Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/d9f9cb40-68e0-39f9-a335-d2b29232d4d9.roa
File:                     d9f9cb40-68e0-39f9-a335-d2b29232d4d9.roa (raw, json)
Hash identifier:          YMIXwAWhIjyYbvrsMV4npzDk6Udjdo9ePETIoKCS9Cc=
Subject key identifier:   62:78:B8:12:C7:A8:A6:3A:5E:39:B0:6A:B7:2A:AE:24:79:17:8E:F5
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F4328584D021797D0797DD7AFDAED9D00
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/d9f9cb40-68e0-39f9-a335-d2b29232d4d9.roa
Signing time:             Sat 28 Feb 2026 02:00:32 +0000
ROA not before:           Sat 28 Feb 2026 02:00:32 +0000
ROA not after:            Fri 29 May 2026 01:00:32 +0000
asID:                     400810
IP address blocks:        166.0.130.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:02:17:97:d0:79:7d:d7:af:da:ed:9d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Feb 28 02:00:32 2026 GMT
            Not After : May 29 01:00:32 2026 GMT
        Subject: CN=51554472-06e7-4d0d-89bd-6a139c8eb8bd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:eb:44:4f:73:35:43:2a:4a:2e:5b:7d:ca:1c:
                    df:af:dc:86:91:63:e3:5f:0a:5a:40:74:17:96:a3:
                    51:95:3c:bf:38:ee:e1:9c:d9:1b:e7:7a:b1:24:11:
                    04:d1:76:1a:02:4f:dc:f0:15:c0:a7:35:1c:9e:d5:
                    de:b2:65:6b:c6:99:da:5b:ba:c5:14:da:88:36:60:
                    9f:e7:69:6d:ad:40:48:47:53:0f:75:75:d3:01:23:
                    42:ad:05:8a:76:ec:52:43:89:da:e7:2a:47:2f:1b:
                    81:87:a9:21:97:3c:c9:eb:f9:f1:e4:d6:03:b0:65:
                    d2:e7:06:b8:ed:c7:23:96:ef:32:a6:51:44:8e:bb:
                    44:eb:cb:bc:9b:d2:ba:16:04:66:34:1e:08:b8:3c:
                    fc:ed:57:12:fc:90:6b:bb:f9:66:23:54:6f:bc:a0:
                    6b:62:b3:db:77:03:05:12:b7:00:3f:93:d6:e2:d1:
                    68:df:8f:c0:b6:be:0c:5d:63:4b:9e:4d:a1:52:aa:
                    86:78:c5:df:f7:7f:fb:63:79:fa:31:81:6e:66:40:
                    ee:c6:a2:b7:25:2b:e0:d0:fd:b1:11:d8:17:bd:2a:
                    96:65:13:31:df:8c:b2:03:8f:f4:51:9d:2d:62:06:
                    0d:3b:35:63:40:56:f2:18:e5:be:05:ae:ff:f2:9a:
                    bd:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:78:B8:12:C7:A8:A6:3A:5E:39:B0:6A:B7:2A:AE:24:79:17:8E:F5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/d9f9cb40-68e0-39f9-a335-d2b29232d4d9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.0.130.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         89:d5:68:ec:72:d2:40:ce:0b:e5:db:ae:b5:4f:53:e8:e7:a2:
         17:d2:cf:10:c3:14:cf:02:b3:40:0f:8e:13:a9:6e:30:fb:76:
         a2:33:04:b9:66:1a:e6:e6:8c:98:b0:dc:3c:17:23:c6:fe:b4:
         24:e6:18:8b:c8:d6:d7:34:ff:81:3d:e5:3d:e3:e4:4c:5c:82:
         5d:f3:ea:3a:4d:8c:32:13:65:2e:6e:b4:38:2f:4e:8a:a5:ed:
         21:69:f2:ef:b1:3d:f4:a7:70:67:ed:ab:17:1d:c3:6d:d4:e2:
         d7:9b:6c:87:bf:c6:5f:b6:84:da:26:15:ae:d8:d1:82:88:0b:
         20:8e:75:63:fd:4c:4a:ff:70:6f:af:60:71:e9:35:c3:cd:27:
         a4:49:5a:c9:6e:71:92:b4:37:ff:00:97:2f:dc:48:3d:67:14:
         7e:bf:47:bb:e0:c5:f5:b9:82:f8:6c:cb:a1:56:81:45:d6:ae:
         e6:fb:b3:6c:ae:18:d2:81:9a:30:b2:78:e0:e7:1d:72:ff:6d:
         1c:ce:b8:72:b3:fd:2e:fd:49:d2:80:f9:d1:c5:9c:d2:23:87:
         8c:c8:3a:f1:a6:74:7e:f3:4b:b4:3d:7e:04:0d:b3:a6:23:0a:
         19:3f:15:56:0e:fc:f6:d1:57:49:ee:a4:28:6c:8a:bf:81:d0:
         39:8d:c6:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:37:59 2026 by rpki-client