Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/fe01bbf6-7262-32e3-8c5c-6ae0c9b81220.roa
File:                     fe01bbf6-7262-32e3-8c5c-6ae0c9b81220.roa (raw, json)
Hash identifier:          ZetZ8gS3svo5P79O23jOlRI8h5WLZ2WactpYCIcnDuI=
Subject key identifier:   65:82:E8:59:D3:D2:B9:8A:55:42:19:88:A4:C7:A2:DA:8E:40:47:AB
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F4328584D52438D854008EB77FBAF7900
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/fe01bbf6-7262-32e3-8c5c-6ae0c9b81220.roa
Signing time:             Sat 28 Mar 2026 19:13:19 +0000
ROA not before:           Sat 28 Mar 2026 19:13:19 +0000
ROA not after:            Fri 26 Jun 2026 19:13:19 +0000
asID:                     58061
IP address blocks:        166.1.108.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:52:43:8d:85:40:08:eb:77:fb:af:79:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Mar 28 19:13:19 2026 GMT
            Not After : Jun 26 19:13:19 2026 GMT
        Subject: CN=833a07a7-1aac-4f75-81b6-a2591e594255
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:10:41:34:df:21:2b:3a:a1:b3:28:b9:a7:9f:
                    db:e6:19:0e:5d:d9:a2:e2:7a:05:bb:eb:5f:05:6e:
                    28:22:0d:40:e6:8a:6b:c8:0f:67:d2:b0:23:5d:8c:
                    ab:0b:1f:50:85:d1:78:01:1d:ac:84:f4:4c:45:f5:
                    b2:b0:ad:5f:80:05:f8:1b:85:66:50:9c:9b:f0:d5:
                    6e:61:d4:e2:69:78:e8:8e:8f:43:f7:23:84:5d:b3:
                    5a:2d:2e:95:06:57:a9:b4:83:42:1a:65:13:e4:a2:
                    d1:de:81:d7:ec:cd:57:93:f0:14:84:9a:a8:e5:0d:
                    16:fc:49:1f:1c:52:d4:ae:7a:37:35:3b:2e:f6:9f:
                    2a:5c:60:eb:6b:06:c3:57:30:19:42:e4:bb:3b:0d:
                    ce:2f:38:a6:fe:05:16:f0:c5:f0:df:82:8a:ae:73:
                    96:a4:c0:0f:24:b5:cf:ad:7c:85:30:a8:82:15:8c:
                    eb:00:8d:6d:b4:56:a6:77:de:0d:75:39:bd:9f:8d:
                    07:65:3f:4c:ab:94:49:5d:29:5b:10:cf:1a:3e:ec:
                    c4:18:b0:e0:11:58:d8:d5:99:05:1e:39:81:d0:4c:
                    c1:04:1a:04:a9:dc:6d:27:b4:02:be:01:b9:2d:4c:
                    70:ed:0c:50:2d:13:18:cc:21:20:ba:39:02:35:93:
                    71:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:82:E8:59:D3:D2:B9:8A:55:42:19:88:A4:C7:A2:DA:8E:40:47:AB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/fe01bbf6-7262-32e3-8c5c-6ae0c9b81220.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.1.108.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2a:24:98:2e:b6:d7:86:e5:c1:2d:26:55:3f:c9:9e:3f:29:08:
         6a:a1:4a:88:e7:7f:44:cb:e6:73:5c:62:a1:7d:74:d7:f8:7e:
         d0:b1:b3:de:84:82:31:a9:0b:52:d2:ed:b1:cd:35:cd:9d:48:
         8c:8b:78:ac:de:3e:a6:76:50:c9:ee:8c:5b:5b:36:b1:88:8d:
         d7:c4:56:fd:c2:14:4b:62:be:c8:5e:54:db:7d:c2:b8:a2:28:
         98:c8:6f:34:c8:24:a4:bb:3d:e0:e2:c4:2a:b9:4b:e9:60:85:
         51:8a:be:fa:2e:d3:de:33:0d:dc:39:41:b5:bc:f5:3f:40:7d:
         c5:73:95:3b:49:08:26:04:f9:1b:35:af:c6:7b:b4:4a:97:3d:
         97:ce:5e:f9:81:52:bf:55:a6:a0:91:96:05:8f:c7:71:76:4f:
         08:d9:78:01:c1:0f:70:4d:e8:36:d1:fa:61:a4:62:6e:34:6a:
         cb:36:61:46:47:fb:bc:c3:0f:8f:12:9b:1a:97:ed:f0:2a:fa:
         a7:0d:bb:d1:75:d3:bd:f9:67:f6:00:6d:c7:8d:34:6b:87:59:
         86:6d:c4:32:52:51:b1:94:42:fc:4d:1c:ab:92:89:61:bb:de:
         54:d5:45:f1:15:61:3f:98:7d:48:5c:b0:93:bf:c6:fe:31:d9:
         66:40:2b:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 14:16:48 2026 by rpki-client