Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/cb6da716-a025-3e07-9cd7-0d74449349af.roa
File:                     cb6da716-a025-3e07-9cd7-0d74449349af.roa (raw, json)
Hash identifier:          5VeNTY82fsYqhyD7eng+w2Gcma49ewairs22jyi088A=
Subject key identifier:   E6:BE:60:6F:76:98:71:9E:16:2E:9F:98:E0:F2:61:19:11:1A:8C:20
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F4328584D5024EFE2F234DB074A087200
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/cb6da716-a025-3e07-9cd7-0d74449349af.roa
Signing time:             Sat 28 Mar 2026 01:00:31 +0000
ROA not before:           Sat 28 Mar 2026 01:00:31 +0000
ROA not after:            Fri 26 Jun 2026 01:00:31 +0000
asID:                     62240
IP address blocks:        166.1.219.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:50:24:ef:e2:f2:34:db:07:4a:08:72:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Mar 28 01:00:31 2026 GMT
            Not After : Jun 26 01:00:31 2026 GMT
        Subject: CN=54c347ab-dfe1-49eb-8c7f-4a05b5a81520
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:e3:07:dc:03:9b:51:a4:81:e8:f3:51:f1:99:
                    7d:19:c4:5e:c6:51:ad:a3:f9:24:e3:f9:4c:09:6e:
                    05:71:c2:7a:ab:13:12:f8:47:d7:c8:24:1f:de:fb:
                    13:73:9a:27:fc:31:68:14:03:6e:ba:8b:5d:bf:19:
                    ed:25:ec:23:63:58:a2:ea:81:69:7c:45:57:5f:60:
                    87:d4:27:32:e3:00:45:b0:db:be:3d:2b:1b:66:85:
                    33:af:f6:a1:b4:8b:ec:00:ba:28:65:2b:9e:70:e1:
                    9d:59:45:27:f6:73:53:b2:4e:14:c0:5b:62:49:8f:
                    de:1f:c9:c0:35:e7:3f:b4:57:31:50:11:93:22:0f:
                    42:fa:70:d4:4d:ec:e9:5d:f1:e7:0e:73:8d:99:89:
                    39:18:4f:bc:5d:b5:62:72:bf:0a:46:b5:a9:30:6f:
                    49:bc:a5:6f:42:d2:a6:ca:2c:68:9c:d7:18:39:c7:
                    3b:d0:dc:e5:6c:3f:74:29:85:ac:a4:07:2b:52:b6:
                    5e:d9:36:57:2a:ee:ea:0b:00:3e:12:55:af:75:d9:
                    d6:72:cc:af:70:e7:2f:9e:3c:87:da:e4:f5:68:a6:
                    ed:84:96:32:67:82:45:76:f4:65:52:d1:c6:30:1a:
                    94:a2:bc:1a:3d:49:7a:c5:00:64:bc:4a:7d:9a:ba:
                    72:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:BE:60:6F:76:98:71:9E:16:2E:9F:98:E0:F2:61:19:11:1A:8C:20
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/cb6da716-a025-3e07-9cd7-0d74449349af.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.1.219.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2e:dc:b5:ee:cc:52:35:4d:5b:0f:c6:78:55:e4:d2:14:f1:cf:
         cc:9c:65:1c:ac:ff:53:a2:bf:d2:81:83:92:d0:95:8c:a2:b2:
         eb:c1:d3:d4:80:00:9d:a8:ac:b5:69:6d:f1:1a:c4:76:61:ef:
         34:e3:bc:62:57:de:aa:af:1d:59:96:b9:34:65:6b:79:3a:8d:
         3b:1c:16:d4:73:77:53:9b:45:af:75:fe:28:e5:ba:a5:c9:6a:
         ac:4f:cf:22:40:47:54:52:62:12:98:ed:0b:de:8f:71:08:f3:
         42:2c:7a:19:14:7b:9d:eb:21:3b:72:25:03:e5:86:0c:55:0a:
         ae:18:80:60:16:28:36:3b:12:79:77:db:ec:53:92:66:47:a3:
         69:7e:33:bb:39:dd:2a:26:57:a4:d6:26:d4:b2:8f:26:70:a6:
         79:84:6c:49:50:4a:65:e1:31:29:c0:c3:ff:27:ce:f0:d8:e8:
         e4:a2:bd:1a:5f:2d:d1:c5:d4:ce:35:41:f3:9e:e4:f9:71:47:
         d1:fe:ec:95:f5:6e:63:9e:0a:49:30:78:51:16:93:0c:2f:7b:
         23:96:79:5e:50:0b:be:3f:af:fa:cf:e2:39:2f:d4:da:25:04:
         e2:57:a4:79:9e:e6:dc:ff:1c:f5:52:9b:d1:34:fd:cf:03:e8:
         59:aa:ca:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:49:34 2026 by rpki-client