Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/cd06a708-adc0-3229-a381-89df4a7cc576.roa
File:                     cd06a708-adc0-3229-a381-89df4a7cc576.roa (raw, json)
Hash identifier:          gggM2wNp/cjXHABpLFYtIIXkbcD7Ss5nJzRCQxmkHL0=
Subject key identifier:   D0:22:BD:58:4C:96:39:76:8A:E6:35:B3:63:4A:22:C6:52:44:7B:A6
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F4328584E3FAF20677F0B223C722C8C60
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/cd06a708-adc0-3229-a381-89df4a7cc576.roa
Signing time:             Sun 21 Jun 2026 20:17:18 +0000
ROA not before:           Sun 21 Jun 2026 20:17:18 +0000
ROA not after:            Sat 19 Sep 2026 20:17:18 +0000
asID:                     8796
IP address blocks:        166.0.27.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 26 Jun 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:3f:af:20:67:7f:0b:22:3c:72:2c:8c:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Jun 21 20:17:18 2026 GMT
            Not After : Sep 19 20:17:18 2026 GMT
        Subject: CN=d3af5d90-4715-4145-a7b1-9c26c47a27fd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:60:f9:6a:62:b4:f0:9d:d0:a9:71:07:29:2b:
                    c9:87:cd:40:82:be:be:98:80:7f:fc:05:40:5c:be:
                    2a:c2:e7:df:63:31:68:1b:61:de:7f:a9:79:a6:8b:
                    f6:b7:36:86:da:0d:2a:db:aa:35:d8:71:df:7e:9b:
                    f9:d2:15:27:33:45:80:3a:a5:3d:dd:d8:40:73:1a:
                    6c:3e:25:28:2d:fc:73:89:59:0a:21:2a:8b:95:e5:
                    87:2c:37:15:ae:b5:52:19:06:1b:e3:19:76:42:7d:
                    f8:a4:db:42:cb:42:8b:89:88:6e:dc:03:43:bb:e5:
                    f8:45:79:9e:7c:8b:ad:bc:00:99:f6:59:bb:2a:4f:
                    17:e4:11:57:14:a4:92:a6:23:65:ea:8a:fb:ed:88:
                    58:f5:f7:c3:5c:82:23:e3:bb:34:d6:77:32:30:42:
                    9c:25:ea:9e:b5:04:9e:4d:a4:70:d3:d1:5d:f7:f1:
                    df:71:3e:40:43:b3:79:93:c5:33:7e:ee:14:a6:16:
                    10:51:70:cd:0f:96:ef:65:78:9d:f6:24:98:77:2d:
                    cf:b7:4d:ca:57:91:43:00:63:5c:7d:02:f7:77:bc:
                    aa:5c:b7:73:f0:6b:22:3d:c8:f7:68:f8:67:83:8f:
                    f9:e4:8a:97:fe:2a:d0:84:be:c0:61:89:1d:06:80:
                    42:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:22:BD:58:4C:96:39:76:8A:E6:35:B3:63:4A:22:C6:52:44:7B:A6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/cd06a708-adc0-3229-a381-89df4a7cc576.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.0.27.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6c:1b:7d:65:27:21:1c:31:12:6c:bb:92:a5:87:bf:22:a2:b1:
         dc:79:29:8b:47:e8:d4:10:9e:b1:a6:c6:e5:bc:16:2e:96:e2:
         95:68:93:30:6a:ea:9c:c6:e7:98:a4:b2:3f:67:4f:7d:10:9a:
         ed:53:a2:c5:ea:bf:c1:37:75:3e:c6:43:5b:a1:08:13:3f:be:
         17:af:b6:57:4d:f1:11:67:d1:2f:24:71:d2:66:3e:85:d2:6c:
         88:b5:11:df:83:dd:e2:5c:b2:c4:9d:64:8d:74:5e:43:60:1e:
         8b:f5:99:a5:35:61:ea:9c:e7:cf:01:76:bb:4e:4a:eb:52:24:
         1b:e2:03:54:f6:27:00:ee:a3:e3:f6:93:d0:83:ac:dc:ae:ab:
         3e:3a:43:fe:ad:19:ed:aa:e0:c5:2e:a5:20:49:d9:af:24:1d:
         f4:00:f9:f1:c6:a4:77:ad:bf:5e:95:15:76:2a:82:08:09:c4:
         d0:a8:3c:7d:82:59:cd:88:4b:46:84:92:70:b6:e5:60:89:bb:
         31:2d:40:cb:7d:85:a2:a5:e3:a1:11:24:eb:a6:51:37:42:dc:
         59:57:f6:31:ee:ab:06:46:dc:27:23:75:d8:a2:8a:90:ba:bb:
         f6:69:31:ee:cb:17:04:48:27:54:86:5e:c0:0b:9c:75:5a:14:
         42:34:4a:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 23 18:10:37 2026 by rpki-client