Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/330db5c5-a785-373c-8369-2c108e3ae9ab.roa
File:                     330db5c5-a785-373c-8369-2c108e3ae9ab.roa (raw, json)
Hash identifier:          QdM4NuyXbyklD/b7QWYSFWpTkVK96J3mXN8kRTviYcE=
Subject key identifier:   05:BD:68:AA:F2:70:D8:CB:9C:F3:84:8B:6B:21:66:FC:BD:D3:4E:7F
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F4328584D2BDA2E0D6908065994733900
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/330db5c5-a785-373c-8369-2c108e3ae9ab.roa
Signing time:             Sun 15 Mar 2026 01:00:32 +0000
ROA not before:           Sun 15 Mar 2026 01:00:32 +0000
ROA not after:            Sat 13 Jun 2026 01:00:32 +0000
asID:                     32402
IP address blocks:        166.1.73.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:2b:da:2e:0d:69:08:06:59:94:73:39:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Mar 15 01:00:32 2026 GMT
            Not After : Jun 13 01:00:32 2026 GMT
        Subject: CN=334826dd-300b-4d02-8403-264d1e3c6f19
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:f1:49:8c:66:a4:1e:c8:95:6b:49:c1:d6:68:
                    34:f2:22:ff:99:54:3f:b3:ff:a6:35:4d:5c:a4:f6:
                    e5:cd:61:3d:c3:96:9d:ec:6e:ec:3b:8f:a4:ae:da:
                    37:95:f8:21:26:a9:03:f5:9e:c6:58:72:2f:74:73:
                    6a:bd:5e:ae:20:ab:a6:a4:5d:5c:36:79:bc:fc:cd:
                    f8:97:3f:73:46:d2:9b:e7:1b:87:b1:96:d0:48:d1:
                    c8:c5:21:4b:92:52:65:ee:6f:f4:08:5d:d7:95:d5:
                    ea:06:ab:0e:52:61:14:c3:92:2f:49:ac:12:cd:d9:
                    87:da:bc:5e:c1:b9:2f:32:22:df:b2:55:92:4f:1d:
                    0a:b8:8f:e2:ef:74:e3:54:96:68:38:cc:b2:11:64:
                    14:4d:c8:c7:d8:4f:9e:0d:46:00:f0:a0:48:0b:ca:
                    d6:a6:95:24:0e:ec:66:43:9d:ac:98:e5:36:bb:b1:
                    e0:1c:a1:8e:52:eb:87:d9:dd:d9:83:19:2d:f8:6c:
                    0c:54:03:c2:b5:f3:9f:81:d3:8e:8a:af:77:38:3e:
                    a0:95:4a:ae:cc:cc:7e:b9:df:c7:5e:0e:0b:76:65:
                    c2:12:cb:31:2f:db:77:96:a5:e5:52:93:46:75:87:
                    bf:c3:0f:14:04:51:b9:75:bd:54:14:72:b8:3f:da:
                    aa:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:BD:68:AA:F2:70:D8:CB:9C:F3:84:8B:6B:21:66:FC:BD:D3:4E:7F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/330db5c5-a785-373c-8369-2c108e3ae9ab.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.1.73.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         26:78:db:25:30:1c:f0:fa:2a:dd:00:df:32:aa:84:79:ef:3b:
         8c:70:79:bb:a8:3b:e7:9a:e6:b0:61:eb:95:99:48:db:b8:92:
         68:de:ca:99:9e:31:85:38:6f:f0:45:3c:f1:0e:30:2e:f2:5c:
         a8:1e:da:e9:6d:de:e3:cd:07:88:a5:a5:6c:40:e7:16:1f:cb:
         af:83:75:9a:8c:70:81:3a:12:d9:4f:cd:6e:2b:86:f5:e7:2b:
         9d:e7:c8:76:fd:ce:9f:df:5d:a6:49:a2:8e:7d:df:29:b1:99:
         49:92:81:65:42:8c:ae:ac:70:38:e8:55:1a:4d:15:96:4f:9d:
         e3:d8:72:2d:3c:60:b4:5e:37:f9:b0:98:49:20:68:49:9f:f5:
         b0:eb:e9:e5:78:ee:4b:b4:8f:89:62:ed:88:d0:7c:45:b9:08:
         f4:25:14:aa:15:bd:83:25:11:ac:b4:7d:b0:ae:74:2b:48:4b:
         d7:68:af:f7:3b:68:df:a9:fd:b4:cc:28:31:d3:0c:40:39:fa:
         f6:3f:b7:56:24:f1:53:ba:dd:cb:fa:6a:37:21:5e:2e:bb:ac:
         98:11:66:b5:00:ea:4a:1e:33:9a:18:cc:bf:1c:9d:42:ba:eb:
         1c:6f:d0:ef:4a:44:f1:6c:28:4f:c0:ae:58:2c:23:c0:6f:b5:
         a9:7b:06:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 17:10:22 2026 by rpki-client