:c2:56:f4:f6:ac:4c:e0:10:51:d4:02:2f:fb:
         8e:51:6c:1d:1c:a1:4b:4a:5e:8b:b8:16:9e:79:ad:8d:9b:74:
         f6:64:aa:0b:c8:30:83:ff:10:d8:98:c2:e4:3d:6a:aa:e5:61:
         7b:6b:cf:92:48:ad:ad:6c:85:ff:64:f5:4f:14:87:90:37:31:
         2f:47:e4:b7:e6:0f:94:8d:ff:65:1d:01:0f:7a:e4:64:8b:92:
         e5:89:b2:21:0e:51:14:d4:97:0f:a8:7f:93:ad:1a:5a:a4:e5:
         c9:43:e7:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 4 15:30:06 2026 by rpki-client