Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/2881a4da-ae08-39ce-a86f-5d82f6749409.roa
File:                     2881a4da-ae08-39ce-a86f-5d82f6749409.roa (raw, json)
Hash identifier:          ABIXgxBcozgaWqpp2FsD0bq6f7bknZDllj1pVdU4aA8=
Subject key identifier:   FF:69:31:93:30:8E:99:AB:A6:4B:B0:E5:E7:1C:89:76:CA:3E:0D:98
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F4328584D5024E9951B50AAE931CB3280
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/2881a4da-ae08-39ce-a86f-5d82f6749409.roa
Signing time:             Sat 28 Mar 2026 01:00:31 +0000
ROA not before:           Sat 28 Mar 2026 01:00:31 +0000
ROA not after:            Fri 26 Jun 2026 01:00:31 +0000
asID:                     62240
IP address blocks:        166.1.245.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:50:24:e9:95:1b:50:aa:e9:31:cb:32:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Mar 28 01:00:31 2026 GMT
            Not After : Jun 26 01:00:31 2026 GMT
        Subject: CN=444adff0-0ac3-430b-b3f6-73611bfd0eb5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:f8:6c:7c:e8:aa:ed:32:2d:27:b8:1e:a4:84:
                    55:87:c9:19:01:fa:d8:a0:e4:10:6b:75:f7:e0:60:
                    c6:12:12:c1:53:67:87:50:bb:2c:18:86:0b:f4:37:
                    01:4d:c7:93:66:30:8f:2e:44:c1:94:0e:10:6e:35:
                    67:b2:5d:e3:5a:8d:69:ce:34:ef:73:e4:54:db:cc:
                    e8:44:51:8c:6b:9a:c9:76:8a:2f:36:75:44:5e:fb:
                    8c:21:27:b3:a2:ac:ac:0a:d1:ff:b8:61:02:f0:30:
                    56:e8:ea:d0:3a:bb:77:8a:52:a1:2d:3a:51:66:87:
                    c9:0d:95:e4:36:78:f6:e0:9b:76:54:de:f3:4e:80:
                    d8:ca:62:85:d6:cc:7a:3b:2b:de:23:a1:95:72:92:
                    2c:47:5e:2d:34:3e:2d:94:7d:fe:53:68:f8:5d:71:
                    35:70:36:44:82:f2:7b:df:65:1b:aa:a0:02:09:0a:
                    58:b7:04:b6:01:f8:27:16:3f:21:7e:40:3c:2e:78:
                    43:27:e0:c4:f8:0a:31:b6:23:34:62:5f:cd:f1:9f:
                    37:38:ff:59:1a:73:a2:bf:ac:43:f8:83:5a:ca:f4:
                    da:28:d6:be:44:bb:66:06:f4:76:8b:3e:e4:c5:07:
                    2a:aa:13:c4:35:5e:e0:b4:96:13:41:30:43:4f:ce:
                    85:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:69:31:93:30:8E:99:AB:A6:4B:B0:E5:E7:1C:89:76:CA:3E:0D:98
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/2881a4da-ae08-39ce-a86f-5d82f6749409.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.1.245.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         19:c5:37:cd:f3:d0:6d:55:50:0f:43:87:0d:3f:ba:b0:84:e9:
         c5:d2:41:4a:96:81:6b:91:23:52:2d:af:46:09:03:33:d0:a5:
         be:45:c2:fe:0e:56:e0:bc:5b:af:25:c6:58:9f:ea:0f:08:c4:
         97:76:75:2b:2f:ee:8a:72:eb:ba:4d:15:55:9e:29:58:f7:3a:
         2e:26:a3:f3:33:a8:a9:b0:83:37:4b:6b:12:91:97:be:14:bc:
         63:a0:10:20:0c:84:91:85:1c:c6:27:c5:7d:44:c9:d0:e4:39:
         9c:ca:ec:18:9e:23:20:ec:ee:f9:bf:75:66:02:75:8d:35:a4:
         bb:95:93:78:5d:01:fe:f2:85:10:4e:3b:d0:f9:4a:41:5e:92:
         3c:8d:a5:7e:62:ce:d8:fe:f2:30:b4:b9:7a:42:aa:a7:ef:1d:
         fd:71:1e:90:81:ad:2a:60:6a:17:9e:fa:82:7b:a5:e4:30:8a:
         68:e6:42:06:e8:34:28:b6:cf:b6:44:c3:1a:78:60:db:ca:c6:
         d3:fc:4e:85:66:ca:a7:46:cc:0c:35:10:2d:fa:4a:e4:1c:f7:
         ea:7e:92:37:23:4f:ef:d0:b6:86:ba:fb:f2:18:5d:f0:76:d1:
         1e:3b:33:50:39:44:7e:c4:e8:2c:d6:bd:c4:f4:ee:66:ad:95:
         c6:e1:88:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 12:10:10 2026 by rpki-client