Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/1f403c6d-7f9f-3312-95e7-ab09f7ed2390.roa
File:                     1f403c6d-7f9f-3312-95e7-ab09f7ed2390.roa (raw, json)
Hash identifier:          fgnDqy0VYusw5xnQ06ynEv+3YTEz2i/lTM0dveUvgX0=
Subject key identifier:   54:E2:35:C0:CA:A3:C8:60:71:3B:C3:4E:D5:1B:88:1C:1D:50:A0:27
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F4328584D9A2033B9C67B778557A3D7D0
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/1f403c6d-7f9f-3312-95e7-ab09f7ed2390.roa
Signing time:             Thu 23 Apr 2026 13:00:32 +0000
ROA not before:           Thu 23 Apr 2026 13:00:32 +0000
ROA not after:            Wed 22 Jul 2026 13:00:32 +0000
asID:                     397373
IP address blocks:        166.0.176.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:9a:20:33:b9:c6:7b:77:85:57:a3:d7:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Apr 23 13:00:32 2026 GMT
            Not After : Jul 22 13:00:32 2026 GMT
        Subject: CN=518b813a-7a0c-48fe-9889-7587111824d2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:c5:b6:03:b7:a6:2f:06:8b:9b:1a:24:eb:4a:
                    2e:e6:8b:43:dd:98:88:60:ac:13:c9:4c:01:33:29:
                    46:fb:58:c2:e0:65:38:d6:da:3b:cb:f3:32:bd:de:
                    3c:83:fc:5b:d0:dd:c1:04:de:7f:53:58:6a:9f:81:
                    9a:43:0a:6e:7d:79:b1:25:3f:86:68:e5:00:e3:4a:
                    7e:5a:0c:1d:8b:db:da:28:bf:81:19:d9:62:52:08:
                    3d:a7:f4:fa:11:58:cb:8b:cc:c4:2f:29:ff:ec:0b:
                    02:d8:08:7a:5a:45:8a:8e:46:85:34:d7:ed:7f:45:
                    47:e8:2e:ab:a9:82:8c:36:61:30:ec:be:67:20:f7:
                    00:69:82:b2:5e:28:a7:24:38:8d:1c:e1:cd:a6:72:
                    54:a2:d6:b6:ae:25:01:88:64:9e:df:30:84:23:67:
                    b5:27:ad:46:29:74:5f:06:2f:34:b5:45:26:66:73:
                    29:44:bd:73:99:b6:d3:f2:25:e1:99:d9:e8:eb:e4:
                    8c:79:5c:03:64:cb:31:4b:df:70:4b:0b:91:b1:4b:
                    91:0f:eb:09:7f:b7:b2:b1:4b:25:22:b5:e2:fa:ef:
                    cb:da:4d:65:90:a9:f7:23:77:70:c4:61:fd:dd:d4:
                    e9:9d:cb:cf:a9:4e:05:f4:84:66:86:da:bd:71:f6:
                    3c:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:E2:35:C0:CA:A3:C8:60:71:3B:C3:4E:D5:1B:88:1C:1D:50:A0:27
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/1f403c6d-7f9f-3312-95e7-ab09f7ed2390.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.0.176.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         43:2b:ed:f6:a9:24:b2:07:ff:bb:b0:e7:ed:f0:81:e7:4a:b9:
         66:20:fa:9e:22:d7:ed:79:8c:cd:d7:00:5d:1b:00:c3:5c:23:
         68:68:83:79:df:ee:bd:c8:78:a0:3a:a2:01:22:c7:88:5d:a3:
         7e:28:43:b4:48:49:fd:8f:66:8f:c7:b3:58:62:a9:aa:6c:54:
         a2:81:6f:e4:63:a0:85:6b:21:99:62:5a:cd:0c:33:69:05:8e:
         89:33:ca:b5:7c:d1:28:d3:4a:6e:7a:2e:bf:c9:23:5b:ee:d5:
         ff:fd:dc:c3:85:ba:68:b6:48:38:0a:59:97:3d:89:55:7b:37:
         db:e6:54:0a:c0:3a:e6:b7:f5:b3:5e:14:b6:4a:7f:19:f1:95:
         21:52:3e:25:07:55:9c:22:05:87:e7:0b:61:69:c2:ee:e3:c8:
         7c:20:c5:99:7f:98:00:2c:f6:49:17:30:c0:0a:93:4e:5c:51:
         60:8c:f8:ed:ba:41:79:73:39:f2:b1:69:87:a0:66:ae:13:f2:
         e0:00:d7:e7:b3:48:f6:fe:70:00:1c:8a:ed:a5:d5:ba:2c:13:
         f5:b8:17:bd:cf:eb:97:b7:ac:f7:c4:eb:3e:c6:c4:8c:08:49:
         f7:fd:55:cc:5a:61:b0:6e:25:14:9e:7e:6f:34:d4:2e:c7:52:
         f0:49:a6:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 08:40:47 2026 by rpki-client