Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/a9044688-e248-3635-861f-a6cce750a9ab.roa
File:                     a9044688-e248-3635-861f-a6cce750a9ab.roa (raw, json)
Hash identifier:          HJYw0gRv4uWF3xXvL09NKRz3afKeW2kvQKntHQq692o=
Subject key identifier:   3E:DC:92:DA:1E:51:FE:F4:84:B0:B3:12:F7:FA:E8:DC:59:D8:1F:FB
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F4328584DB340322DF58FC80357712040
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/a9044688-e248-3635-861f-a6cce750a9ab.roa
Signing time:             Sat 02 May 2026 13:00:31 +0000
ROA not before:           Sat 02 May 2026 13:00:31 +0000
ROA not after:            Fri 31 Jul 2026 13:00:31 +0000
asID:                     21859
IP address blocks:        166.0.246.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 05 May 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:b3:40:32:2d:f5:8f:c8:03:57:71:20:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: May  2 13:00:31 2026 GMT
            Not After : Jul 31 13:00:31 2026 GMT
        Subject: CN=e84b1b47-a80f-45e7-a30d-138d448858e3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:b3:b9:a9:47:6c:72:77:b2:8c:97:7c:94:46:
                    90:90:5a:72:6f:6e:06:e4:08:a3:a7:60:b8:59:e8:
                    45:e0:0e:f1:95:e3:fe:e2:ba:41:6d:a2:4c:b1:7c:
                    68:a9:b4:ea:42:5b:19:79:93:a6:c6:b3:d0:60:2b:
                    d7:b3:67:bf:2e:6a:83:19:26:2d:bc:33:6e:ed:70:
                    08:17:3a:07:e3:f0:b2:20:17:84:93:cc:a1:61:bf:
                    8b:ee:a7:e4:36:db:ce:d2:c3:ad:8b:c1:3f:9b:8d:
                    e4:51:1b:58:60:7b:63:16:6e:f8:a9:60:20:f2:bf:
                    0a:5f:fe:6d:8c:28:b3:7d:13:8b:aa:e8:54:e1:b0:
                    47:35:82:90:af:2a:69:19:1f:22:f1:2f:ad:af:ac:
                    8d:f1:18:f5:54:f4:f8:b5:12:8a:3b:69:d2:ea:57:
                    e2:76:05:67:e7:07:d2:88:c4:97:f7:59:be:40:72:
                    8b:45:22:8a:46:64:b5:99:b3:5b:4c:02:d5:36:12:
                    19:02:27:ad:a4:ff:de:68:74:5c:67:fa:16:ba:40:
                    03:2a:7b:96:92:9b:31:0a:f4:8a:30:2a:74:72:d7:
                    ce:34:c3:17:24:01:2c:ff:1b:d8:12:e3:9c:2d:ea:
                    48:6d:4b:d3:02:9d:50:5d:62:bb:64:5f:67:0d:7f:
                    b4:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:DC:92:DA:1E:51:FE:F4:84:B0:B3:12:F7:FA:E8:DC:59:D8:1F:FB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/a9044688-e248-3635-861f-a6cce750a9ab.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.0.246.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1a:07:ba:e1:21:a1:84:3b:cb:90:de:60:62:91:68:81:b5:b9:
         33:0f:0b:7d:7c:0f:48:1a:77:05:50:1a:de:69:98:6e:c4:f5:
         49:84:a9:0e:b3:fe:51:e8:a1:38:7c:89:77:ae:86:9c:5a:a4:
         66:1b:72:16:b2:f2:82:c3:6f:84:5d:e8:87:06:e6:99:2c:14:
         a8:f9:b9:7e:0a:e5:5f:df:08:cd:fe:54:f1:27:a6:b4:b3:a3:
         15:6f:cd:e2:95:cb:fe:6e:4d:ec:a3:0f:b3:70:ca:a4:e9:41:
         1e:ca:7f:0b:ee:9f:e3:65:86:7e:7d:83:98:8b:f0:cc:27:19:
         47:6f:22:04:db:76:e1:f4:07:0c:cc:c9:6a:d1:84:44:2c:88:
         a3:f2:95:94:91:ce:ed:88:5e:30:ef:19:25:7f:9c:90:11:2b:
         0e:ba:38:0f:ad:94:30:ee:37:4a:3f:c9:d0:b6:52:fe:5b:1d:
         0d:9b:35:b5:25:6e:ee:72:e3:6d:8f:8f:d5:33:6a:a5:f9:92:
         bc:cb:f4:93:ad:4d:5c:f7:1d:65:59:f4:cd:00:b6:bc:3c:a7:
         8b:a4:a3:6a:84:57:d8:01:db:36:b6:7c:c8:de:5c:47:ff:63:
         31:c4:78:5f:da:39:44:9a:5c:17:a0:cf:78:9a:4f:15:7a:27:
         69:f6:ac:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 4 12:57:30 2026 by rpki-client