Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/55c9af4a-e2e4-4fb9-9f53-869c87710e31/e1884f67-38be-310f-8228-f814f4862da2.roa
File:                     e1884f67-38be-310f-8228-f814f4862da2.roa (raw, json)
Hash identifier:          54F+At6xbkzAlAfbhwpt+ciSXKfMOO1JSuLqbZsk59E=
Subject key identifier:   02:8D:D7:EE:5A:1C:6C:A3:DB:45:3C:4D:F6:E4:A3:E9:79:5D:05:5B
Certificate issuer:       /CN=55c9af4a-e2e4-4fb9-9f53-869c87710e31
Certificate serial:       010D0C9F4328584F8F3DA071E000139854211580
Authority key identifier: CE:0E:A4:D7:05:EC:89:A2:4E:D5:E2:D0:EC:5A:D1:C5:E2:1D:5B:C6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/55c9af4a-e2e4-4fb9-9f53-869c87710e31.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/55c9af4a-e2e4-4fb9-9f53-869c87710e31/e1884f67-38be-310f-8228-f814f4862da2.roa
Signing time:             Tue 20 Oct 2026 01:00:12 +0000
ROA not before:           Tue 20 Oct 2026 01:00:12 +0000
ROA not after:            Mon 18 Jan 2027 02:00:12 +0000
asID:                     25198
IP address blocks:        104.166.66.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/55c9af4a-e2e4-4fb9-9f53-869c87710e31/55c9af4a-e2e4-4fb9-9f53-869c87710e31.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/55c9af4a-e2e4-4fb9-9f53-869c87710e31/55c9af4a-e2e4-4fb9-9f53-869c87710e31.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/55c9af4a-e2e4-4fb9-9f53-869c87710e31.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 22 Oct 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:8f:3d:a0:71:e0:00:13:98:54:21:15:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=55c9af4a-e2e4-4fb9-9f53-869c87710e31
        Validity
            Not Before: Oct 20 01:00:12 2026 GMT
            Not After : Jan 18 02:00:12 2027 GMT
        Subject: CN=44bacebb-fa4b-4a10-a46a-c21adfe10f51
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:34:e7:ed:20:40:9f:c7:d7:2f:7e:fe:6f:48:
                    da:9b:e3:2b:f1:7c:e5:e5:ff:c5:fb:e2:3e:4a:76:
                    bd:4f:f7:cf:d6:42:0d:08:09:c1:de:9c:7f:37:c2:
                    c3:4b:ca:eb:d0:de:47:f3:be:a0:bb:e7:28:b3:6d:
                    09:a9:89:bd:d5:a2:85:01:f5:b5:af:32:3e:7f:03:
                    0a:a7:f9:93:3b:46:82:df:38:0f:cd:0e:87:5d:31:
                    d8:de:04:c7:40:95:30:ce:16:83:ec:50:e6:3d:8c:
                    16:1f:40:b5:b1:6f:ea:92:19:c7:0d:9e:33:82:17:
                    70:6e:2f:a6:77:d2:27:43:fc:d0:dd:13:d9:ec:92:
                    61:cf:2c:25:45:51:89:05:f0:05:0e:a9:1e:61:3d:
                    9f:49:88:50:87:e7:eb:06:d5:8b:a9:72:75:2b:03:
                    8e:59:34:7a:23:94:6e:4c:e7:98:31:9f:30:26:ca:
                    19:bf:7b:84:79:37:a5:17:06:de:c9:3a:70:fa:11:
                    87:70:94:eb:1e:da:d0:4e:c9:60:9d:ae:f9:1b:67:
                    c8:40:6d:f9:fd:69:8a:45:eb:55:c7:6a:d0:29:09:
                    c5:99:a7:46:29:f6:bf:b8:53:56:1b:a5:0f:54:67:
                    6f:65:31:da:9a:ae:1a:13:3b:92:d1:8f:eb:0b:5d:
                    6b:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:8D:D7:EE:5A:1C:6C:A3:DB:45:3C:4D:F6:E4:A3:E9:79:5D:05:5B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/55c9af4a-e2e4-4fb9-9f53-869c87710e31/e1884f67-38be-310f-8228-f814f4862da2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/55c9af4a-e2e4-4fb9-9f53-869c87710e31/55c9af4a-e2e4-4fb9-9f53-869c87710e31.crl

            X509v3 Authority Key Identifier:
                keyid:CE:0E:A4:D7:05:EC:89:A2:4E:D5:E2:D0:EC:5A:D1:C5:E2:1D:5B:C6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/55c9af4a-e2e4-4fb9-9f53-869c87710e31.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.166.66.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6d:01:83:bd:bc:b8:33:af:60:73:ab:ca:34:07:c8:a9:d6:bb:
         0c:a4:18:a1:b3:c8:02:a3:f8:9b:08:86:31:f1:e3:ec:35:7d:
         c8:21:22:30:23:cd:97:d8:e4:af:05:37:ee:cb:93:78:d4:4f:
         53:16:01:ba:a6:f7:4a:e0:4c:76:8b:57:dc:5d:e4:b9:df:f7:
         73:03:be:68:0a:2d:eb:93:24:f4:b6:0f:d4:28:b6:5d:4c:ff:
         9d:d7:22:44:b0:84:f4:07:26:5e:78:d2:2c:3c:ad:61:f8:2b:
         ca:2c:1d:55:21:68:41:8f:93:68:3d:e1:c4:49:35:98:bf:e0:
         d1:56:2f:dc:5b:ae:8f:03:8c:53:20:83:31:47:6c:aa:9b:34:
         75:15:12:a1:e0:e9:6a:5b:e7:45:70:ec:5b:c8:76:3c:8a:85:
         dc:a2:fc:e5:d4:67:2d:35:69:8a:89:f7:f5:13:4c:18:26:30:
         cd:b0:15:7f:87:a3:c3:bf:66:23:f4:9b:1f:12:b1:f2:b3:81:
         ae:ad:6d:44:84:d5:b9:c8:56:99:0c:b7:83:a6:2f:7c:e3:43:
         ae:20:f1:b8:95:03:dd:ff:79:b8:d3:fb:8a:04:4c:4b:c1:86:
         ac:ab:1e:55:40:04:82:3e:42:1a:0e:2a:81:e3:02:a3:df:e5:
         39:06:41:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 20 08:15:43 2026 by rpki-client