Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/e69ca51c-eff5-358c-ae27-13074521e06a.roa
File:                     e69ca51c-eff5-358c-ae27-13074521e06a.roa (raw, json)
Hash identifier:          DV544P7P94vZ6XS2UXU73JrmBjCku/wQvL7t4qrafS4=
Subject key identifier:   FA:50:EF:60:F0:08:7B:05:FD:9A:4F:69:4B:91:C8:91:26:6E:9B:BA
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F4328584E6ECED6F4D97A146C909A4200
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/e69ca51c-eff5-358c-ae27-13074521e06a.roa
Signing time:             Wed 08 Jul 2026 17:24:11 +0000
ROA not before:           Wed 08 Jul 2026 17:24:11 +0000
ROA not after:            Tue 06 Oct 2026 17:24:11 +0000
asID:                     401152
IP address blocks:        166.1.82.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 10 Jul 2026 08:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:6e:ce:d6:f4:d9:7a:14:6c:90:9a:42:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Jul  8 17:24:11 2026 GMT
            Not After : Oct  6 17:24:11 2026 GMT
        Subject: CN=afcac35e-1b90-4a56-b985-a3a7427aa78d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:e7:d4:16:8d:57:10:4a:a4:f3:64:16:f2:db:
                    04:6b:c2:e0:d4:2f:f2:e9:aa:d6:69:f7:05:7c:a6:
                    a7:e6:96:15:c0:d5:d8:22:7e:27:f1:d0:14:d8:2c:
                    57:8d:a9:36:b4:5e:95:bd:7d:68:d3:ee:39:77:8c:
                    73:ae:09:fd:d6:b9:87:35:35:9b:43:52:bc:5c:82:
                    82:d4:4f:87:ad:65:b6:e3:2b:c2:1a:de:60:ea:ed:
                    f3:23:f1:c3:2a:d1:bd:f3:56:6e:f1:07:62:6c:1f:
                    21:94:9c:a0:ed:bc:25:d7:f7:53:aa:90:c6:e3:21:
                    00:a4:a8:c2:27:22:be:bf:d0:71:b1:65:f8:a5:ba:
                    ac:c8:a4:14:22:f6:7f:9f:34:27:4f:85:20:55:9f:
                    e2:fc:10:c6:49:0c:bb:0b:fc:bc:8c:26:2d:28:ff:
                    3c:0f:fa:e3:a2:e6:e0:46:f0:b7:6a:db:18:f8:94:
                    d6:7f:8a:26:c8:66:7f:91:79:8b:1f:97:38:e3:77:
                    5f:e5:6b:e8:f8:0b:74:ce:a6:50:13:f0:e4:48:1a:
                    d9:eb:0b:85:e0:59:29:a1:0c:19:f3:ab:af:39:73:
                    ea:ee:ae:49:7b:9a:bc:5f:1e:5d:a5:37:bd:a8:f9:
                    49:30:cf:21:a4:4f:9c:73:7a:cc:23:49:ba:42:49:
                    53:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:50:EF:60:F0:08:7B:05:FD:9A:4F:69:4B:91:C8:91:26:6E:9B:BA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/e69ca51c-eff5-358c-ae27-13074521e06a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.1.82.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7d:91:71:c8:f8:fd:f0:f6:df:f2:d0:8f:f7:ee:52:d0:20:67:
         51:0f:e9:5c:96:af:15:6d:3e:bc:af:d2:42:ea:08:86:f0:77:
         b6:3a:66:dc:e8:cb:11:c6:e2:17:b1:1f:d0:94:af:70:b2:76:
         df:87:29:7b:47:2c:df:8b:e4:f6:e2:90:9e:d9:38:66:d3:2d:
         42:ba:86:1a:e7:3e:ac:9c:04:72:a7:2f:db:d8:ea:f4:89:d4:
         75:3c:30:5d:ee:bb:ac:71:84:d9:8c:31:4c:cf:08:3f:e5:33:
         03:17:80:34:56:39:96:9a:83:33:d7:a6:5c:82:2c:9a:ff:28:
         db:41:16:12:b3:5f:89:49:31:e0:ab:cb:8f:b6:a5:55:bb:af:
         b1:65:85:ef:6c:26:de:32:51:88:52:af:06:ad:2b:21:f3:9c:
         bb:d5:30:9a:9a:7b:30:6e:c6:49:f4:75:72:a3:f9:c8:6d:50:
         c7:cf:d0:05:a6:8c:1c:71:35:03:2a:da:96:c1:5b:71:dc:77:
         57:38:a7:1a:04:5b:f4:e0:84:b0:5f:1d:88:bc:9d:e4:18:dc:
         fb:d9:20:df:e8:5d:12:b7:74:12:d4:8b:8d:dd:20:ff:96:b9:
         a8:34:f5:8a:dd:0e:a4:ea:10:d5:e0:9f:e9:ad:9a:78:99:bf:
         48:4d:f9:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 9 08:58:37 2026 by rpki-client