Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/cb813085-f16b-3fec-b03b-908ed5c0ede1.roa
File:                     cb813085-f16b-3fec-b03b-908ed5c0ede1.roa (raw, json)
Hash identifier:          i/G7soSJPYYHCK+FQp8dolxtZFWrPJfpKorArbflBq8=
Subject key identifier:   1F:96:A3:0F:FE:71:2D:56:8F:83:EF:CA:CC:9B:AE:EE:B9:3E:4A:CB
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F4328584DABAF830C6C2911644EB1F580
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/cb813085-f16b-3fec-b03b-908ed5c0ede1.roa
Signing time:             Wed 29 Apr 2026 19:58:26 +0000
ROA not before:           Wed 29 Apr 2026 19:58:26 +0000
ROA not after:            Tue 28 Jul 2026 19:58:26 +0000
asID:                     401152
IP address blocks:        166.1.249.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 05 May 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:ab:af:83:0c:6c:29:11:64:4e:b1:f5:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Apr 29 19:58:26 2026 GMT
            Not After : Jul 28 19:58:26 2026 GMT
        Subject: CN=ae3fc9a2-2b84-4dc6-868e-e125d2fbd67f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:d7:32:af:bc:8b:50:ed:05:5b:82:81:36:81:
                    2b:56:ba:51:65:6a:36:60:39:1f:f1:32:c2:1f:5e:
                    8a:f5:3d:50:28:2e:0c:03:81:0f:d5:c5:bd:92:db:
                    de:72:2d:be:d8:b6:36:43:5e:45:2e:97:37:82:6f:
                    71:2b:84:a5:c6:e9:da:08:72:0d:84:8e:07:a1:3f:
                    90:b3:af:bc:6c:65:ae:bd:d8:e5:aa:6f:ab:c2:3a:
                    5a:dc:49:95:7f:84:7b:d4:59:30:3b:f3:9c:26:a9:
                    f0:e5:f2:d0:33:e0:6d:8e:67:e9:0c:11:b1:50:c5:
                    22:e2:15:da:df:3b:cd:2f:27:e7:22:d5:74:33:5b:
                    b6:b7:cd:61:4a:37:b4:8c:06:3d:db:45:38:de:49:
                    ae:66:33:fc:24:8a:0f:e8:87:93:4f:2a:1d:42:57:
                    89:7a:50:64:eb:77:ae:2f:10:32:ae:5f:4f:7e:13:
                    ce:98:35:f8:39:92:a4:35:e8:3e:f9:08:7a:b5:a7:
                    a4:3f:ae:60:e3:11:54:77:12:be:eb:76:b1:bf:44:
                    19:5c:d9:9f:6d:ca:96:de:07:08:cc:69:c3:55:f1:
                    ce:9c:ae:1f:e0:71:d4:ac:d0:32:1a:20:e1:fa:df:
                    ca:62:c4:f2:57:51:76:1b:9f:e0:42:65:64:bb:7f:
                    3e:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:96:A3:0F:FE:71:2D:56:8F:83:EF:CA:CC:9B:AE:EE:B9:3E:4A:CB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/cb813085-f16b-3fec-b03b-908ed5c0ede1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.1.249.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6c:b7:02:d3:35:fc:1b:77:cc:5c:21:a6:2e:52:55:12:59:ac:
         1f:ca:39:9d:e5:91:91:84:ae:a7:43:73:e1:20:78:b9:35:98:
         9e:46:ca:e6:5a:c2:b8:46:99:ce:b6:62:6a:3e:61:72:a7:88:
         07:c8:15:f4:74:2d:4d:fe:d9:00:ec:7c:c3:62:b3:14:06:a6:
         1d:fe:0d:a2:97:68:a7:50:23:45:6c:d0:4f:0d:ef:90:88:3e:
         41:1f:84:cc:b5:73:a1:71:12:89:26:31:a5:4a:33:4c:31:59:
         f0:f8:01:01:64:fd:7b:bd:00:0d:96:ba:db:a5:d7:84:eb:ed:
         b1:55:c0:09:05:52:3e:c8:4f:00:83:a4:19:71:6b:f6:53:6f:
         9d:47:4a:a0:35:49:3e:be:11:02:2d:39:8f:e5:49:6e:59:5c:
         20:43:ba:cc:8a:4d:39:11:1a:78:a1:31:55:2d:47:94:23:06:
         6b:96:bd:c1:05:b0:b5:5b:fd:d3:ec:7a:62:aa:8f:ff:b5:e3:
         b0:00:b8:e0:33:68:f7:14:cf:18:ad:8e:3c:70:ad:77:bd:8d:
         7d:6a:60:f3:f5:88:a8:a7:d7:da:2d:22:1b:3d:72:5e:ec:29:
         a9:45:d1:21:ca:ac:20:6f:97:ad:16:fc:b7:84:5b:eb:3b:c1:
         f4:68:b0:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 2 23:10:20 2026 by rpki-client