Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/b7c3eb5e-da55-3511-afd1-31ec8d4cc899.roa
File:                     b7c3eb5e-da55-3511-afd1-31ec8d4cc899.roa (raw, json)
Hash identifier:          Plkh9m65apia/bGeGs/aak2Si9UstTJHG0xNiJ/EE6c=
Subject key identifier:   87:C6:D6:7E:18:4E:08:99:84:F8:69:DD:82:0B:62:87:8F:6F:54:D1
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F4328584F5E62E9C693C7BF388E0CD1C0
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/b7c3eb5e-da55-3511-afd1-31ec8d4cc899.roa
Signing time:             Fri 02 Oct 2026 13:00:13 +0000
ROA not before:           Fri 02 Oct 2026 13:00:13 +0000
ROA not after:            Thu 31 Dec 2026 14:00:13 +0000
asID:                     401152
IP address blocks:        166.1.97.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 08 Oct 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:5e:62:e9:c6:93:c7:bf:38:8e:0c:d1:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Oct  2 13:00:13 2026 GMT
            Not After : Dec 31 14:00:13 2026 GMT
        Subject: CN=3bb13cc5-af32-4183-94d7-71f3793c3121
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:68:a0:a3:28:52:fb:bb:c0:7c:f7:a4:ea:fe:
                    f5:fd:80:8b:ba:98:e5:44:0b:f4:1a:eb:22:52:a1:
                    0d:eb:06:07:0d:a7:a8:9a:1f:ef:a9:7a:db:26:a3:
                    c9:39:3b:04:2d:68:4a:ba:05:85:10:2c:e0:95:08:
                    ec:ae:e6:c9:1c:5a:02:32:26:38:aa:2c:36:dd:46:
                    35:7b:bc:f3:0c:54:fa:a7:25:7d:e5:f4:f4:0a:ab:
                    a1:40:79:d6:53:0a:52:d3:f2:12:2e:18:a7:a1:23:
                    6d:f8:25:a6:aa:f9:d3:dc:ac:96:b2:ad:45:12:4e:
                    1c:75:d1:d6:47:a6:be:c7:aa:96:ba:e5:49:21:5f:
                    b9:0f:47:9f:5c:4a:59:a4:93:d9:57:b2:f3:b1:80:
                    6a:da:8b:e3:2c:f4:6a:d1:09:36:cd:94:6d:ac:ba:
                    e9:42:f8:e5:7d:06:f4:4f:0b:8f:8d:b8:dc:86:37:
                    77:86:47:65:8c:34:18:db:80:7a:bc:f8:c9:ad:f6:
                    da:8e:cc:0e:fc:5b:41:a7:83:80:e8:34:2b:f6:b9:
                    15:9f:c5:0a:95:24:d0:ee:f6:96:4f:8b:23:8d:68:
                    15:e4:1d:72:2e:7d:69:0f:ca:3b:f7:91:e4:d8:72:
                    04:4c:6c:30:3b:ab:16:5b:fa:ad:8c:6e:14:7d:14:
                    ff:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:C6:D6:7E:18:4E:08:99:84:F8:69:DD:82:0B:62:87:8F:6F:54:D1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/b7c3eb5e-da55-3511-afd1-31ec8d4cc899.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.1.97.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5b:6e:1e:66:be:92:89:80:88:e7:22:4d:01:59:8c:43:d2:1e:
         0d:8c:97:9e:fb:0f:c1:aa:73:e9:da:39:f5:5e:6a:8c:ef:3b:
         55:45:77:7e:d4:7e:2e:d8:31:4a:46:47:c5:4d:55:86:58:ed:
         9b:d8:f7:1f:25:61:cf:ba:63:39:9e:e1:d5:d2:91:ed:49:9d:
         69:8e:49:6f:2f:98:ba:59:34:35:a3:6a:63:f4:42:ec:db:e3:
         33:82:9f:9c:5e:37:07:8a:b0:94:65:d0:2e:3a:61:ad:c2:03:
         00:0b:28:3c:1a:a1:1c:eb:5e:0a:18:e7:35:18:e8:d2:6f:c3:
         6b:de:82:9d:4e:8d:2b:7b:08:38:a4:69:e9:b2:58:72:76:70:
         79:17:50:9f:64:ac:ef:34:83:33:47:10:03:bb:22:25:b6:4a:
         6c:a9:90:4a:b1:6c:cc:40:62:ee:ad:33:5e:46:24:66:02:19:
         be:87:40:bf:1c:ff:85:09:e2:71:e7:69:cb:1c:69:65:e5:97:
         00:94:59:26:d0:49:5f:ce:b8:bf:43:d1:46:88:e0:c3:56:d6:
         68:c8:95:d7:13:b4:3d:a2:72:1a:5f:d9:f9:71:d2:ad:91:bb:
         c4:0f:b9:2e:2b:08:a0:d7:54:c3:57:34:00:7e:b8:da:69:0c:
         0c:b4:67:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 11:35:41 2026 by rpki-client