Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/b357911c-3f74-33eb-843d-723413ba05eb.roa
File:                     b357911c-3f74-33eb-843d-723413ba05eb.roa (raw, json)
Hash identifier:          gjE2tGwATGBaZQ8PbiRf+pcIqNalk+SL/uYXg54m9Lk=
Subject key identifier:   84:FB:43:03:2D:49:09:E8:F5:8F:74:9E:D7:A2:94:DE:6A:E8:23:EB
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F4328584DDE88082C3D40F9418A3E8AC0
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/b357911c-3f74-33eb-843d-723413ba05eb.roa
Signing time:             Mon 18 May 2026 01:00:24 +0000
ROA not before:           Mon 18 May 2026 01:00:24 +0000
ROA not after:            Sun 16 Aug 2026 01:00:24 +0000
asID:                     15083
IP address blocks:        166.0.206.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 02 Jun 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:de:88:08:2c:3d:40:f9:41:8a:3e:8a:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: May 18 01:00:24 2026 GMT
            Not After : Aug 16 01:00:24 2026 GMT
        Subject: CN=b33f94ab-c354-4d0d-b342-1c5dab123962
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:a3:bd:b1:ea:39:4a:20:b6:5e:d1:df:a4:b3:
                    a5:35:a3:9a:62:74:55:65:9c:04:d8:e1:e0:e8:bf:
                    d2:a1:4d:1a:8d:a0:d3:d9:b9:25:3d:03:11:69:e5:
                    6c:46:85:b9:dd:ea:7c:78:ea:69:af:38:16:a4:61:
                    21:e1:16:f2:a4:34:5a:7d:36:7d:d8:31:70:89:fe:
                    39:ef:85:76:c6:69:6d:15:8c:fc:9d:55:28:df:03:
                    e1:36:87:79:55:8b:10:c2:42:c4:1b:36:cf:9b:6c:
                    6b:b2:ad:18:7a:9e:57:1c:f6:58:a2:57:f2:96:c4:
                    48:f4:09:73:2a:87:c5:7b:3f:86:cf:76:eb:69:99:
                    97:5d:c2:79:3b:6e:73:e0:96:1d:a6:2b:39:df:42:
                    c9:74:3a:35:1b:75:d4:b0:7a:cf:7f:19:a5:f5:7a:
                    90:28:7b:a6:3d:7c:21:3e:91:6a:b7:33:e0:14:4f:
                    c5:ab:2e:64:54:60:ee:95:3f:43:ee:2a:c6:68:7c:
                    20:77:a0:8e:70:40:0d:50:6d:8c:56:80:c2:6d:f0:
                    e5:32:77:93:aa:81:5e:c4:b0:41:70:a9:b2:6c:87:
                    ac:41:aa:73:a0:b8:c7:0c:ec:d0:aa:39:68:24:78:
                    eb:65:4b:6e:ec:5d:bb:7a:fd:d4:ba:d1:4d:d5:dd:
                    10:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:FB:43:03:2D:49:09:E8:F5:8F:74:9E:D7:A2:94:DE:6A:E8:23:EB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/b357911c-3f74-33eb-843d-723413ba05eb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.0.206.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         af:5f:0b:7e:40:f4:1f:4e:7a:27:c3:e9:30:1f:11:a2:60:ff:
         9f:d5:11:0d:4b:de:ee:1a:ca:09:6b:48:e2:e4:43:c7:05:1e:
         0e:2c:03:50:0d:39:40:c7:31:0b:81:92:07:2e:9e:6c:65:67:
         5e:10:c4:c7:56:9b:ca:0a:ae:67:33:29:9e:a3:a9:8a:45:44:
         b1:7d:c1:cd:3b:25:85:c8:42:10:84:a2:0e:00:ae:98:0d:4a:
         b1:cc:fb:08:d6:e1:8e:17:8c:2d:6e:a2:10:c9:11:53:69:5b:
         a3:13:d1:59:81:ca:cf:67:8c:52:58:19:94:5b:c8:2f:40:6c:
         7c:cf:6e:3e:e3:90:a0:bb:8f:75:5f:b1:7b:7a:b0:32:8c:2e:
         f5:7b:b9:6e:5b:7b:57:30:d6:ef:e1:ae:24:fa:50:c6:31:3e:
         7e:23:1d:14:3f:f5:94:4f:bc:4a:05:d3:c6:52:0e:b7:e7:e8:
         d1:3a:51:8b:83:41:d1:f2:38:cd:c0:e9:0d:96:92:fb:8e:42:
         2e:21:3d:64:09:9a:7d:0a:a5:f0:39:7d:a7:7f:5d:37:cd:94:
         e7:77:9b:c5:ed:da:ee:4b:f2:bb:c5:ae:06:94:96:bd:ae:7c:
         b4:dd:87:60:bb:64:81:0b:c2:68:23:d0:c2:17:e4:17:63:68:
         83:19:10:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 30 21:55:30 2026 by rpki-client