Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/f96e326e-d21e-3d65-9a54-8f133cae9f34.roa
File:                     f96e326e-d21e-3d65-9a54-8f133cae9f34.roa (raw, json)
Hash identifier:          UlStzYP0vVvmT4Nmg04gdARnA2elaEl6/+aEZyXdxBo=
Subject key identifier:   79:79:2D:60:1C:D0:6E:F1:4C:75:F3:86:87:03:20:90:26:46:69:E4
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F4328584F58CD5B5D874E661287FE5340
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/f96e326e-d21e-3d65-9a54-8f133cae9f34.roa
Signing time:             Wed 30 Sep 2026 13:00:13 +0000
ROA not before:           Wed 30 Sep 2026 13:00:13 +0000
ROA not after:            Tue 29 Dec 2026 14:00:13 +0000
asID:                     58061
IP address blocks:        166.1.95.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 05 Nov 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:58:cd:5b:5d:87:4e:66:12:87:fe:53:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Sep 30 13:00:13 2026 GMT
            Not After : Dec 29 14:00:13 2026 GMT
        Subject: CN=834c9a90-5eb4-4810-8ce7-692061eba7b2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:a4:c8:99:f1:22:c5:a2:0c:55:ba:b5:38:11:
                    57:bb:55:05:70:11:98:ea:42:da:04:85:93:f6:66:
                    16:12:1c:1c:98:b0:00:1c:06:da:46:4c:e5:6d:59:
                    e1:b8:08:b6:7b:28:79:af:c0:82:8e:3d:fb:1a:e7:
                    84:cf:b8:64:cf:af:1f:77:f7:ec:db:d0:94:b6:ab:
                    b1:9a:f4:ec:14:13:cf:39:e6:d7:6c:78:70:f9:83:
                    0c:8c:7d:f1:28:5d:4f:d8:12:ca:1d:7e:0f:91:87:
                    7c:2c:cf:e4:39:fa:f5:32:85:19:10:21:1a:b4:db:
                    a5:40:86:51:40:bf:3a:02:de:82:04:b6:fc:82:b5:
                    f7:1c:4d:ec:76:9b:1e:53:f4:31:6c:44:f1:6f:c5:
                    22:26:f5:7d:d9:ba:7e:42:fe:df:12:df:3a:54:a1:
                    dd:92:2c:96:eb:bd:ec:e3:6e:84:53:06:69:39:43:
                    01:bf:92:09:f6:08:36:2a:68:21:82:c5:5c:2b:91:
                    0c:ae:cf:a4:4f:68:f0:1d:87:a2:59:8d:5e:14:21:
                    bd:56:c4:22:67:2c:23:46:da:c6:fd:77:67:4d:10:
                    26:f3:41:c0:d3:fa:50:42:2e:82:24:c5:d3:f8:2c:
                    0d:87:ed:97:ec:47:01:c5:8d:09:9d:8b:b2:7c:38:
                    9d:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:79:2D:60:1C:D0:6E:F1:4C:75:F3:86:87:03:20:90:26:46:69:E4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/f96e326e-d21e-3d65-9a54-8f133cae9f34.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.1.95.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7a:58:17:08:17:0e:8d:40:e9:c1:d2:9e:9e:9b:ca:34:d0:1c:
         a9:c7:3d:86:60:35:bf:a4:22:63:04:5b:2f:e3:f6:e4:b8:99:
         ad:94:bc:2a:90:65:4a:ce:0a:74:33:e2:33:72:ea:06:8a:01:
         aa:e9:9d:45:d1:b3:88:f6:b3:ec:87:dc:f9:3f:ce:29:f8:f3:
         d0:e2:b5:ae:f9:37:99:7a:bc:00:00:c4:45:07:86:9f:9c:22:
         c6:55:52:2e:e0:6c:e5:88:01:da:ed:ee:e0:fe:78:7d:55:c0:
         96:c5:6f:31:b1:81:c7:45:d5:57:f9:76:d0:67:0f:ee:96:88:
         ae:5f:45:92:94:7f:33:ab:8b:12:fd:03:21:72:f0:b2:0b:96:
         8f:f9:63:3f:12:70:5c:22:9f:a5:d4:df:39:5c:64:d9:a0:2d:
         da:51:fb:f4:8d:7d:f8:ae:da:1e:4f:f7:e7:33:c9:79:ff:f1:
         4b:3c:ea:16:63:ae:63:f6:2c:db:19:e2:95:fb:3c:dc:72:ff:
         07:f4:0b:21:aa:90:61:d3:22:76:84:d3:53:ea:4c:4a:69:f1:
         33:db:e8:ad:c7:14:eb:65:76:a1:7e:87:b2:13:8c:0b:c2:05:
         b4:50:42:6a:08:a8:7c:03:a3:1e:eb:04:4d:83:eb:05:54:71:
         50:09:0b:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 2 19:10:56 2026 by rpki-client