Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/e6f468a9-6a4d-34a7-97bc-634c56438e99.roa
File:                     e6f468a9-6a4d-34a7-97bc-634c56438e99.roa (raw, json)
Hash identifier:          5tpbWtwFbnHmkyZrtoo2+533LJYAbJdM9UkQA9ImyUA=
Subject key identifier:   FC:17:D9:65:62:FD:E1:8A:F2:2F:FF:C4:CE:C1:4D:77:44:78:BD:BC
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F4328584F698D970443BC91C1424D79A0
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/e6f468a9-6a4d-34a7-97bc-634c56438e99.roa
Signing time:             Tue 06 Oct 2026 13:00:13 +0000
ROA not before:           Tue 06 Oct 2026 13:00:13 +0000
ROA not after:            Mon 04 Jan 2027 14:00:13 +0000
asID:                     26969
IP address blocks:        166.0.234.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 10 Oct 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:69:8d:97:04:43:bc:91:c1:42:4d:79:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Oct  6 13:00:13 2026 GMT
            Not After : Jan  4 14:00:13 2027 GMT
        Subject: CN=19f4b09f-2410-470a-a044-e3577843b25e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:81:2f:bd:bb:20:f1:d0:e9:68:87:ab:66:c1:
                    6c:b8:95:02:8a:ed:73:fe:78:ac:3c:3d:6c:d1:d8:
                    ed:96:cb:c5:be:ab:d4:32:63:38:e6:f5:14:6a:70:
                    f8:c6:d5:cd:5b:8d:50:4d:8c:1f:cf:f6:13:9c:04:
                    10:ed:d2:b4:ee:3e:c5:c7:5c:12:ce:83:85:1c:2f:
                    c2:06:a4:e5:ec:88:a1:22:05:ff:6f:e7:f3:e0:d2:
                    08:b6:57:82:cf:7d:64:58:f1:99:04:81:21:95:e6:
                    44:b4:66:9c:d2:1d:1f:4f:57:c0:7d:93:63:1f:5e:
                    eb:be:f2:9f:f6:1d:62:4d:cd:8a:64:48:e8:b6:cb:
                    96:53:4a:d4:f6:bb:a8:db:04:c7:12:84:53:99:99:
                    4f:8b:64:8b:a3:a9:dc:78:8b:8d:96:e2:b0:63:5f:
                    3b:05:99:8c:40:28:0b:05:03:9a:70:d6:59:77:15:
                    55:3f:1f:14:6b:9d:b3:e4:3d:ff:c4:77:a7:cd:6d:
                    50:67:fe:0d:6e:25:1a:0d:e7:11:5d:a5:fb:5e:8b:
                    68:d2:4b:a2:1b:7b:49:fb:b8:3c:0c:90:db:df:53:
                    e4:5b:9a:dc:a6:ff:04:de:cd:93:7a:05:7b:1a:34:
                    4b:7a:d0:c7:b5:86:69:03:3d:47:93:7f:35:29:a8:
                    71:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:17:D9:65:62:FD:E1:8A:F2:2F:FF:C4:CE:C1:4D:77:44:78:BD:BC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/e6f468a9-6a4d-34a7-97bc-634c56438e99.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.0.234.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         99:22:27:d2:22:ae:79:e2:73:ae:e6:6f:20:9b:47:37:a1:8b:
         9f:90:6d:a0:e5:55:fe:36:4b:01:56:38:41:00:14:ea:37:84:
         f3:11:95:4c:f9:78:1d:03:83:ff:c2:68:d9:6e:47:8b:28:e8:
         41:0a:ff:fb:d7:39:1c:bf:25:9e:5f:e7:88:a5:33:52:42:51:
         b4:50:d8:d0:c9:25:87:01:49:12:01:c8:36:ab:a5:10:ba:f8:
         0f:74:a1:c6:3c:9a:e9:49:b5:97:ac:9d:0e:af:ea:39:15:65:
         f1:a7:ed:2e:f1:a4:e9:15:93:8a:da:14:dc:3b:61:ea:b3:a1:
         a0:44:1c:ee:2d:b8:94:e4:60:cf:38:89:0c:d3:a0:80:33:5e:
         cf:51:e4:4c:18:40:3d:63:7e:41:a0:20:d3:53:88:13:bd:72:
         bc:ee:61:c8:d5:d4:b4:c8:ca:7e:1f:22:04:4e:29:77:c2:4b:
         d9:91:ca:3e:90:86:0e:c7:77:30:47:f2:97:fc:6b:71:92:2b:
         77:ed:4b:b4:4b:dc:db:d9:c1:37:64:33:fa:f0:43:c2:93:94:
         9a:c7:af:bd:d4:d3:5f:e3:80:f2:1d:40:a9:0f:12:8e:80:fb:
         91:49:dd:84:71:59:5b:15:5d:4e:62:22:9b:bb:f8:a9:62:8e:
         be:f3:85:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 15:50:50 2026 by rpki-client