Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/ee6d5b49-4a20-434b-9e90-b7d78b27ebf1/0ea34552-053e-39f2-80c7-34cd160abf75.roa
File:                     0ea34552-053e-39f2-80c7-34cd160abf75.roa (raw, json)
Hash identifier:          dC/KM7BPiaFe/nnCJPo347Xpvnw4efIzX5slgorkKSU=
Subject key identifier:   3C:D5:62:99:8F:FB:11:EA:F3:E4:A5:05:54:42:C7:D1:63:78:8D:29
Certificate issuer:       /CN=ee6d5b49-4a20-434b-9e90-b7d78b27ebf1
Certificate serial:       010D0C9F4328584EA799E995A4258C37CB25DFC0
Authority key identifier: CC:42:C3:CE:85:EB:3E:F3:3F:67:00:95:CB:5E:92:64:C1:67:1F:EC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/ee6d5b49-4a20-434b-9e90-b7d78b27ebf1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/ee6d5b49-4a20-434b-9e90-b7d78b27ebf1/0ea34552-053e-39f2-80c7-34cd160abf75.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     6075
IP address blocks:        166.21.8.0/23 maxlen: 24
                          166.21.12.0/24 maxlen: 24
                          166.21.21.0/24 maxlen: 24
                          166.21.28.0/24 maxlen: 24
                          166.21.35.0/24 maxlen: 24
                          166.21.37.0/24 maxlen: 24
                          166.21.43.0/24 maxlen: 24
                          166.21.45.0/24 maxlen: 24
                          166.21.59.0/24 maxlen: 24
                          166.21.61.0/24 maxlen: 24
                          166.21.64.0/23 maxlen: 24
                          166.21.131.0/24 maxlen: 24
                          166.21.240.0/21 maxlen: 24
                          166.25.20.0/24 maxlen: 24
                          166.25.23.0/24 maxlen: 24
                          166.25.30.0/23 maxlen: 24
                          166.25.35.0/24 maxlen: 24
                          166.25.38.0/24 maxlen: 24
                          166.25.52.0/24 maxlen: 24
                          166.25.56.0/24 maxlen: 24
                          166.25.77.0/24 maxlen: 24
                          166.25.100.0/24 maxlen: 24
                          166.25.130.0/24 maxlen: 24
                          166.25.192.0/24 maxlen: 24
                          166.25.200.0/23 maxlen: 24
                          166.25.212.0/24 maxlen: 24
                          192.30.247.0/24 maxlen: 24
                          192.35.23.0/24 maxlen: 24
                          192.35.24.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/ee6d5b49-4a20-434b-9e90-b7d78b27ebf1/ee6d5b49-4a20-434b-9e90-b7d78b27ebf1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/ee6d5b49-4a20-434b-9e90-b7d78b27ebf1/ee6d5b49-4a20-434b-9e90-b7d78b27ebf1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/ee6d5b49-4a20-434b-9e90-b7d78b27ebf1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:99:e9:95:a4:25:8c:37:cb:25:df:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ee6d5b49-4a20-434b-9e90-b7d78b27ebf1
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=4097d16d-adfa-4ac8-b07b-b1ed1efabefd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:a7:9a:59:42:ac:f4:ce:60:c3:8b:04:39:69:
                    fb:60:09:d4:29:d7:99:56:68:fd:3e:4c:35:57:f7:
                    30:ab:68:3d:5d:f3:b1:18:20:5f:11:00:14:49:9f:
                    fc:0c:47:0e:49:10:f3:36:fc:28:aa:59:1c:1f:e4:
                    fe:d8:2f:76:d8:f7:be:ad:cf:ea:36:c0:11:8f:a5:
                    da:cc:36:c2:6a:fe:4b:78:24:50:35:c9:bc:1a:d4:
