Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/38919407-66ab-3a64-a62a-7f60a8d790ff.roa
File:                     38919407-66ab-3a64-a62a-7f60a8d790ff.roa (raw, json)
Hash identifier:          kisJSGywIaZeCgMlW9v9NBCoNXAzK5ZqU26xy/8EcQ0=
Subject key identifier:   8A:78:30:C9:FD:FB:91:1E:69:EC:9C:53:CA:9D:B8:2E:40:A6:80:55
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F4328584E15E4AABB671C205695F47700
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/38919407-66ab-3a64-a62a-7f60a8d790ff.roa
Signing time:             Sat 06 Jun 2026 21:00:13 +0000
ROA not before:           Sat 06 Jun 2026 21:00:13 +0000
ROA not after:            Fri 04 Sep 2026 21:00:13 +0000
asID:                     401152
IP address blocks:        166.0.254.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 16 Jun 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:15:e4:aa:bb:67:1c:20:56:95:f4:77:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Jun  6 21:00:13 2026 GMT
            Not After : Sep  4 21:00:13 2026 GMT
        Subject: CN=076304c8-1fc1-4b08-a3ca-951833054367
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:da:c3:75:5d:67:fe:93:e1:c5:03:26:cd:e6:
                    df:85:18:e7:3f:2c:af:ea:98:e8:37:00:d9:a3:0f:
                    ce:49:fd:49:a0:4e:e5:38:f3:87:9c:25:8d:b0:82:
                    1e:5e:07:72:4e:1c:bd:96:72:c3:6b:85:ab:ea:a3:
                    86:a0:d8:59:3d:3b:e0:4c:db:f7:09:4c:e6:d0:58:
                    3d:a1:1b:b7:a6:da:14:94:de:88:9b:48:28:12:b6:
                    6a:8a:e7:6b:c6:98:48:e6:33:fc:c0:dc:1a:09:36:
                    19:ea:2a:07:02:57:22:a5:b8:85:f2:1a:db:43:a3:
                    fb:c3:39:94:9d:56:43:f0:de:97:2e:f6:24:25:94:
                    41:9b:b9:3c:c3:04:97:f2:ac:4f:a8:87:32:58:db:
                    f9:e0:4c:26:07:9b:6b:5e:27:26:35:9d:97:c6:d6:
                    db:d8:2e:44:f4:c9:6d:fd:11:ec:0f:8c:07:20:19:
                    fd:24:f9:75:54:e8:5c:41:b2:9f:c6:7a:44:a8:98:
                    ad:dd:4c:d0:07:ed:04:58:4d:cf:20:1d:f6:97:52:
                    a4:ff:9d:f6:0d:3f:34:16:af:1b:55:23:34:96:c2:
                    63:22:22:f2:ad:46:2d:b8:37:b9:9d:a1:f0:c6:14:
                    69:7a:99:1e:23:df:5c:da:79:8b:90:be:f3:d1:78:
                    2a:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:78:30:C9:FD:FB:91:1E:69:EC:9C:53:CA:9D:B8:2E:40:A6:80:55
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/38919407-66ab-3a64-a62a-7f60a8d790ff.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.0.254.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         67:bf:e0:e9:5a:b9:e8:ea:57:e4:d6:ad:db:1b:db:22:f3:a6:
         6f:e9:66:dc:75:6f:1f:ba:2a:7e:7d:17:1b:8f:ce:1c:97:af:
         5a:1d:ab:48:85:13:ea:6e:15:00:c6:b7:a2:3d:6f:6e:26:73:
         ea:49:67:61:9f:f8:64:cf:a7:aa:2d:ff:ef:ab:06:d6:91:5d:
         f1:e4:ce:ca:a2:1a:99:4c:fb:98:00:53:30:13:dc:41:76:3d:
         85:1b:f8:6b:9d:85:32:eb:e7:e8:21:04:ac:db:76:b9:5b:ad:
         f3:ba:9d:61:f0:83:5a:8f:23:56:62:de:a3:b9:cd:4c:73:8d:
         d1:1b:ec:4c:32:7b:0e:ed:c6:c9:5c:d8:aa:6f:69:52:3b:0a:
         18:b0:af:b8:2b:c6:21:16:5d:d9:d1:06:32:33:4f:6d:05:f5:
         83:e8:76:b0:6b:9f:6b:0d:59:67:5c:69:9e:7b:b3:22:60:1b:
         57:dd:99:7b:9a:b7:8e:62:61:1c:be:ea:cf:f6:94:ce:3d:68:
         86:79:3d:42:87:94:f3:6b:11:a6:6a:76:ce:92:30:30:90:da:
         cf:57:2b:8a:78:2a:64:17:ee:a7:5f:4d:04:11:f2:17:23:45:
         8f:3a:a6:24:a8:90:84:26:36:a8:d6:d7:36:9b:42:33:d8:ef:
         6d:b4:bf:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 20:52:51 2026 by rpki-client