Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/b647b126-eeb5-3079-ab5e-eab789d78b65.roa
File:                     b647b126-eeb5-3079-ab5e-eab789d78b65.roa (raw, json)
Hash identifier:          F/R3npJDOAJkIKSNYaftYHB4asc/exsvqCZTwEg19qk=
Subject key identifier:   D9:FB:40:CC:90:16:77:05:BE:36:16:6B:F1:FC:A0:90:2B:61:E9:42
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F4328584D5D47B295956706C064D0FF80
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/b647b126-eeb5-3079-ab5e-eab789d78b65.roa
Signing time:             Wed 01 Apr 2026 17:56:13 +0000
ROA not before:           Wed 01 Apr 2026 17:56:13 +0000
ROA not after:            Tue 30 Jun 2026 17:56:13 +0000
asID:                     401152
IP address blocks:        166.0.145.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 05 Apr 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:5d:47:b2:95:95:67:06:c0:64:d0:ff:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Apr  1 17:56:13 2026 GMT
            Not After : Jun 30 17:56:13 2026 GMT
        Subject: CN=a15ded71-531d-4ce9-8b9d-a58614fe65c5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:c2:ac:22:c1:1b:3a:b5:de:a6:9d:18:bf:3b:
                    99:61:7d:5a:fd:d9:ca:ab:64:c9:57:82:eb:05:78:
                    e7:87:93:aa:3e:96:ec:9d:e6:d8:72:fc:0a:56:2b:
                    8a:e3:cb:eb:b9:18:c6:f5:69:db:89:dd:12:0c:b6:
                    5c:5b:60:bc:d4:24:93:22:12:a6:89:e9:42:7a:9c:
                    37:ed:0a:2d:f6:8f:d0:c8:69:29:17:e4:11:6b:d1:
                    e2:52:60:1b:ec:97:cf:07:62:73:b6:1a:1c:3a:92:
                    37:62:f7:f2:7a:09:37:70:a3:95:f2:ad:d6:60:17:
                    76:d6:b3:ef:13:00:c0:26:32:81:ea:16:da:25:7f:
                    a0:9d:d1:74:7c:cc:db:48:1e:03:96:1e:24:4b:03:
                    62:a2:97:83:a5:0c:c4:33:fb:c8:d8:47:08:3b:b2:
                    5f:fe:cf:52:8b:41:73:1a:49:6e:55:f9:83:df:0e:
                    9b:9e:16:de:91:0a:5c:20:b4:04:ef:33:38:f3:bf:
                    1f:b8:8c:fb:63:53:af:c0:80:33:ec:e3:36:49:5a:
                    d2:8c:a2:24:69:f9:fe:72:2d:34:bb:c4:3d:51:e9:
                    38:4b:d3:16:86:b3:03:44:6d:aa:c4:f5:1a:d4:8e:
                    8b:c0:9f:87:a7:e0:05:35:10:af:37:50:7a:0a:db:
                    75:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:FB:40:CC:90:16:77:05:BE:36:16:6B:F1:FC:A0:90:2B:61:E9:42
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/b647b126-eeb5-3079-ab5e-eab789d78b65.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.0.145.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8b:75:73:16:f9:c8:fa:d0:34:e2:3a:51:cc:db:26:96:10:0f:
         d5:35:51:43:c9:76:9c:b6:2d:57:f1:7d:6e:f1:56:66:03:29:
         b5:be:9c:a8:80:67:a6:9e:0a:fc:ce:b4:c3:e6:50:81:48:be:
         d5:20:05:f2:ab:a8:27:2a:34:84:a6:16:b9:08:c3:31:40:66:
         07:fe:8b:79:47:d9:9f:18:db:f1:27:7c:a7:2a:16:a3:49:fd:
         d1:a6:76:dd:f7:ff:a9:ac:dd:9f:8a:06:fe:7b:bd:eb:10:6c:
         6e:27:17:cb:58:3e:bf:e0:26:b9:6c:0c:4d:7a:73:86:b0:4d:
         4b:34:15:66:2f:a4:b9:db:8d:6a:64:93:37:3e:50:30:89:b9:
         aa:e2:c4:7c:7f:8e:4c:4e:9c:3c:fd:3c:e7:fb:ce:25:63:85:
         90:a0:2c:75:96:e7:f4:6e:e4:86:b3:28:0f:63:24:0e:ab:32:
         24:a8:1d:6b:fc:83:f4:cf:d8:16:49:ec:fe:83:67:19:d6:ea:
         ab:33:c6:5a:9b:ee:44:6f:27:4a:1d:13:1a:97:91:98:0f:90:
         54:4b:fe:c5:06:f1:e0:17:07:b9:a9:ec:26:a6:cd:69:9d:5f:
         25:ab:44:aa:df:2a:ce:60:d6:d5:0e:23:f7:d0:e4:46:16:ea:
         db:74:3a:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 2 22:38:07 2026 by rpki-client