Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/d55e942c-4bfb-3524-a282-3913048277e6.roa
File:                     d55e942c-4bfb-3524-a282-3913048277e6.roa (raw, json)
Hash identifier:          Kr+JckLZX3ZmcZ85/nIrpDwPmMuwEuBQNmFCBHGO2xI=
Subject key identifier:   31:E9:51:91:F1:3C:F3:C4:0E:76:4F:A8:9A:EE:A4:1B:F7:D7:2D:AF
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F4328584D24E10B4E7B221BB90CD64DC0
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/d55e942c-4bfb-3524-a282-3913048277e6.roa
Signing time:             Thu 12 Mar 2026 13:00:40 +0000
ROA not before:           Thu 12 Mar 2026 13:00:40 +0000
ROA not after:            Wed 10 Jun 2026 13:00:40 +0000
asID:                     58061
IP address blocks:        166.0.122.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 18 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:24:e1:0b:4e:7b:22:1b:b9:0c:d6:4d:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Mar 12 13:00:40 2026 GMT
            Not After : Jun 10 13:00:40 2026 GMT
        Subject: CN=42f63613-aab5-4948-adbc-e8f79161d381
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:80:95:64:80:ed:86:b0:2a:df:f8:26:c7:df:
                    1b:cc:4f:d2:d6:4f:51:ad:4c:c1:a8:33:c9:02:01:
                    5f:7c:fb:26:e2:95:46:7b:5a:30:b6:d0:73:66:02:
                    40:0d:9e:56:ef:90:6f:c4:68:dd:4e:b7:37:ab:0e:
                    92:b5:af:db:47:f1:1e:9c:92:68:74:25:28:02:53:
                    c9:58:84:a8:cf:00:2d:23:2f:b8:ee:18:29:b8:9f:
                    bb:9f:f5:5c:31:b7:f7:2e:8f:4e:ea:c0:8f:09:e4:
                    fc:de:de:56:a3:84:8e:d7:b5:85:de:d8:67:21:08:
                    b0:cd:34:4a:42:21:9c:41:4d:eb:d3:be:bf:82:8f:
                    ea:bf:e8:47:30:21:ea:30:ee:ea:22:1e:c7:a0:5e:
                    0d:94:29:23:9c:00:e0:87:1c:a8:25:56:5b:6a:b8:
                    9f:ad:13:f7:b7:be:9b:83:84:a3:72:b7:48:86:28:
                    c6:90:7d:53:c2:b3:48:54:5c:a3:2c:12:4c:72:8b:
                    2a:ac:05:ce:7d:a4:8a:22:cd:8b:b3:31:87:91:90:
                    37:8f:a0:f6:03:23:13:3a:3f:dc:2f:10:aa:a0:ce:
                    41:0b:b9:3e:10:08:5d:3d:5e:7d:97:d9:44:f3:2e:
                    e0:3e:92:b4:8d:df:ae:0b:16:3a:c5:12:aa:16:03:
                    38:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:E9:51:91:F1:3C:F3:C4:0E:76:4F:A8:9A:EE:A4:1B:F7:D7:2D:AF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/d55e942c-4bfb-3524-a282-3913048277e6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.0.122.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         57:3e:9f:ec:88:d8:ed:22:9d:66:2c:e3:ed:2f:58:d0:fc:b6:
         53:ae:0f:db:12:6c:a0:89:73:40:2e:9a:36:b4:a5:9e:4b:5f:
         cf:47:b6:3a:ff:e0:22:0c:e9:f3:55:9a:11:f6:78:28:90:2c:
         f1:32:9f:6d:42:90:4b:f5:2f:96:e1:85:8c:8a:c5:92:d2:cd:
         14:47:0d:8d:e4:74:0f:c5:f5:73:be:56:d3:85:df:bb:9d:82:
         59:01:84:ef:47:0e:54:7b:da:4c:7e:7c:e8:ac:c9:a2:ee:8e:
         44:43:a0:6f:68:22:f2:2b:e5:19:72:0e:8b:dd:4b:3a:e1:b4:
         f8:39:27:f2:37:c8:cb:8c:fb:b3:2d:d7:8c:41:54:1d:74:43:
         3e:9d:10:11:5a:b2:fe:4a:94:79:e0:6f:e7:6f:51:01:64:67:
         c8:aa:f7:9a:49:a7:4f:a8:48:b0:25:b5:d2:24:ea:16:a3:11:
         9c:de:0f:75:d6:9a:7b:a4:62:63:45:e9:99:96:67:40:d4:ed:
         cb:98:ab:a7:1c:9d:a5:b8:33:60:1c:f2:f0:ba:08:4b:6a:b5:
         a0:aa:32:a5:32:8e:9c:33:e7:e2:6c:bb:ae:18:38:7d:79:01:
         85:1d:9e:e0:29:20:9f:64:3a:9b:78:bf:2b:ea:8f:b9:18:a0:
         d8:81:c0:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 17 00:45:56 2026 by rpki-client