Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/ae74b978-43c7-382a-9bd7-a1a7004833ac.roa
File:                     ae74b978-43c7-382a-9bd7-a1a7004833ac.roa (raw, json)
Hash identifier:          +finyHfcrgbFVkvWlLP0JdI3iKLlCcITwGbybVxZKM4=
Subject key identifier:   2E:A2:CF:DB:EC:B9:D3:A7:55:1F:58:9B:31:20:8D:F5:41:ED:54:14
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F4328584F4974F801941A7CFCE31C8B80
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/ae74b978-43c7-382a-9bd7-a1a7004833ac.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     213229
IP address blocks:        166.0.0.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 08:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:74:f8:01:94:1a:7c:fc:e3:1c:8b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=68492863-8c4e-44dd-9b00-b24cb8b5d18e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:79:23:2d:9c:b7:13:b0:24:7d:e3:05:9d:cf:
                    47:f8:77:ee:bb:b2:3c:4c:9e:94:8d:de:6b:89:70:
                    c8:71:76:85:4e:d0:2b:c8:59:2f:35:52:90:d7:99:
                    87:c0:67:38:ee:19:bb:a0:5a:99:db:85:00:72:07:
                    d9:11:5c:0c:0d:b7:60:8a:58:d3:d3:33:9d:d9:64:
                    66:03:02:7b:c7:02:3c:58:0d:21:46:ed:cf:86:8f:
                    bd:da:c1:b1:31:ef:2f:18:23:89:69:27:f9:9f:45:
                    91:59:2b:f0:7f:95:2e:c1:b9:71:fc:df:d7:a1:a2:
                    a0:a9:69:ae:0d:74:f0:93:f0:bf:b8:2b:49:94:37:
                    1e:30:29:c2:e3:6b:9f:2d:ba:81:32:27:06:9a:5b:
                    91:67:6c:b7:ea:6a:0f:74:30:b3:41:15:5b:bd:b1:
                    01:fc:b0:db:cb:e9:31:b8:9d:37:c3:ab:65:b7:d6:
                    f9:da:55:ce:1d:b9:6d:47:9e:2a:a1:4a:f7:bf:61:
                    28:18:85:3b:ef:1c:5d:d9:06:f6:2e:b1:47:ea:c3:
                    81:0d:a4:e0:ce:50:e9:42:4d:b6:ea:04:b2:d9:2c:
                    c9:35:e0:6a:5e:15:46:c2:ba:6f:c3:4c:cd:b0:ac:
                    79:3d:b0:44:5e:9c:ad:55:e7:08:67:e3:66:0b:7b:
                    3b:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:A2:CF:DB:EC:B9:D3:A7:55:1F:58:9B:31:20:8D:F5:41:ED:54:14
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/ae74b978-43c7-382a-9bd7-a1a7004833ac.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.0.0.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2a:e3:a1:f9:9e:68:c3:d0:05:9e:21:9b:0b:d4:1f:ea:31:d4:
         eb:95:4b:37:74:13:84:81:c2:f5:06:fd:c3:c0:62:6a:ce:d3:
         19:03:ca:38:de:a5:3d:77:3e:b5:07:d4:5b:c1:c0:2b:8d:81:
         2a:fb:e7:71:c2:7b:ad:a8:e0:42:93:eb:ee:ab:84:ec:20:2e:
         43:34:50:ee:c8:bd:9e:3a:76:dd:3d:74:fa:b2:36:86:d3:a6:
         99:e8:8f:b5:1f:51:70:1f:69:19:a1:1d:a5:bc:01:38:23:49:
         a1:e6:d5:1a:4e:f2:98:55:c8:40:f4:2f:f1:9c:15:96:b8:cf:
         0c:20:db:94:8f:60:98:f2:a0:b9:45:ba:17:24:80:3b:bf:ec:
         97:3b:da:41:9c:7d:f2:03:2e:f2:55:0d:20:7a:45:b4:99:c5:
         b8:95:32:61:84:41:5f:fd:9b:8c:59:8e:9d:41:4d:3a:2b:3d:
         d9:81:ec:87:56:bd:09:c2:6c:d1:4e:95:66:c7:3d:83:f1:b6:
         47:a0:79:88:6b:dc:13:d0:91:ac:cd:25:c5:23:1a:c4:5f:76:
         ac:54:c9:20:f9:d4:82:16:51:57:f5:e8:99:49:e6:51:1d:7a:
         75:5d:a5:3f:c1:ef:23:ab:b2:28:fc:73:23:38:f3:d9:b8:39:
         22:5b:3a:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 01:49:28 2026 by rpki-client