Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/b16df4a8-c8a2-3b85-928a-149d98d97975.roa
File:                     b16df4a8-c8a2-3b85-928a-149d98d97975.roa (raw, json)
Hash identifier:          05EqjULmOJ3XVpd3NO+Qnte149wnrCfV19j9xra1osY=
Subject key identifier:   98:6B:59:63:D9:3A:A7:ED:9A:72:6C:D5:98:23:9C:10:80:7C:40:6F
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F4328584EB7AA5D99BD36559D00E63300
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/b16df4a8-c8a2-3b85-928a-149d98d97975.roa
Signing time:             Mon 03 Aug 2026 19:44:42 +0000
ROA not before:           Mon 03 Aug 2026 19:44:42 +0000
ROA not after:            Sun 01 Nov 2026 20:44:42 +0000
asID:                     6079
IP address blocks:        166.1.112.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 05 Aug 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:b7:aa:5d:99:bd:36:55:9d:00:e6:33:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Aug  3 19:44:42 2026 GMT
            Not After : Nov  1 20:44:42 2026 GMT
        Subject: CN=a4bddd46-151c-41aa-b24a-cecebb8e988f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:ac:b2:96:d1:69:be:73:23:e3:5a:62:7c:d5:
                    5a:aa:c4:55:74:b9:12:f6:74:22:de:ea:3d:7b:4a:
                    66:17:cb:69:a8:dd:90:b9:d4:28:12:04:80:1e:b2:
                    32:ab:aa:af:14:59:3c:7a:27:09:bc:2a:83:9b:64:
                    c6:80:ac:56:85:d6:02:a0:bb:72:6c:bf:2f:f2:35:
                    bc:a3:7a:58:e2:74:b3:22:4c:e1:bb:de:2f:6d:eb:
                    b1:7e:b7:70:3c:c7:f5:ab:d0:42:2a:9a:a6:0b:3a:
                    12:cf:a5:44:e1:60:e7:bd:59:4a:72:5c:1c:65:db:
                    af:2a:15:48:2c:ed:40:88:5e:35:1f:e2:8b:ca:3f:
                    74:47:0f:25:1a:a8:bc:10:0e:c9:d4:c0:e1:6b:1b:
                    d3:ff:2e:75:65:3a:c8:64:8c:b4:18:67:89:c3:7d:
                    a7:43:d6:cf:b5:e8:f0:fc:5f:96:4b:8d:a1:99:7d:
                    22:18:7e:3d:24:68:ae:34:3d:1b:53:fe:f9:91:fc:
                    18:3c:07:fa:bd:dc:bf:64:e3:ca:50:ef:e6:90:37:
                    5d:87:d7:ab:1c:1b:1a:4d:23:e9:ed:54:ba:6e:73:
                    d3:21:f5:01:d5:b8:78:34:cd:01:74:82:dd:f7:e8:
                    96:95:e6:20:35:80:a4:09:4a:b9:80:f3:12:fa:f9:
                    43:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:6B:59:63:D9:3A:A7:ED:9A:72:6C:D5:98:23:9C:10:80:7C:40:6F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/b16df4a8-c8a2-3b85-928a-149d98d97975.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.1.112.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9d:ea:57:d1:2a:b2:71:af:76:18:28:3e:56:f5:3f:1e:67:72:
         24:ca:28:4b:3b:9c:80:90:24:6a:1c:bb:5a:d4:e7:5e:c0:fa:
         cb:1f:58:0c:50:96:e1:63:56:26:fa:73:3b:49:6f:06:b8:19:
         3c:1f:59:1d:7a:99:1a:f6:1f:d3:01:38:7a:f4:4b:ba:23:26:
         b8:fa:c4:99:6e:de:6f:d1:84:ff:b4:b0:4b:e6:82:89:47:b5:
         cc:2c:8f:9d:85:37:08:9f:4a:11:24:fc:1c:5f:5f:2d:d7:52:
         8b:f4:3d:d8:0b:8e:f8:b2:db:67:11:da:c2:77:d9:fa:dc:0f:
         6d:e7:0e:4d:3a:ff:3c:80:af:cb:df:7a:e6:12:21:79:0f:20:
         72:8b:a2:22:d2:e5:e6:0f:f9:c6:a8:c9:3f:41:9f:a6:6d:88:
         eb:e8:41:9b:b1:67:90:36:41:30:d7:76:5b:42:87:b0:06:00:
         15:8e:02:a8:7d:1a:76:d6:be:51:aa:74:08:e0:1d:8e:7b:bd:
         78:a1:0d:2a:cf:49:ba:ed:ed:1f:94:8f:e6:ff:3f:6e:2a:0b:
         f3:bb:d5:34:f3:d1:68:2d:4c:7e:31:44:bc:84:69:d8:ef:db:
         16:98:e9:75:4f:2a:c0:8e:02:83:31:c3:f0:8c:9f:4f:62:6c:
         cc:6a:df:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 4 13:33:21 2026 by rpki-client