Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/e45d5201-712a-37f3-873f-9dd13dfba7ee.roa
File:                     e45d5201-712a-37f3-873f-9dd13dfba7ee.roa (raw, json)
Hash identifier:          zZkwyr2Bt2z6NJeqBTNAEl1F9JL+RBQ+zwV0QCQeBe4=
Subject key identifier:   9E:A5:98:B3:C2:BF:B2:7A:53:F7:A9:DE:45:C9:FA:CE:32:68:D1:9D
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F4328584DC21F380AC37930F6261C37C0
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/e45d5201-712a-37f3-873f-9dd13dfba7ee.roa
Signing time:             Thu 07 May 2026 20:51:18 +0000
ROA not before:           Thu 07 May 2026 20:51:18 +0000
ROA not after:            Wed 05 Aug 2026 20:51:18 +0000
asID:                     9009
IP address blocks:        166.1.57.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 11 May 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:c2:1f:38:0a:c3:79:30:f6:26:1c:37:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: May  7 20:51:18 2026 GMT
            Not After : Aug  5 20:51:18 2026 GMT
        Subject: CN=43512250-d32a-4262-9052-22f82bff1d61
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:ae:1a:61:f6:f4:e7:4d:42:4f:e8:78:41:b1:
                    8a:6a:66:f9:9b:e8:4a:52:05:c4:de:87:ed:ef:3f:
                    f3:e1:94:5b:0a:cb:a7:4a:4c:0d:c2:b5:34:08:7a:
                    fa:67:2f:c2:ca:56:af:b5:db:d1:4c:5d:68:61:a7:
                    91:1d:a5:26:27:60:1f:c5:f4:b6:f2:2d:e7:a6:06:
                    07:a4:7e:f2:8a:4e:63:9f:0d:46:43:9c:24:9f:ae:
                    29:5e:2d:8c:c9:15:51:9e:a1:8b:3f:4b:f4:57:a1:
                    01:dd:9d:b0:5a:0e:52:cd:f1:a8:38:4b:38:c1:f4:
                    07:9c:0f:8b:08:8b:80:72:09:55:11:29:f8:38:d9:
                    c9:0e:a8:1f:4f:30:19:f4:d2:4f:97:e3:fc:83:8b:
                    0e:04:55:91:8b:6d:0d:8b:9c:e0:b2:f9:e6:89:e9:
                    c2:88:3a:df:12:6b:5a:3d:74:fa:52:52:04:4a:41:
                    ed:05:f4:a1:a7:33:cc:cb:7f:64:96:66:66:05:1e:
                    99:7c:62:22:82:c5:8e:7b:bc:d5:ef:d3:0c:69:82:
                    aa:7d:ae:7d:da:ae:71:85:b1:58:05:f7:1e:13:ff:
                    6c:31:9d:1e:a3:56:e7:37:3b:8a:05:99:b4:3b:a9:
                    05:78:d4:26:23:80:54:11:54:4c:09:2f:01:c2:c5:
                    02:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:A5:98:B3:C2:BF:B2:7A:53:F7:A9:DE:45:C9:FA:CE:32:68:D1:9D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/e45d5201-712a-37f3-873f-9dd13dfba7ee.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.1.57.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         38:7e:53:6d:7c:11:fa:e1:69:03:77:2d:e6:fd:ca:d3:ae:0b:
         98:8a:65:35:24:01:12:79:0d:14:5c:5b:d2:d0:2e:46:ad:5c:
         66:cd:e1:c3:43:89:39:35:85:16:f5:8a:79:e6:f7:b0:e6:1e:
         82:25:77:78:46:d2:6d:13:1b:49:2c:67:72:ea:ab:36:d4:39:
         de:68:8a:fb:22:29:1b:24:26:72:60:30:10:19:56:e3:de:79:
         6f:24:09:bc:e1:33:91:b0:7e:91:a5:63:99:63:7b:08:e9:54:
         8f:d3:91:15:94:4d:2d:ed:e7:e5:d2:12:3b:41:29:9d:39:77:
         48:55:bc:e1:f0:0f:84:2c:c6:99:de:59:11:c2:6d:8d:28:63:
         d4:8c:a8:2e:a5:e4:7c:a0:b8:47:73:d2:2e:24:49:1f:5d:c4:
         ab:f7:96:dc:fd:20:ab:63:3e:bd:c4:77:68:46:20:c6:ad:cc:
         d2:c7:7f:60:71:c3:96:c5:59:98:fb:d7:7b:c7:29:f2:57:66:
         27:bb:3a:11:da:35:d5:e9:cc:b4:69:42:15:8c:cd:68:fe:75:
         19:c4:68:e7:c0:a1:74:2d:00:26:7d:e5:82:99:b1:a6:99:3b:
         14:26:de:f6:a3:fd:a5:3a:a4:fc:f5:56:f0:f1:0a:dd:9a:88:
         6c:19:7b:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 9 15:40:05 2026 by rpki-client