Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/a82ada52-0dca-3dd7-ad29-cd834dbada96.roa
File:                     a82ada52-0dca-3dd7-ad29-cd834dbada96.roa (raw, json)
Hash identifier:          nsUB2cayNr+8nYYKSONIBE6E2VF6z9Tag9Fgi4oJDFo=
Subject key identifier:   B8:51:59:10:0D:9B:23:2F:6D:60:10:F8:BC:0A:CF:5A:A2:C1:17:F1
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F4328584EA798702B7D2439DA010A6198
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/a82ada52-0dca-3dd7-ad29-cd834dbada96.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     213823
IP address blocks:        166.1.44.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 29 Aug 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:98:70:2b:7d:24:39:da:01:0a:61:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=b025f140-5971-4e77-a079-fd5100ba6017
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:d8:55:f5:02:46:7e:db:b7:ba:e5:fd:d1:d7:
                    e0:2e:a9:fa:54:46:5d:69:32:9a:94:82:88:e0:f8:
                    e5:ea:03:81:fd:91:da:63:6a:c3:d6:3e:ee:31:98:
                    43:73:0e:22:b5:e8:0a:ee:fe:72:64:aa:73:34:1e:
                    7a:b3:e9:7e:1a:96:0a:e7:4f:08:37:e4:ee:65:68:
                    50:f7:6e:d0:c3:43:f2:87:35:c4:cb:61:eb:ac:cb:
                    b4:28:ed:1c:0b:fe:7b:c0:87:c6:f9:09:ef:e0:26:
                    7b:80:a0:27:65:a5:78:71:a0:1f:a3:79:d2:ad:dd:
                    43:fc:92:5c:5c:d5:bb:ed:e2:df:39:5d:bd:c5:41:
                    ed:65:0a:c5:4c:7f:70:76:57:36:60:d6:bb:41:2b:
                    6d:ac:cb:57:ac:96:b3:3b:57:2b:9d:f1:93:fc:17:
                    18:0a:c8:fd:c4:f3:a6:46:7b:70:e6:56:69:39:5e:
                    6b:48:a4:dd:6f:da:e3:2b:99:aa:7e:f3:81:2b:20:
                    36:02:80:a8:58:fe:91:45:2b:9e:2f:30:dc:c6:83:
                    2e:36:9a:25:7a:df:c8:53:d5:b7:a2:c6:92:e0:48:
                    fd:ad:6b:ca:37:f3:57:f6:eb:24:95:89:0e:b6:bb:
                    64:95:7c:e7:92:7c:88:b7:02:11:d5:34:79:71:31:
                    7e:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:51:59:10:0D:9B:23:2F:6D:60:10:F8:BC:0A:CF:5A:A2:C1:17:F1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/a82ada52-0dca-3dd7-ad29-cd834dbada96.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.1.44.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ae:e1:b1:1b:0d:12:14:d3:7c:73:c5:4d:03:52:ed:a0:0b:2f:
         99:ab:53:f1:2e:d9:7a:86:2b:e4:9e:57:f6:7f:73:29:e0:db:
         df:1f:aa:7f:7f:50:b0:50:bb:8e:a6:73:3b:64:2f:0c:7d:6d:
         17:f2:b4:72:ef:c8:a5:e4:7d:ad:63:c2:ef:6e:94:99:ce:58:
         5f:9a:96:72:4e:25:d3:41:b5:23:5a:ee:29:38:7d:79:5b:f7:
         d2:07:8d:58:09:8d:41:3b:e2:12:a1:61:d3:07:0a:d4:6d:7f:
         76:7a:ae:fd:13:2d:65:b8:35:b4:ba:86:39:9d:05:0a:ea:63:
         16:94:7a:bd:eb:f7:6b:c2:cc:f0:af:a3:2b:b3:82:4a:52:08:
         25:13:4e:ed:77:8e:14:c9:7c:63:f7:0f:64:9d:27:9d:a5:db:
         5a:e1:66:38:fc:d1:a4:08:e4:88:70:73:7a:03:f5:4a:0a:1b:
         f8:f4:60:59:fb:ed:cf:1f:79:55:e4:f4:d7:c7:7d:ac:72:51:
         40:5c:78:9f:ec:16:c7:e2:a1:52:c4:ec:a9:30:4a:51:3a:db:
         29:42:13:52:f0:51:3e:a5:eb:c1:f3:97:17:4b:71:f8:5e:58:
         ef:b7:cb:62:4d:71:d0:ac:ca:7a:e5:e2:d4:5c:1c:ef:fe:a7:
         c8:c6:23:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 16:56:48 2026 by rpki-client