Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/7b1cc074-b2a6-3009-89ff-89d17d71ef04.roa
File:                     7b1cc074-b2a6-3009-89ff-89d17d71ef04.roa (raw, json)
Hash identifier:          K9ITgNzQQT2WOGde21+BzU09NgRVRN9sBRKj1GLJ5lM=
Subject key identifier:   FE:30:3B:D8:29:EE:05:35:33:E7:EE:B2:D4:8A:06:FA:CC:B5:39:6C
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F4328584F331D2604CB908996CF2DD9C0
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/7b1cc074-b2a6-3009-89ff-89d17d71ef04.roa
Signing time:             Thu 17 Sep 2026 01:00:11 +0000
ROA not before:           Thu 17 Sep 2026 01:00:11 +0000
ROA not after:            Wed 16 Dec 2026 02:00:11 +0000
asID:                     8881
IP address blocks:        166.0.48.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 22 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:33:1d:26:04:cb:90:89:96:cf:2d:d9:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Sep 17 01:00:11 2026 GMT
            Not After : Dec 16 02:00:11 2026 GMT
        Subject: CN=99336552-6586-4562-a9f7-dcc9e10aeba1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:29:dd:76:34:85:9c:cc:5c:dc:40:c2:dc:2e:
                    64:56:85:36:bc:aa:92:06:8a:f1:ea:84:5c:c7:6d:
                    a3:a9:44:38:c5:80:27:95:5b:89:f8:bc:6c:70:1f:
                    d3:43:d7:7a:f3:13:39:72:d8:05:71:97:aa:f2:ca:
                    ec:d1:f5:2c:aa:24:e4:76:45:25:6e:a1:60:50:f3:
                    ad:f1:9d:79:f1:58:59:9e:3f:7d:5e:52:a5:a2:14:
                    d2:bb:fd:29:f9:a1:e4:58:ea:77:eb:95:94:85:ad:
                    ee:8a:a3:8c:6b:4f:92:b3:1b:e9:17:d9:f3:cf:e1:
                    38:20:c3:90:1a:e0:62:c9:a3:33:39:fe:1b:b5:94:
                    e0:66:7e:18:49:b4:8a:3a:30:25:b5:ee:bd:12:d0:
                    fe:b5:b4:81:47:e1:e4:23:7b:04:63:6a:a2:f9:54:
                    5d:d1:a9:18:59:76:51:13:bc:76:fb:25:5e:9a:7b:
                    7a:a7:14:8a:70:1a:d6:d8:3f:79:f9:32:43:7f:4f:
                    26:64:a1:f5:44:02:20:f3:f4:9b:06:de:e9:28:25:
                    18:65:94:a3:85:1b:e3:38:f2:00:71:22:e4:65:9b:
                    31:fd:1b:49:92:d3:47:aa:2c:d2:e8:d6:a7:9d:a3:
                    07:7b:b4:86:c0:61:c1:21:a2:a5:25:b7:fb:4a:d1:
                    9a:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:30:3B:D8:29:EE:05:35:33:E7:EE:B2:D4:8A:06:FA:CC:B5:39:6C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/7b1cc074-b2a6-3009-89ff-89d17d71ef04.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.0.48.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         69:04:17:7b:5e:92:3b:e4:af:e9:e1:31:99:da:ef:5d:f7:80:
         bf:d4:46:61:0e:c1:45:cc:5b:54:3f:0d:c6:a8:29:ae:9c:ca:
         9b:d2:9f:08:63:12:c0:8c:27:f0:37:70:0f:fb:9f:46:7d:5f:
         eb:13:25:92:f8:15:67:ef:01:d9:5d:fa:c6:f8:a7:5b:3d:4b:
         c8:5e:be:f3:d5:15:fa:d5:21:f7:3a:10:ec:17:a8:65:76:71:
         19:f9:4d:4f:62:78:50:e4:a5:e0:7c:2b:a4:24:6d:d9:1d:8d:
         1c:39:d0:5b:1a:25:cd:33:95:e7:39:01:f6:8f:11:73:de:b2:
         7e:3b:fb:3d:48:fb:e4:4f:60:c1:c7:84:17:1e:14:96:36:ba:
         d1:ea:c2:88:34:0d:b2:d9:2a:63:25:22:ac:44:c9:2d:4e:00:
         85:c5:81:e1:e2:1f:d9:7b:5c:0c:f7:bf:3c:6b:ce:22:91:b2:
         8d:2a:74:73:08:ce:97:c4:47:e8:39:01:f6:2f:3c:1c:a7:ad:
         c0:68:d6:1e:ca:bb:3a:42:50:97:e8:5a:e9:85:f3:a3:6f:ea:
         84:63:00:68:8d:9f:b8:4e:0e:66:73:17:0b:40:02:62:82:d7:
         96:57:ea:53:67:b2:97:89:48:34:c4:7d:d2:56:56:96:53:1a:
         cd:45:8e:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 20:04:53 2026 by rpki-client