Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/d3aa346e-05ee-3e39-a432-86a9880b781d.roa
File:                     d3aa346e-05ee-3e39-a432-86a9880b781d.roa (raw, json)
Hash identifier:          pL6vIVOI+cjpdXL4+PxhFoaewVNQA7jkXAUJcbdSnKk=
Subject key identifier:   4D:C5:7C:9C:98:38:F9:52:76:CB:4D:5B:2B:1F:FD:8B:6C:48:F1:4D
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F4328584EB7AA5C2292199ED7D98A2EC0
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/d3aa346e-05ee-3e39-a432-86a9880b781d.roa
Signing time:             Mon 03 Aug 2026 19:44:42 +0000
ROA not before:           Mon 03 Aug 2026 19:44:42 +0000
ROA not after:            Sun 01 Nov 2026 20:44:42 +0000
asID:                     6079
IP address blocks:        166.1.191.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 05 Aug 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:b7:aa:5c:22:92:19:9e:d7:d9:8a:2e:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Aug  3 19:44:42 2026 GMT
            Not After : Nov  1 20:44:42 2026 GMT
        Subject: CN=7bb37421-56bd-401c-9a79-d26b84ecd7e1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:88:61:e1:59:32:ed:bf:eb:45:e7:a4:67:02:
                    41:d4:0a:b5:34:27:37:71:0a:e3:fd:12:bd:1b:6d:
                    d8:09:46:32:c7:88:44:fe:31:87:15:58:e3:1e:02:
                    e1:43:b7:f1:02:b6:44:3c:a1:07:2d:54:88:65:85:
                    f0:a9:ad:59:32:25:ed:ad:f6:ec:e6:a9:43:c7:3f:
                    74:15:7b:4b:c3:c9:4a:ed:7b:06:d6:d3:8e:90:96:
                    58:81:34:68:09:0d:e7:f3:49:a1:10:a6:b1:7f:9b:
                    71:5e:53:a7:46:0e:1c:02:f0:b9:e2:37:39:19:a9:
                    84:51:11:16:d1:df:57:54:b2:38:b3:d6:b5:df:7e:
                    47:96:9e:dc:4c:e9:08:56:c0:6a:03:5a:5e:f8:58:
                    91:32:17:74:12:b0:f2:7f:d4:a5:3e:da:e9:b0:90:
                    45:dd:fd:41:3a:b0:ba:fe:40:27:4d:39:4f:63:28:
                    0d:8b:4a:b2:1e:3e:ea:22:87:ad:ee:fd:6a:67:53:
                    af:d6:e7:67:7d:4f:4b:17:8b:3e:e8:5d:90:a0:32:
                    ae:85:64:c4:bd:c4:55:5c:b2:47:20:83:77:4d:4a:
                    6a:93:0e:7c:d5:0c:01:4c:d5:d7:15:42:63:e2:fc:
                    ae:ab:cf:a3:d7:23:cd:20:56:87:bc:3b:71:f6:33:
                    d3:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:C5:7C:9C:98:38:F9:52:76:CB:4D:5B:2B:1F:FD:8B:6C:48:F1:4D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/d3aa346e-05ee-3e39-a432-86a9880b781d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.1.191.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         81:9a:ca:ed:32:3d:b4:5b:75:3b:5b:dd:aa:12:82:44:b1:4e:
         dd:1f:84:44:72:5a:d5:50:63:ba:af:48:2a:cb:80:34:48:5c:
         68:bc:0a:4c:bc:54:3b:ae:1c:98:4e:7f:8c:45:67:73:54:4a:
         8f:a1:71:d1:4b:eb:4d:f6:78:2a:c8:a4:a6:3b:7f:dc:7b:49:
         f4:d3:a3:49:31:16:75:cd:33:de:0e:0d:b8:ac:ec:9f:b6:64:
         5e:8c:9a:2b:2d:86:a8:53:15:83:3a:f4:53:c2:64:0e:64:f1:
         cb:4b:92:c0:48:b2:47:df:d5:b1:c3:ab:de:12:dc:07:26:e4:
         d7:1a:4b:9b:93:bd:73:7b:31:1c:cc:27:a1:cd:33:b7:c3:0e:
         e7:47:9b:b9:dd:f5:a2:58:d3:12:4a:e6:3f:ad:18:5c:4e:d6:
         dc:c3:15:f4:44:02:a4:3d:44:1e:b8:ca:fa:5f:30:fa:31:16:
         cf:0e:02:80:cd:94:2c:9e:58:a3:c8:95:98:10:9f:3a:d7:c4:
         56:42:6d:b0:3e:3b:26:d0:16:f4:30:6a:25:cf:17:a5:a2:5c:
         86:f3:9e:36:a1:16:10:91:2c:5e:75:16:bc:f1:f4:1b:7a:bd:
         78:99:7f:3e:6e:17:4d:b1:b3:29:16:a3:9c:97:91:4e:c3:e4:
         c6:27:99:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 4 13:33:48 2026 by rpki-client