Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/bf5961e7-8dd7-3ed3-875a-cc50412c0825.roa
File:                     bf5961e7-8dd7-3ed3-875a-cc50412c0825.roa (raw, json)
Hash identifier:          Mja60Hs1mG//s8fKyd3bb0XZRmm4WRY8GpKuoyDwmuU=
Subject key identifier:   AF:D9:3F:0E:8A:F8:02:AD:D3:7C:7F:6D:39:E6:AA:25:E8:FF:A5:CE
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F4328584EA7887370AF2A407AF99C7200
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/bf5961e7-8dd7-3ed3-875a-cc50412c0825.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     10753
IP address blocks:        166.0.251.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Aug 2026 08:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:88:73:70:af:2a:40:7a:f9:9c:72:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=ad446adb-2ea3-4844-b053-4d8cc531dc27
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:e4:26:04:51:28:ad:4e:1b:03:28:0f:4e:67:
                    22:2c:6e:78:83:fa:c9:4e:74:41:25:3d:b9:30:3f:
                    6c:0c:b8:33:af:52:fa:ea:5a:fd:b0:0a:0d:c1:f4:
                    a7:1e:9c:72:2e:d5:eb:d3:3a:c8:49:d6:c0:d1:7a:
                    2e:a6:e6:d5:30:f8:f6:6d:da:16:2a:a1:53:90:d1:
                    5a:8c:ae:ac:13:fe:40:da:f8:d5:5b:64:99:47:a4:
                    ef:cf:a3:c3:e3:21:53:c4:b3:a8:9d:2d:5a:63:72:
                    62:af:83:21:6b:0a:45:41:ab:24:28:7a:4b:62:4f:
                    0a:17:50:e2:4d:b1:4d:2f:cf:50:d4:1a:bd:04:6e:
                    d2:fd:e2:73:aa:17:7d:9e:e2:ed:10:48:ef:46:c1:
                    3e:c6:5c:b9:d7:34:e4:c4:ad:a9:53:ca:6e:67:39:
                    3a:b7:d9:d7:7b:73:0f:12:e6:e1:e2:82:14:77:cb:
                    e8:db:22:78:3b:d5:a4:ca:f5:f0:b4:5a:d9:6e:45:
                    5a:3e:92:b4:61:31:e2:c6:7f:eb:16:24:eb:c7:33:
                    06:28:59:b5:92:e1:45:12:60:7a:48:ab:29:54:11:
                    9a:1b:a0:4d:e7:c1:b2:0e:3c:b8:5a:05:67:1c:23:
                    59:b3:11:dc:83:60:26:2e:f1:67:58:b8:65:36:fd:
                    e1:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:D9:3F:0E:8A:F8:02:AD:D3:7C:7F:6D:39:E6:AA:25:E8:FF:A5:CE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/bf5961e7-8dd7-3ed3-875a-cc50412c0825.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.0.251.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2c:f0:c7:f7:6c:fd:04:ba:0a:77:b9:ed:f6:7e:00:91:b0:6f:
         a4:d3:10:f5:9b:f6:36:60:67:10:11:10:33:84:ac:90:ab:8b:
         a9:f3:7e:3f:02:b4:d2:52:d5:d8:58:54:56:46:da:1d:bf:30:
         84:ca:fd:10:a0:cc:5a:72:8d:6c:43:b2:9a:3f:cb:39:34:30:
         57:06:48:f5:16:d0:85:a0:88:1a:ee:eb:63:7d:a3:ed:3f:8e:
         8d:76:ae:1c:9e:3b:d9:d0:e6:2f:62:ca:5f:54:c3:eb:cf:97:
         1a:cb:48:b7:82:c3:62:ab:43:f9:f1:0a:ed:1c:4b:08:7e:42:
         02:10:91:7f:99:ab:95:a0:f6:e8:09:bf:55:d7:0c:0f:fd:3d:
         18:d3:d4:10:9c:4a:d9:71:58:56:9e:2f:72:7b:a3:77:62:41:
         80:14:c2:4e:cf:0e:92:18:83:1d:48:23:23:3f:19:0f:3b:30:
         0b:e4:d8:06:fb:cf:52:36:e8:6f:45:f1:d3:df:b4:c6:cd:40:
         94:e8:22:9d:ce:40:00:07:6a:ab:1e:b6:fe:a2:d2:df:e0:2e:
         7e:9a:53:03:4b:eb:df:7f:6e:bc:32:65:4e:cb:fa:bf:2c:d8:
         eb:78:81:88:e5:44:cb:61:31:de:4a:19:57:6c:6f:cf:f6:31:
         9d:62:91:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 16 05:59:51 2026 by rpki-client