Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/ef02d590-6a62-3f27-9ed0-351b80fb6475.roa
File:                     ef02d590-6a62-3f27-9ed0-351b80fb6475.roa (raw, json)
Hash identifier:          jJcs9/rQjcY6+0n7S8+kUIBxtzxgTJi9aYsIZGdQ3yI=
Subject key identifier:   8D:D7:31:4D:E3:79:8F:F7:CC:FD:B9:11:5A:7B:96:32:A9:82:97:D4
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F4328584D366F5C871B35D95590ABCAE8
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/ef02d590-6a62-3f27-9ed0-351b80fb6475.roa
Signing time:             Wed 18 Mar 2026 19:59:36 +0000
ROA not before:           Wed 18 Mar 2026 19:59:36 +0000
ROA not after:            Tue 16 Jun 2026 19:59:36 +0000
asID:                     401152
IP address blocks:        166.0.187.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 20 Mar 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:36:6f:5c:87:1b:35:d9:55:90:ab:ca:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Mar 18 19:59:36 2026 GMT
            Not After : Jun 16 19:59:36 2026 GMT
        Subject: CN=24eede9c-6c9e-4b4a-ae09-d8c93cf1d66c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:f2:99:bf:ca:87:5e:58:06:84:29:b3:b5:76:
                    57:ff:a6:02:20:1e:c4:b7:b0:b7:70:dd:bf:6f:03:
                    9e:75:9a:e7:39:ff:27:b3:53:e0:0a:be:f5:33:f0:
                    8a:11:fc:33:7c:72:77:45:e3:8f:44:52:a7:68:60:
                    f7:92:a4:12:4f:e4:5e:4a:25:4f:3a:0d:c6:a5:ac:
                    3d:bd:5d:2a:df:e4:91:81:27:51:6f:48:d5:ec:cc:
                    01:b9:1a:7f:51:0f:9f:0a:3e:92:b5:a8:41:48:db:
                    74:48:5d:a4:74:e2:0a:37:5c:30:76:1c:d1:b8:66:
                    3b:fa:34:da:4d:c4:c2:fc:3e:2f:1e:77:43:79:9a:
                    0e:e9:d3:63:c0:95:8e:c1:aa:70:06:44:26:81:be:
                    17:27:51:5b:e4:86:f4:60:a1:d4:fb:0d:03:a8:5a:
                    3a:e0:e2:ff:06:3a:96:d7:94:e7:97:55:f7:24:05:
                    fc:1d:a2:6f:ca:2b:2e:1d:ba:68:15:c5:07:da:b2:
                    bf:7d:41:a0:04:1d:26:4d:ae:33:bc:50:d8:e7:00:
                    74:4f:9e:f1:60:a9:de:73:6d:36:14:55:b2:6e:d3:
                    9e:75:25:a8:82:1a:a2:b5:13:25:3f:06:3d:23:d2:
                    47:18:8c:6f:80:79:c3:8b:b5:82:68:17:e6:78:90:
                    81:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:D7:31:4D:E3:79:8F:F7:CC:FD:B9:11:5A:7B:96:32:A9:82:97:D4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/ef02d590-6a62-3f27-9ed0-351b80fb6475.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.0.187.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         69:05:05:41:38:ad:8e:7e:72:86:3e:b3:4a:2b:9a:94:b7:29:
         e9:7b:97:3d:7a:29:96:4d:47:81:b5:3b:86:ef:db:c1:e0:fe:
         d2:ef:2b:6d:78:e8:31:78:a9:5b:9a:a9:75:81:18:01:9f:7a:
         47:2d:1e:64:e8:b5:46:3f:bc:89:b1:7b:53:54:f1:36:0c:d3:
         fe:56:ff:06:2d:d9:7b:85:07:51:68:50:cd:b5:6b:76:79:3c:
         fd:d2:9f:c3:98:2f:cd:62:42:5e:2e:5f:1f:aa:a1:dd:fe:36:
         94:0b:b1:4a:a7:62:3d:0c:e8:6e:57:9c:d0:d1:bc:ac:74:fc:
         0c:66:39:bd:a4:ef:4a:a2:d7:cd:d8:c5:bb:34:57:2c:c8:d7:
         ec:94:59:f3:8d:14:56:56:28:ee:76:23:55:18:5a:2b:a4:09:
         fd:d0:97:c7:85:08:93:d8:10:2b:bd:14:2d:e3:9c:2e:c8:65:
         ad:4a:c1:a3:ac:4d:c6:9a:41:65:7b:70:d1:e0:3e:b8:e2:8a:
         4c:9b:b8:c4:16:ac:f2:bf:09:76:fe:d7:c6:43:a5:c1:1a:e8:
         df:06:97:c8:b9:ed:65:72:b5:cc:5f:db:77:13:fe:88:45:65:
         64:33:cc:15:40:37:9e:8d:2a:c1:94:4d:9e:83:a2:6c:7a:14:
         64:f0:d0:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 19 14:50:41 2026 by rpki-client