Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/e1efe4a3-158c-3d00-a0a9-7f7b703b2614.roa
File:                     e1efe4a3-158c-3d00-a0a9-7f7b703b2614.roa (raw, json)
Hash identifier:          kNp41yOBgiTWPgu5MWMu0bg4SZMcq6EqYPcM1gDTimM=
Subject key identifier:   6E:6A:F0:54:4E:CB:A7:FF:C6:82:A7:F5:70:07:F7:04:AC:D5:3B:D6
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F4328584E1A144C408E4828C55152E080
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/e1efe4a3-158c-3d00-a0a9-7f7b703b2614.roa
Signing time:             Mon 08 Jun 2026 09:00:12 +0000
ROA not before:           Mon 08 Jun 2026 09:00:12 +0000
ROA not after:            Sun 06 Sep 2026 09:00:12 +0000
asID:                     401152
IP address blocks:        166.1.52.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:1a:14:4c:40:8e:48:28:c5:51:52:e0:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Jun  8 09:00:12 2026 GMT
            Not After : Sep  6 09:00:12 2026 GMT
        Subject: CN=fed1e2f3-3c83-48a2-83ed-bb5e9fd85d21
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:02:79:03:88:ee:6d:04:90:ed:d2:7d:ff:11:
                    89:cd:21:be:26:4a:84:54:d7:18:9b:c2:ff:f4:46:
                    f5:75:e6:6d:4a:18:2c:54:e2:db:88:dc:f3:84:2d:
                    8a:ab:af:de:54:c7:a5:80:db:2e:fb:23:bc:47:18:
                    47:49:ab:fe:fb:2a:a6:94:13:06:44:b6:49:49:35:
                    19:c3:9b:3f:cb:c2:8e:bf:0a:64:36:99:48:86:80:
                    60:99:89:ba:b3:e4:40:3d:e1:2c:2e:74:69:85:d2:
                    51:a0:c5:95:2c:87:70:bd:06:51:65:1c:fe:d4:98:
                    85:ef:e8:7c:68:3c:24:b5:be:66:59:0a:d0:0b:87:
                    d5:53:0b:fc:4f:cb:ee:dc:8e:20:1f:4e:5d:10:8b:
                    16:f1:f4:c0:98:be:7c:22:f9:82:65:78:c9:47:ff:
                    94:23:26:c0:10:e8:10:72:8c:7e:96:0d:46:c9:94:
                    62:5b:4b:c2:61:e0:54:91:17:0d:48:cc:f9:97:b2:
                    57:2e:9e:d1:73:b8:f7:71:41:46:51:aa:66:3d:a1:
                    0a:27:e8:2b:60:02:68:ac:cc:b9:5f:7d:c4:1a:78:
                    c0:1b:ed:c3:8f:43:62:72:31:b1:ec:7f:97:f8:1f:
                    7e:5a:c3:6a:b9:77:16:3b:2c:6b:67:ca:e2:1f:2d:
                    d1:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:6A:F0:54:4E:CB:A7:FF:C6:82:A7:F5:70:07:F7:04:AC:D5:3B:D6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/e1efe4a3-158c-3d00-a0a9-7f7b703b2614.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.1.52.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5a:e6:8d:b4:4a:5e:75:b8:1c:0f:2c:d1:1d:5a:b1:52:2a:92:
         ad:50:de:e0:8c:0d:d9:ba:b1:bc:e6:92:5f:12:19:02:15:b7:
         8b:7e:4d:cd:7e:3d:d5:42:1d:86:a4:bf:c3:0d:7b:85:bb:ad:
         74:2c:17:3e:77:26:80:13:7c:35:7b:36:97:ef:32:92:47:02:
         d6:bb:51:cc:ab:3e:8b:5e:0e:34:82:43:03:1f:28:3c:de:44:
         16:74:35:79:9f:c3:23:34:cd:b3:08:18:30:5f:b1:d9:e7:0c:
         19:2b:a6:bd:d4:70:e7:1d:12:43:5b:00:d9:5c:60:4d:15:f0:
         a7:4b:2c:cc:8a:27:5a:bd:2b:5d:63:57:11:47:94:2f:96:44:
         31:4f:0d:3d:68:8b:32:33:5e:a8:08:6c:40:ac:7a:f6:37:52:
         e8:a9:3a:f8:49:fa:fd:29:e4:b3:9b:6e:71:d0:ca:f0:eb:73:
         1b:0f:55:2b:7c:e9:0d:a2:95:61:ca:e2:b7:e2:d4:ef:a7:2a:
         90:91:38:27:29:89:f0:81:e2:14:de:66:c4:02:c5:b0:a4:aa:
         35:3b:41:d4:16:21:b7:8e:01:8b:2e:c5:9e:15:f8:1a:1a:3f:
         19:70:ba:f4:b7:ef:b5:c3:51:ca:35:a7:02:81:5a:6b:a1:19:
         26:a5:08:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 16:33:09 2026 by rpki-client