Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/a77f4ab1-89e2-3bd7-8fc7-16b5e97a32ba.roa
File:                     a77f4ab1-89e2-3bd7-8fc7-16b5e97a32ba.roa (raw, json)
Hash identifier:          SUQkKh7tqUomacTt1ijhXXP8FmBBS/jL3xG6aHqVqO8=
Subject key identifier:   02:20:9D:19:AA:E2:DB:4D:32:3F:08:63:B6:D6:AA:58:D9:19:DA:E1
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F4328584E8A2CC7C893AB25B1B0EA8C00
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/a77f4ab1-89e2-3bd7-8fc7-16b5e97a32ba.roa
Signing time:             Sat 18 Jul 2026 12:40:17 +0000
ROA not before:           Sat 18 Jul 2026 12:40:17 +0000
ROA not after:            Fri 16 Oct 2026 12:40:17 +0000
asID:                     834
IP address blocks:        166.0.148.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 20 Jul 2026 08:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:8a:2c:c7:c8:93:ab:25:b1:b0:ea:8c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Jul 18 12:40:17 2026 GMT
            Not After : Oct 16 12:40:17 2026 GMT
        Subject: CN=9c85b5cb-4a85-4bb7-8650-21b8362f9780
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:e3:40:f6:02:00:ef:8c:58:a7:37:7e:b3:44:
                    75:05:34:53:f1:45:16:79:dd:e4:52:4d:c3:4d:42:
                    7e:00:cb:8a:07:01:fa:2c:6c:b5:fb:27:15:26:c2:
                    7a:71:4d:be:6e:7e:51:12:33:1b:3b:91:37:ec:c7:
                    43:b9:30:2b:45:fb:36:a8:da:03:ea:53:29:60:e0:
                    2a:f4:24:25:1a:ac:11:ac:8d:89:35:e6:5c:3d:7c:
                    5a:97:20:80:02:57:65:9b:96:dd:3d:35:c3:4e:fe:
                    be:3c:9d:85:fc:61:60:0f:fd:5a:a3:41:08:6c:e2:
                    22:2d:0d:d6:4e:df:74:e3:f9:e1:3c:61:71:8a:6c:
                    fc:61:59:6d:62:39:63:7c:42:f8:76:38:4c:33:59:
                    42:8e:97:86:de:91:85:1e:5e:0e:6c:c6:c9:d9:ac:
                    43:8a:0a:4d:f0:21:80:54:9c:d0:76:35:cc:69:df:
                    f3:25:69:80:a0:55:21:ca:50:38:49:91:df:6a:67:
                    a2:1d:46:ef:00:fd:02:51:0f:e3:46:80:35:46:ac:
                    ea:88:26:e1:af:59:bb:0a:ea:76:f9:58:52:80:d6:
                    38:dd:c9:f2:0f:c0:10:da:e4:c8:57:f7:4b:2f:b7:
                    ab:17:6d:a1:e4:57:fc:5c:25:06:06:27:d8:98:ce:
                    51:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:20:9D:19:AA:E2:DB:4D:32:3F:08:63:B6:D6:AA:58:D9:19:DA:E1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/a77f4ab1-89e2-3bd7-8fc7-16b5e97a32ba.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.0.148.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         52:0e:6a:ff:43:0b:c7:9f:28:54:96:bf:3f:b7:a0:e6:63:6b:
         09:a4:05:0b:cf:c4:75:06:3c:d8:b4:3c:9d:f6:9e:30:cc:a4:
         e6:8f:64:1b:dc:39:ad:b1:d2:7b:96:2d:d5:fc:5a:6e:80:0d:
         26:0e:db:99:91:4a:c2:18:e5:d9:f9:ef:a9:54:d0:26:ad:10:
         84:44:1b:8c:2c:73:5b:a6:a8:f5:9a:8e:19:1d:71:c1:a4:dd:
         3b:45:6a:93:26:12:86:f3:6f:0f:4a:20:00:df:ea:c7:b7:4f:
         9d:f6:d7:06:fa:47:b6:ca:0f:41:9d:44:b4:94:94:b5:38:87:
         6c:c8:1e:d1:ec:64:45:0a:b8:e5:d6:4f:84:94:f8:57:dd:65:
         4c:52:78:09:46:56:9d:2b:8f:c9:ea:32:10:a3:6d:bb:30:7d:
         81:f9:0c:6c:67:06:66:aa:f7:4a:66:51:33:c2:f9:1e:78:f8:
         35:56:1c:a2:d5:b8:3e:72:10:25:7b:e3:e1:6a:1c:f2:9a:74:
         35:6c:6a:63:6b:22:e1:db:f8:14:47:cd:0b:f4:95:05:93:f5:
         4b:c3:6f:be:7d:92:6f:6e:a5:fa:05:50:89:bc:da:3c:83:e7:
         54:e8:ac:71:6f:c5:dc:88:3e:2a:8a:3e:4a:df:14:06:4d:6f:
         e0:0c:a7:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 19 01:38:53 2026 by rpki-client