Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/5977f03d-2dc3-3a03-aef5-db61e66db908.roa
File:                     5977f03d-2dc3-3a03-aef5-db61e66db908.roa (raw, json)
Hash identifier:          SAVXA8ry2UhIwi55rjmPsQ1/bgwbZnI5uc0fl9EJMEk=
Subject key identifier:   5C:0E:6C:B6:FB:FB:FD:B8:45:B2:45:B0:E9:15:17:89:DC:2F:9D:1C
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F4328584CDDCCA0EB0062A5ACCEAA9B80
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/5977f03d-2dc3-3a03-aef5-db61e66db908.roa
Signing time:             Sun 15 Feb 2026 02:00:32 +0000
ROA not before:           Sun 15 Feb 2026 02:00:32 +0000
ROA not after:            Sat 16 May 2026 01:00:32 +0000
asID:                     274031
IP address blocks:        166.1.24.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:dd:cc:a0:eb:00:62:a5:ac:ce:aa:9b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Feb 15 02:00:32 2026 GMT
            Not After : May 16 01:00:32 2026 GMT
        Subject: CN=bf5ce1a8-4ba3-490f-b14e-e48197555d51
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:fb:64:d8:da:06:dd:14:74:86:b8:be:45:43:
                    ab:3f:8d:c6:b0:14:c7:94:a0:4e:14:e5:a0:b5:d4:
                    16:0f:c9:eb:0a:c0:71:03:c1:cb:a7:64:e2:f8:f5:
                    22:46:e0:83:ae:cd:8e:e1:98:33:91:a9:e5:bb:10:
                    a6:ea:da:eb:ce:18:5b:98:a5:da:3b:7e:d6:34:51:
                    44:d0:33:53:09:c3:32:f6:da:ea:1d:9a:1d:c1:17:
                    fa:ed:78:7c:8a:c9:7e:6f:f3:79:01:fa:c4:b8:db:
                    4e:42:68:a6:2d:4b:27:d6:2a:86:62:f9:54:2e:3a:
                    f3:eb:4c:fb:9c:ee:b6:03:90:07:73:20:15:67:41:
                    92:a2:f2:87:c1:94:5b:01:b6:f2:a4:df:29:d0:3c:
                    ef:f1:38:ef:a0:a6:44:67:33:b0:3c:18:07:5d:62:
                    d1:65:5f:92:32:50:d6:6c:78:0e:d0:15:65:cb:9b:
                    58:09:1c:82:d1:da:d5:31:59:0c:a1:c7:36:05:70:
                    41:a5:3f:bf:5b:d1:30:93:d6:2a:b5:61:d3:75:67:
                    c6:18:31:00:4e:7c:b7:e4:78:4e:5f:4c:1f:eb:e5:
                    d0:b7:0e:76:0c:8c:51:5e:ea:ec:0f:92:3b:42:2b:
                    36:d2:88:92:59:17:b8:e5:3e:46:24:b7:58:1c:2b:
                    d0:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:0E:6C:B6:FB:FB:FD:B8:45:B2:45:B0:E9:15:17:89:DC:2F:9D:1C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/5977f03d-2dc3-3a03-aef5-db61e66db908.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.1.24.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         43:e8:12:f3:8c:c6:dd:ee:47:e4:5b:13:8e:2b:0a:34:1a:c0:
         ad:6b:9e:d9:a8:63:b2:f4:65:38:8d:93:7d:88:3e:a9:af:8a:
         6c:c1:98:7d:69:ee:0f:fe:db:28:a3:0e:ec:d6:22:d8:b8:99:
         88:65:a6:a4:d7:a7:ed:94:97:19:ed:07:5b:77:18:2f:f9:61:
         22:aa:a2:35:fb:0f:ab:d3:54:aa:27:85:99:05:aa:39:5e:a3:
         ed:5f:5f:0a:58:8a:3a:85:12:60:6d:0b:bb:5a:36:e5:da:ab:
         51:b7:2d:92:d7:31:f8:ae:3f:c5:8b:6a:cd:bb:6a:ec:ca:31:
         96:47:35:6d:0f:8d:aa:b0:5f:3b:8b:e2:58:1b:a1:25:af:00:
         b6:48:44:91:06:ba:c0:82:86:79:b0:ac:6e:71:c2:84:bc:09:
         71:80:46:88:f8:f3:11:b0:7e:ac:db:8e:f3:8c:f8:d6:8d:03:
         9e:1a:21:bf:c4:d6:93:27:35:3c:5d:e3:36:86:fc:23:15:c0:
         dc:88:6b:91:09:00:2e:a3:07:b9:17:73:44:9c:d4:fa:6e:78:
         d0:00:c1:ad:c4:be:b8:a3:2a:6d:35:72:60:c6:87:52:60:dd:
         ed:8e:b8:7f:3e:60:67:ff:3b:91:e5:40:06:a3:b0:74:25:73:
         05:c1:c5:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:37:51 2026 by rpki-client