Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/167a78a6-e314-33c6-a33a-9b45eaf8c937.roa
File:                     167a78a6-e314-33c6-a33a-9b45eaf8c937.roa (raw, json)
Hash identifier:          o+eF3FTTKbns6PCOlKe+muuEX7yz+GB3qKhcgMAg8U8=
Subject key identifier:   02:92:2A:04:57:01:8E:FF:F6:31:87:01:43:E8:D3:C3:27:19:3B:48
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F4328584D5024EE80EC620C9A91068100
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/167a78a6-e314-33c6-a33a-9b45eaf8c937.roa
Signing time:             Sat 28 Mar 2026 01:00:31 +0000
ROA not before:           Sat 28 Mar 2026 01:00:31 +0000
ROA not after:            Fri 26 Jun 2026 01:00:31 +0000
asID:                     62240
IP address blocks:        166.1.207.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:50:24:ee:80:ec:62:0c:9a:91:06:81:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Mar 28 01:00:31 2026 GMT
            Not After : Jun 26 01:00:31 2026 GMT
        Subject: CN=8cf1ad14-8b24-4168-9474-15abd8f51b62
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:6c:dc:3d:73:f0:e4:b6:f6:87:90:d5:4c:8f:
                    e3:15:a8:01:3c:d3:35:34:7a:5d:a7:05:56:16:73:
                    8c:85:26:d8:fa:4f:4a:36:9c:bb:ef:c4:2b:d7:0a:
                    a5:c1:e4:78:03:4f:54:5f:ac:01:4c:4c:26:89:28:
                    b6:a5:06:4d:d9:d8:98:bb:d3:c7:c5:c7:0f:46:e4:
                    07:ad:bc:cd:82:da:1f:b1:21:fa:6e:9b:0c:69:fa:
                    c5:53:bd:cb:bf:bf:2e:c6:72:f6:19:4a:ac:cb:51:
                    ba:ed:a1:e8:8f:30:10:a6:f7:06:06:ef:9f:f4:d3:
                    27:6f:94:fa:0a:f4:65:40:4c:26:d7:a6:6c:16:e0:
                    0b:eb:09:a4:48:51:28:1c:a5:8b:a8:5e:1c:12:97:
                    49:b3:c7:33:b6:5b:57:9d:f8:0f:fa:50:8d:77:7f:
                    c0:fa:ed:03:a7:6e:9b:64:65:fe:20:4d:74:be:c2:
                    c1:28:42:19:13:68:97:5e:cd:e6:f3:87:30:72:4c:
                    0d:31:72:75:2a:5c:63:89:c8:a8:e0:5c:a9:6d:72:
                    87:1f:e0:88:3b:d8:05:d8:e9:cd:33:92:b8:46:8d:
                    52:9d:a4:08:a5:5f:8b:10:ab:84:94:54:bb:15:47:
                    e8:41:17:b8:c9:e4:d3:4b:46:84:4f:08:3f:23:3e:
                    6e:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:92:2A:04:57:01:8E:FF:F6:31:87:01:43:E8:D3:C3:27:19:3B:48
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/167a78a6-e314-33c6-a33a-9b45eaf8c937.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.1.207.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6f:19:65:20:a0:0c:c2:1d:44:1e:fa:da:19:6f:2e:92:c2:0c:
         33:4c:e0:f6:a5:db:33:56:01:86:5f:a0:34:99:7a:04:71:37:
         80:ea:6b:60:90:e5:80:6b:d7:d2:ab:55:d9:db:57:8a:5b:d0:
         01:36:ba:a1:89:c2:9a:47:89:6c:4d:50:98:19:2c:8a:6c:94:
         70:d7:09:ab:9e:b7:90:e4:42:23:d7:ec:54:9c:d6:ca:e3:21:
         43:dd:dd:d2:77:97:b1:88:3b:77:a0:b0:53:cf:28:29:75:46:
         b7:a8:0f:b1:7d:9b:dc:9d:11:33:88:68:ac:de:a6:63:c8:e6:
         11:98:c2:2c:f3:37:fa:4e:34:13:f1:c4:75:a9:7b:78:aa:73:
         5c:f3:b1:03:1e:fd:d0:99:14:6e:0c:ea:0e:4a:91:f6:5c:8b:
         f8:6a:2c:03:9a:8d:ab:b9:95:d3:0a:97:2e:a0:c9:33:e9:8d:
         00:3f:5b:92:46:74:2f:b4:8b:3c:8f:4c:41:d6:9e:8a:9f:3b:
         75:69:59:c4:c1:ae:de:ed:38:f6:33:36:4a:85:27:03:14:1f:
         86:20:47:66:ad:ec:22:ce:58:ad:8c:78:34:01:39:e5:0c:55:
         6f:e4:96:8a:2d:bc:61:8e:df:f3:33:bd:08:56:54:d2:66:d4:
         c9:f7:1c:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:34:16 2026 by rpki-client