Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/c935eec3-278b-3618-96b8-127810e07b90.roa
File:                     c935eec3-278b-3618-96b8-127810e07b90.roa (raw, json)
Hash identifier:          MiDAc8AfJ5ccus6x7kI6LbNGx6+x5IElysFfj5tALng=
Subject key identifier:   72:86:AA:8B:1B:66:33:34:C3:0D:90:34:6E:7A:6A:F9:8B:DD:AB:7F
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F4328584E5E1CAD3D18F1F3889B3C7680
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/c935eec3-278b-3618-96b8-127810e07b90.roa
Signing time:             Thu 02 Jul 2026 17:52:17 +0000
ROA not before:           Thu 02 Jul 2026 17:52:17 +0000
ROA not after:            Wed 30 Sep 2026 17:52:17 +0000
asID:                     401152
IP address blocks:        166.1.58.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 04 Jul 2026 08:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:5e:1c:ad:3d:18:f1:f3:88:9b:3c:76:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Jul  2 17:52:17 2026 GMT
            Not After : Sep 30 17:52:17 2026 GMT
        Subject: CN=34925d45-5618-41e0-b2c2-3647246a9d93
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:8b:94:a0:f0:1c:7e:b9:4e:37:2c:fa:69:7e:
                    e5:11:bf:46:fc:f0:a3:7f:13:8e:36:6d:31:40:c4:
                    33:26:c4:82:29:bc:6e:f6:b5:37:07:f9:3a:91:cf:
                    c3:28:d1:6a:2c:f7:ed:29:2f:23:15:f4:4c:08:0e:
                    c6:ff:76:2e:a0:f1:22:9c:a5:d6:28:52:4c:c2:f1:
                    0a:26:46:5f:8d:88:27:39:92:28:5d:b1:b3:8d:21:
                    5e:7a:71:c2:d5:f5:3f:93:f3:fa:0b:1b:42:b6:c0:
                    65:91:12:ae:66:40:a4:0a:01:52:7e:aa:dc:cf:8a:
                    a5:09:82:04:dd:00:21:04:95:4b:52:c5:47:49:9e:
                    59:d4:11:65:ce:c7:f2:72:b1:ca:8b:e7:8c:e0:58:
                    da:16:3e:08:d9:ba:37:64:74:21:3f:b1:b7:4d:a5:
                    99:e6:78:50:ad:2a:86:e2:99:f5:67:db:42:77:ce:
                    cc:de:63:0c:7a:31:cc:2d:8c:cd:13:4e:53:58:d5:
                    5b:0e:ac:a7:b2:87:e4:20:d9:9f:1e:d0:f9:51:f1:
                    44:72:7f:c2:98:31:58:a4:66:42:eb:da:01:1b:72:
                    9b:ed:e2:6a:86:fa:72:06:d8:e8:5e:7d:00:cb:64:
                    ce:86:26:22:24:e5:7f:65:e2:ee:71:ea:27:d3:6b:
                    0b:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:86:AA:8B:1B:66:33:34:C3:0D:90:34:6E:7A:6A:F9:8B:DD:AB:7F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/c935eec3-278b-3618-96b8-127810e07b90.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.1.58.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         55:19:77:d5:d8:db:d0:0c:c7:42:a8:34:16:9f:4a:cb:78:6b:
         92:35:8e:8f:11:62:7d:d3:ac:ee:ff:2d:56:96:f9:da:c7:91:
         f1:33:50:ee:87:61:b8:d7:1c:99:d8:1d:41:c8:4d:45:7f:34:
         17:34:8b:56:3c:0a:08:23:c9:45:e1:ff:34:4b:46:65:6a:d9:
         a4:c0:ce:b1:2a:76:3e:4e:6b:c1:ec:6f:e9:d4:ee:2a:94:99:
         f0:7e:75:e4:b0:db:e5:e2:6e:63:c3:cf:75:29:c0:be:62:7b:
         0e:d6:8f:7c:54:8e:b2:18:ef:7d:11:64:ea:43:ed:06:f8:99:
         41:d0:9e:dd:09:11:46:74:77:88:42:9e:46:d4:e9:ba:9b:db:
         1e:bd:df:eb:16:dc:0b:db:4d:ef:4d:03:08:84:6b:a0:54:c3:
         04:2c:8d:fc:15:16:09:3e:5d:ff:0b:6b:2a:27:25:59:a8:2f:
         8a:c3:08:5e:04:ec:d3:80:03:32:de:95:47:6e:55:90:33:fb:
         90:19:db:e7:7d:8c:9c:c5:6f:52:ca:60:a2:4b:07:bc:5c:42:
         6b:5d:f5:8e:56:0a:f3:8f:68:9b:e4:8f:0b:75:85:5b:0f:73:
         ef:4b:f9:b5:e6:b8:da:6a:0f:fb:6e:70:ec:20:da:c5:4f:34:
         b1:ab:b4:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 3 02:29:04 2026 by rpki-client