Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/035e0c75-2ab3-3611-a5c0-23098687f107.roa
File:                     035e0c75-2ab3-3611-a5c0-23098687f107.roa (raw, json)
Hash identifier:          6on+HB+Tl6L8nkDV6jMbuCc21ywq/FzuQ6PHX642E3M=
Subject key identifier:   B0:BB:EF:D2:4B:B2:3B:53:3E:F9:2A:14:B3:2C:7C:3C:AB:C1:EE:AC
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F4328584F655D6D172554095147FB1D00
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/035e0c75-2ab3-3611-a5c0-23098687f107.roa
Signing time:             Mon 05 Oct 2026 01:00:13 +0000
ROA not before:           Mon 05 Oct 2026 01:00:13 +0000
ROA not after:            Sun 03 Jan 2027 02:00:13 +0000
asID:                     7488
IP address blocks:        166.1.247.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 08 Oct 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:65:5d:6d:17:25:54:09:51:47:fb:1d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Oct  5 01:00:13 2026 GMT
            Not After : Jan  3 02:00:13 2027 GMT
        Subject: CN=977a7264-ef12-4a76-a29d-796816099cbe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:96:1e:4c:c0:59:97:2c:7e:9c:39:ed:63:cf:
                    65:f1:96:d9:7a:be:f6:e0:b2:a3:b4:0e:e0:b1:5d:
                    38:3d:95:75:b9:47:6a:a5:d4:46:d8:f2:38:70:78:
                    7e:cb:89:1a:d1:e6:ca:5b:a5:3c:63:87:e4:cb:20:
                    e6:f4:93:9f:c8:17:57:76:3e:bf:36:af:65:69:67:
                    5c:89:74:15:4e:7b:b1:82:c3:70:c9:8e:32:de:46:
                    5a:19:a0:00:d1:8b:8d:09:af:7c:7a:0a:c5:84:ea:
                    c8:61:1e:5b:1a:46:e5:1e:bf:fa:89:7e:19:d4:2a:
                    51:47:fd:f0:40:fd:44:15:2f:dd:bf:bf:90:4b:92:
                    22:5e:75:31:c0:7e:73:38:a5:c2:00:15:15:88:f3:
                    99:4f:25:d7:33:87:74:8e:a5:87:9b:86:20:1a:ba:
                    40:d5:e0:c7:38:79:09:94:58:02:ca:5e:5d:0f:d9:
                    14:80:d0:70:2f:58:41:1b:fd:20:15:af:d1:60:41:
                    75:09:b5:90:c1:b7:a9:fd:b5:65:ef:ea:c5:c8:76:
                    0f:5d:08:24:3b:8f:b9:8d:35:d0:6d:2e:6f:a9:63:
                    09:08:b1:06:51:b9:98:03:74:59:45:64:21:1c:26:
                    e3:96:ea:f7:66:a6:af:d3:32:9a:05:f3:94:a5:b7:
                    aa:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:BB:EF:D2:4B:B2:3B:53:3E:F9:2A:14:B3:2C:7C:3C:AB:C1:EE:AC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/035e0c75-2ab3-3611-a5c0-23098687f107.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.1.247.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7e:1a:19:43:96:9a:d5:20:b0:91:ca:35:5a:1c:8a:75:ce:7e:
         a4:c0:fd:26:ec:dc:4a:05:46:ef:fa:e7:22:19:dd:b2:8b:7b:
         14:60:4d:76:3b:72:9f:92:c8:67:73:9d:f4:69:51:8f:18:e9:
         1a:15:71:6f:cd:82:65:fd:69:5a:32:1c:65:49:f5:02:86:1c:
         bb:67:63:ef:a1:99:d5:39:30:6d:85:af:77:62:be:6a:3d:14:
         c7:18:59:a1:bc:5b:73:ec:34:0c:37:8f:80:49:3c:5d:fc:e7:
         09:e3:a7:ee:b1:df:ec:11:ba:37:8e:e6:83:03:fe:24:89:e8:
         b5:83:7d:13:ac:51:62:fb:96:b7:6f:32:b6:c8:21:59:18:e7:
         78:58:e8:8b:82:4c:75:8b:84:1e:dd:79:9b:72:a1:e8:77:3c:
         a7:9c:4c:a0:3e:c1:dd:af:31:88:e3:b9:ef:ae:8f:89:41:7d:
         90:4c:4a:a4:21:3e:5c:e8:c5:bc:38:32:09:1e:db:fa:31:f3:
         f6:5d:60:53:2c:31:76:49:46:0a:4f:f1:8d:50:80:df:ef:30:
         da:4a:5e:c8:27:48:72:dc:6d:34:a6:6d:8e:1a:7a:eb:b9:e7:
         a7:aa:2a:68:bf:79:91:32:59:87:9c:99:da:72:87:a3:b3:07:
         5a:16:2c:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 20:20:03 2026 by rpki-client