Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/cf47b5bc-74bf-32f2-a40f-7076818a6d08.roa
File:                     cf47b5bc-74bf-32f2-a40f-7076818a6d08.roa (raw, json)
Hash identifier:          dwSAjjYTPLcc8twMj3BYd4dvnfufHK2SnzhZHwFBugE=
Subject key identifier:   13:DE:78:E9:D7:58:52:0F:85:83:32:54:4C:16:F5:62:31:53:6D:C2
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F4328584D8D900342839658FE93AC7000
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/cf47b5bc-74bf-32f2-a40f-7076818a6d08.roa
Signing time:             Sun 19 Apr 2026 01:00:23 +0000
ROA not before:           Sun 19 Apr 2026 01:00:23 +0000
ROA not after:            Sat 18 Jul 2026 01:00:23 +0000
asID:                     16276
IP address blocks:        166.0.112.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 05 May 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:8d:90:03:42:83:96:58:fe:93:ac:70:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Apr 19 01:00:23 2026 GMT
            Not After : Jul 18 01:00:23 2026 GMT
        Subject: CN=343ea5ba-d628-46eb-9be2-cb4239b24f4e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:21:99:10:07:df:01:6f:a7:ea:d6:84:36:e0:
                    9c:9b:27:2b:04:0e:85:e1:03:60:44:c7:2c:05:c5:
                    2e:c2:55:b7:01:f3:d3:6b:72:6e:ca:08:6e:1b:22:
                    40:45:7a:fa:ce:91:31:a6:b9:71:c6:3a:2b:6b:66:
                    c3:4c:2b:be:85:aa:d2:39:48:8e:1d:86:d3:2e:26:
                    f2:e1:a6:7c:e6:97:60:69:4d:2a:bc:b3:74:e7:95:
                    61:be:23:de:05:eb:2c:6d:92:d5:5e:3e:24:af:86:
                    7c:1b:18:51:45:78:c6:2b:a2:7e:e0:ee:0f:68:42:
                    cf:d4:81:e8:7c:ba:a4:f2:ff:92:b1:6a:e0:ac:b3:
                    92:71:e9:61:3d:77:05:f4:c1:b7:77:73:c6:c4:7c:
                    39:31:ee:bc:85:d5:00:a0:6c:d7:4c:c7:b3:c1:94:
                    2b:9b:c3:6a:6d:20:ba:08:23:c4:d6:e8:7e:8c:14:
                    98:c9:b6:c9:a6:4a:35:32:e6:07:b2:c2:d7:08:35:
                    0e:91:cd:95:e7:49:8a:d9:07:56:ac:8f:ef:e7:dd:
                    69:28:ac:8c:d4:75:a1:37:6f:20:ce:14:21:f7:5f:
                    f3:ea:31:c4:21:06:f2:f9:eb:e4:3f:a0:c5:7b:22:
                    66:15:6a:7d:70:ca:5f:53:37:eb:ae:7f:6a:ce:88:
                    f8:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:DE:78:E9:D7:58:52:0F:85:83:32:54:4C:16:F5:62:31:53:6D:C2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/cf47b5bc-74bf-32f2-a40f-7076818a6d08.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.0.112.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         74:5d:a3:e3:20:fd:36:cf:06:8e:ff:da:ef:11:f8:68:b5:d5:
         35:66:57:41:41:cd:13:5a:81:d8:3c:c7:26:fb:98:3d:24:9d:
         c2:b7:42:bc:93:91:f4:0a:a7:92:da:09:db:d9:a4:d5:e5:a8:
         8a:9b:82:c6:fb:41:17:44:66:31:56:0d:c2:ed:f0:14:ac:c1:
         d9:60:be:65:7c:44:90:87:fc:6c:27:83:09:51:a5:97:4f:fb:
         ee:23:44:dd:62:90:bb:ce:48:58:47:ec:3d:b7:36:32:30:a9:
         2a:a5:cf:a9:a1:3e:f9:0c:7c:35:8e:36:af:62:34:74:83:fd:
         29:b4:a2:42:1c:e2:d7:1d:3a:9a:19:a9:df:e2:49:3b:19:c0:
         b0:ad:99:3e:61:15:80:0c:64:70:5a:4d:15:17:e3:b2:e6:19:
         5e:00:d0:f4:86:c6:b6:c4:72:ee:57:4f:2e:cb:a8:61:67:59:
         bf:1b:aa:9f:b4:27:8f:08:79:26:9e:c2:75:78:fb:62:5c:7d:
         df:d6:27:fc:8f:ff:52:2e:94:93:02:11:6f:bd:e6:51:3e:09:
         fb:20:50:20:e3:5b:f2:f4:ef:65:2a:ac:33:ae:f0:a9:b9:01:
         47:54:4e:06:c7:9f:96:52:97:a0:50:cc:03:82:fe:7e:ec:de:
         49:b9:c7:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 2 23:11:06 2026 by rpki-client