Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/142b15f6-e864-3768-a0f6-433e827b4183.roa
File:                     142b15f6-e864-3768-a0f6-433e827b4183.roa (raw, json)
Hash identifier:          3q507bmSCKPfwxaPNW0sUfH7HqqxXNSJ8wtRIcqB4YM=
Subject key identifier:   84:22:11:5B:D0:C8:39:72:3D:41:55:9C:BC:0C:E0:03:0F:64:09:2C
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F4328584D5024F7B08DEAA8505600B640
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/142b15f6-e864-3768-a0f6-433e827b4183.roa
Signing time:             Sat 28 Mar 2026 01:00:31 +0000
ROA not before:           Sat 28 Mar 2026 01:00:31 +0000
ROA not after:            Fri 26 Jun 2026 01:00:31 +0000
asID:                     62240
IP address blocks:        166.1.142.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:50:24:f7:b0:8d:ea:a8:50:56:00:b6:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Mar 28 01:00:31 2026 GMT
            Not After : Jun 26 01:00:31 2026 GMT
        Subject: CN=06725ec3-1845-4c32-92f8-a22dd8cf5418
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:76:a8:d6:37:f8:bf:bf:07:f7:f6:93:7a:63:
                    65:44:49:da:ee:b5:06:e7:4c:3f:e4:63:6d:0c:4c:
                    21:64:ce:c0:d7:2d:5d:72:d1:89:ee:18:89:dc:30:
                    ab:af:c3:45:13:5a:8f:99:ea:ae:b4:f3:4d:0b:7c:
                    f9:50:0b:5a:c4:b7:0f:84:aa:a0:93:21:18:ce:58:
                    c8:90:90:41:8f:99:b9:e6:cc:fe:8d:14:54:13:6b:
                    84:e0:1e:29:b5:64:6d:f5:10:30:24:1a:f1:25:1f:
                    d8:9c:ea:de:9b:29:c2:19:d1:3b:c0:4b:75:3c:79:
                    f5:7f:ae:8c:ce:fe:05:1c:04:79:51:54:91:bb:d3:
                    0e:da:8b:85:fd:25:2a:09:26:c7:58:5d:fe:79:da:
                    0a:56:38:64:93:af:67:2d:0c:81:ff:e1:bc:0e:91:
                    90:30:a9:05:bc:13:43:e2:74:b5:34:0d:c2:68:ba:
                    5b:82:99:1d:c2:e7:84:21:2f:00:96:b6:5e:22:2e:
                    2e:27:87:75:b1:44:a7:10:f4:29:09:1d:6c:f9:ae:
                    fb:3a:20:1f:6f:0b:9e:8c:81:92:9a:0c:6e:66:44:
                    63:60:44:3e:1f:b2:ca:28:04:76:bb:9e:f1:30:25:
                    e3:32:f2:47:f2:6f:a7:d0:f7:81:41:69:7d:30:72:
                    7c:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:22:11:5B:D0:C8:39:72:3D:41:55:9C:BC:0C:E0:03:0F:64:09:2C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/142b15f6-e864-3768-a0f6-433e827b4183.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.1.142.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         66:03:ef:d2:5a:b4:b6:d6:f9:53:47:fa:2a:45:bf:b7:e9:03:
         85:df:2a:a3:ba:c2:65:f5:69:e9:eb:f2:f3:e4:69:70:cc:56:
         9f:3c:29:f0:03:ac:f2:09:73:2f:20:fd:de:ba:34:76:9d:77:
         3d:3f:90:43:fa:07:58:bb:e5:e9:40:5d:87:4b:15:6b:1c:e5:
         f3:d5:dc:00:f1:ad:fc:fe:0a:18:b6:09:fd:89:fa:c3:14:47:
         8f:2d:d0:60:57:fd:20:c3:56:48:c8:f2:a9:b1:7e:01:87:77:
         0c:b3:57:02:48:20:6e:6f:a8:17:51:2f:7a:15:1b:7c:c6:be:
         f8:b7:97:75:fd:a0:d0:a0:6d:06:5a:4d:c7:f2:bc:c6:3c:31:
         1b:8b:e4:41:42:e3:68:38:9e:49:a1:6b:e3:e5:2e:04:05:16:
         b9:45:4c:ae:cf:d5:0c:0f:0c:6e:bf:40:56:d2:12:bd:43:12:
         f5:cb:30:d6:f9:6c:26:0f:f1:8d:64:cb:40:57:fe:ec:dd:ee:
         47:1c:99:90:ff:75:7e:03:6b:c7:85:73:c9:aa:a5:30:95:03:
         aa:78:ef:2a:bb:f7:54:91:92:4a:b4:5e:5b:de:04:3f:03:ea:
         b6:9f:8e:2d:95:cc:01:17:20:96:77:d0:e2:f4:cd:71:ce:5b:
         69:18:ed:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 16:59:22 2026 by rpki-client