                    fb:aa:ec:87:06:8c:c1:7c:45:df:92:f9:5a:c4:e1:
                    88:a2:c1:13:1a:98:f6:3f:3f:bd:e2:2f:47:ad:11:
                    70:29:7d:e8:fe:1f:fe:79:56:e9:8e:1f:e7:fb:e1:
                    15:98:c1:ba:bc:2e:6a:fe:3a:b2:6c:37:ae:44:94:
                    aa:2f:66:99:53:18:37:2c:0b:7f:24:95:83:ef:93:
                    79:10:74:c1:84:d3:d6:6f:7b:bc:71:00:f1:2c:4b:
                    01:f1:f9:33:11:49:c7:e0:75:d9:43:96:04:c3:cc:
                    71:d1:9d:5e:36:3e:3f:ca:fe:3c:c4:7e:ff:64:8c:
                    6a:f5:a3:73:1a:47:1c:97:04:df:7d:79:f7:93:c9:
                    e3:be:ab:2b:d5:8d:ad:ae:f6:65:45:e0:96:e6:4b:
                    19:22:23:3a:b0:bd:91:d2:1d:31:90:1d:45:6d:c5:
                    87:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:D5:62:99:8F:FB:11:EA:F3:E4:A5:05:54:42:C7:D1:63:78:8D:29
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/ee6d5b49-4a20-434b-9e90-b7d78b27ebf1/0ea34552-053e-39f2-80c7-34cd160abf75.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/ee6d5b49-4a20-434b-9e90-b7d78b27ebf1/ee6d5b49-4a20-434b-9e90-b7d78b27ebf1.crl

            X509v3 Authority Key Identifier:
                keyid:CC:42:C3:CE:85:EB:3E:F3:3F:67:00:95:CB:5E:92:64:C1:67:1F:EC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/ee6d5b49-4a20-434b-9e90-b7d78b27ebf1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.21.8.0/23
                  166.21.12.0/24
                  166.21.21.0/24
                  166.21.28.0/24
                  166.21.35.0/24
                  166.21.37.0/24
                  166.21.43.0/24
                  166.21.45.0/24
                  166.21.59.0/24
                  166.21.61.0/24
                  166.21.64.0/23
                  166.21.131.0/24
                  166.21.240.0/21
                  166.25.20.0/24
                  166.25.23.0/24
                  166.25.30.0/23
                  166.25.35.0/24
                  166.25.38.0/24
                  166.25.52.0/24
                  166.25.56.0/24
                  166.25.77.0/24
                  166.25.100.0/24
                  166.25.130.0/24
                  166.25.192.0/24
                  166.25.200.0/23
                  166.25.212.0/24
                  192.30.247.0/24
                  192.35.23.0-192.35.24.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         84:2e:36:28:dd:a1:21:bf:ca:1e:03:ee:c4:48:ca:a2:66:2a:
         8a:ec:1d:3d:e6:55:69:eb:e7:a4:3a:83:06:8d:b9:49:3d:ad:
         09:49:54:ce:e8:05:68:55:f2:bd:74:c2:43:15:e4:41:7c:65:
         52:b9:25:c4:72:60:b5:35:62:cb:ca:95:c8:e7:77:32:d4:9d:
         38:a5:95:a6:10:4b:44:d5:9d:f0:29:94:98:2f:9a:90:fd:04:
         cd:b7:5e:dd:c1:72:48:c7:06:06:6e:ad:4b:92:b9:0c:f6:9a:
         e5:a6:1c:4f:63:bc:2e:0e:85:e9:d0:2c:f3:da:18:ea:5a:41:
         3f:27:06:a0:89:2d:3b:61:13:74:bc:fa:b4:8c:09:2e:3f:0e:
         58:12:88:c9:36:bf:dc:60:09:79:61:38:fd:86:42:63:2c:ba:
         8b:57:0b:29:51:c5:71:83:ec:b1:a9:20:66:97:ac:08:65:bb:
         ea:96:37:65:80:b1:10:b1:fd:fc:89:58:02:a5:6b:30:14:20:
         0e:fc:65:f3:13:e4:30:05:51:4b:a3:ce:52:73:de:07:56:01:
         d4:43:8e:49:d0:cf:39:52:f5:35:53:5d:97:5c:5c:f9:ed:14:
         ee:d7:b8:44:34:4f:8b:12:43:37:5e:66:ee:55:a7:a2:4a:76:
         3a:8c:e6:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 05:05:26 2026 by rpki-client