Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/2f0ff72a-a03e-3213-85d6-e52d06b678ff.roa
File:                     2f0ff72a-a03e-3213-85d6-e52d06b678ff.roa (raw, json)
Hash identifier:          zsxIKOJ57dcs1dpk2sC5RubJmdm4/L+G2OmW7abNycE=
Subject key identifier:   55:EB:CF:A3:F2:FB:8C:8F:67:C4:74:23:5F:DE:EC:CB:E4:4B:68:3B
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F4328584EC63C7A19FEFDF9CB2B439A60
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/2f0ff72a-a03e-3213-85d6-e52d06b678ff.roa
Signing time:             Sun 09 Aug 2026 01:00:12 +0000
ROA not before:           Sun 09 Aug 2026 01:00:12 +0000
ROA not after:            Sat 07 Nov 2026 02:00:12 +0000
asID:                     11798
IP address blocks:        166.0.241.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 22 Sep 2026 08:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:c6:3c:7a:19:fe:fd:f9:cb:2b:43:9a:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Aug  9 01:00:12 2026 GMT
            Not After : Nov  7 02:00:12 2026 GMT
        Subject: CN=7f4377c0-72fa-4574-aca3-8b3d70e756d7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:7e:7b:36:0d:89:6e:00:9c:79:85:46:cd:9b:
                    ce:58:10:69:80:4d:e5:a6:21:78:36:f6:57:28:f3:
                    c4:67:f5:a1:b7:52:13:ae:3c:d4:86:06:90:b5:2f:
                    cd:55:15:e6:a9:5b:36:87:2c:08:c7:18:a8:5c:d1:
                    83:c5:aa:6e:73:81:3b:1f:c9:9f:64:87:a3:a7:d2:
                    1b:28:3c:d6:cd:2a:f6:cf:f2:a2:12:33:32:4b:7c:
                    a8:93:f1:2c:20:93:8f:26:fc:f1:26:cb:bc:12:f6:
                    ca:d3:55:7f:dc:6a:12:77:f6:3a:c5:ce:33:0a:ec:
                    85:dd:59:3d:fb:89:f2:2d:70:35:2c:ef:b7:ad:e2:
                    d1:1f:27:f0:f4:d2:76:f4:d4:4d:e3:00:05:ce:29:
                    92:fe:ba:ce:67:15:00:2f:98:ed:18:c7:54:43:b6:
                    15:1b:c6:a4:63:ab:f3:92:c8:bc:a5:7a:38:77:05:
                    19:ad:c6:ca:b2:ac:41:f9:e7:41:c8:83:b1:22:ff:
                    36:a8:f3:a0:b0:97:55:5e:50:3d:f8:12:f0:6e:ff:
                    97:40:e1:84:95:2f:ae:54:8c:20:83:d0:77:69:c7:
                    bf:8c:e7:5e:22:2c:c5:5b:a5:00:83:2f:08:79:a3:
                    63:33:55:ce:cc:e5:08:3c:03:c2:e8:0c:69:92:8a:
                    27:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:EB:CF:A3:F2:FB:8C:8F:67:C4:74:23:5F:DE:EC:CB:E4:4B:68:3B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/2f0ff72a-a03e-3213-85d6-e52d06b678ff.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.0.241.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9e:ae:47:25:6b:17:ba:aa:9d:cd:63:fc:0a:15:a6:c5:2d:14:
         fd:d3:89:5e:89:30:2a:25:c4:01:41:3f:0c:47:f7:4e:d9:d8:
         a9:ba:6e:fa:62:d3:bd:26:4f:67:ac:aa:ed:53:58:31:e2:ee:
         21:f3:96:6b:42:6a:3e:d5:90:02:eb:ff:1b:88:ec:1d:27:ee:
         72:8d:38:b3:0e:50:21:5c:d4:1b:f5:e9:8b:92:c8:ea:47:2d:
         e2:71:09:5b:44:73:a7:c9:c1:fa:90:43:cf:6f:a4:a2:6d:83:
         37:eb:45:09:10:64:0c:82:7d:2f:9a:8f:0e:de:25:08:f1:81:
         f9:3b:71:5e:9a:73:d8:4d:9c:39:08:50:88:e7:2d:44:51:42:
         fe:b4:ca:86:93:0e:8b:67:05:4b:ab:e3:6d:df:2b:3b:de:c1:
         5c:71:ed:0c:41:1f:c1:78:81:81:b2:72:72:dd:6f:d5:b8:dc:
         35:b1:03:77:58:53:54:01:5d:02:c0:5a:82:31:08:16:11:04:
         32:af:c3:98:e7:4a:2b:b0:26:b4:54:fa:5a:e6:c6:e5:c1:ed:
         8e:8e:4a:c5:19:26:fc:7f:ac:a9:cf:4d:4d:af:67:47:83:e5:
         7b:62:cb:d9:8d:24:8a:20:90:f6:b5:2a:b6:4c:36:ae:47:0a:
         dd:b9:31:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 04:31:35 2026 by rpki-client