Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/efd0aaa3-b1cf-3ee1-b679-d233e78e8c32.roa
File:                     efd0aaa3-b1cf-3ee1-b679-d233e78e8c32.roa (raw, json)
Hash identifier:          aLWSiIEdX2IkqYOJ9fVEOLfhNLaU/OSLtZKFqfrE8gE=
Subject key identifier:   FA:D9:5C:75:F0:64:78:56:3C:B1:80:81:F7:AF:8A:E4:93:97:3C:EC
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F4328584DE9B0BDE151FA22977D3C2BF0
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/efd0aaa3-b1cf-3ee1-b679-d233e78e8c32.roa
Signing time:             Fri 22 May 2026 01:00:24 +0000
ROA not before:           Fri 22 May 2026 01:00:24 +0000
ROA not after:            Thu 20 Aug 2026 01:00:24 +0000
asID:                     213823
IP address blocks:        166.0.218.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 31 May 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:e9:b0:bd:e1:51:fa:22:97:7d:3c:2b:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: May 22 01:00:24 2026 GMT
            Not After : Aug 20 01:00:24 2026 GMT
        Subject: CN=cb7cf4d9-d891-4c57-9159-a23e91e31bc8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:b7:c3:67:bb:e1:e7:0d:d8:84:f6:3f:ec:2b:
                    5a:32:a1:25:d5:14:aa:2c:d3:cd:76:17:dd:a3:a1:
                    e0:b0:db:b8:61:57:94:a5:48:33:af:f6:eb:7a:3d:
                    ce:88:83:20:69:c1:bd:e5:2a:e8:41:30:7e:ca:db:
                    33:01:30:33:a7:55:78:6f:96:6d:78:1a:23:4d:82:
                    7d:35:8e:87:8c:10:d3:fe:5c:38:7b:d4:4e:51:af:
                    43:86:ff:45:8e:8e:a5:ad:07:c1:41:58:a6:74:87:
                    90:11:33:27:02:a1:ac:00:17:76:0b:dc:2f:b1:84:
                    b4:0d:46:1f:5d:cb:25:36:ba:37:24:c6:27:94:7e:
                    07:7b:1d:9f:33:5f:0f:b4:1a:75:1c:1f:69:71:f3:
                    19:2c:f5:6e:67:4a:63:d2:2e:2c:d5:c3:a1:c1:39:
                    57:6c:6c:cb:92:d7:74:3b:04:9b:38:15:b0:eb:58:
                    39:83:ba:93:0d:48:36:4c:1b:1d:26:e6:d5:f5:9a:
                    60:06:34:df:f5:c9:98:a1:47:42:04:dc:a1:cc:90:
                    62:71:7d:1d:6f:fc:46:51:a9:ad:3b:57:b2:0a:19:
                    e2:bd:50:c3:fc:16:bd:87:c9:75:7b:c3:15:60:b9:
                    b0:b8:c3:cf:af:b7:2a:8e:e8:cf:3e:8e:e2:8b:45:
                    b6:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:D9:5C:75:F0:64:78:56:3C:B1:80:81:F7:AF:8A:E4:93:97:3C:EC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/efd0aaa3-b1cf-3ee1-b679-d233e78e8c32.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.0.218.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         22:0d:f8:73:b7:dc:a2:7f:bc:7c:e1:72:ce:2d:07:1d:85:90:
         a7:5b:62:3a:a3:d2:62:87:e5:c4:8d:96:01:9b:4b:14:a8:fd:
         2b:d4:39:d5:ca:57:29:f1:8e:18:58:e4:67:59:46:ef:e0:fc:
         84:f1:22:eb:da:b4:98:a1:11:21:a6:2d:d6:cb:a5:be:b0:19:
         80:7b:cf:54:dc:d6:95:79:da:8d:99:28:c6:f3:21:69:d8:07:
         0a:a8:d3:d7:7c:da:47:c5:d6:39:63:88:ea:7c:d7:60:60:ab:
         fa:1a:91:90:4e:46:33:b3:59:99:82:18:1b:d2:0d:5b:90:25:
         93:24:22:b8:0f:4b:d2:f9:62:0f:81:48:02:80:80:68:82:a3:
         86:0a:9d:ef:89:1f:d7:98:de:ca:95:15:ac:77:db:20:c7:6d:
         55:f2:17:1c:74:15:cb:0a:45:58:1e:62:66:e2:b3:00:71:41:
         37:b2:bc:3e:bd:af:28:45:15:2f:86:94:a5:aa:0b:9f:16:b9:
         93:14:2f:07:09:4a:f5:01:92:d3:fa:76:a2:2e:62:34:a5:c3:
         f7:1d:ad:08:ff:2d:22:ff:fa:b7:71:8a:14:18:ce:04:2c:d7:
         98:06:49:5e:68:b4:7a:96:c2:4c:3c:bc:a3:ab:72:0c:50:3c:
         e8:b3:cf:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 28 18:30:48 2026 by rpki-client