Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/5846f7fa-c31b-3157-83ba-b174acac7fac.roa
File:                     5846f7fa-c31b-3157-83ba-b174acac7fac.roa (raw, json)
Hash identifier:          JgRj6I0U99s9qp0HPtzgC0Frnr/PeQiZM4xfDj8cjok=
Subject key identifier:   83:DA:C0:84:F4:B3:C9:A5:84:AF:97:B1:8D:BA:D3:CE:FD:DC:20:A7
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F4328584E7A64D42EA7AA1D6497B25D00
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/5846f7fa-c31b-3157-83ba-b174acac7fac.roa
Signing time:             Sun 12 Jul 2026 21:00:13 +0000
ROA not before:           Sun 12 Jul 2026 21:00:13 +0000
ROA not after:            Sat 10 Oct 2026 21:00:13 +0000
asID:                     6939
IP address blocks:        166.0.236.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:7a:64:d4:2e:a7:aa:1d:64:97:b2:5d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Jul 12 21:00:13 2026 GMT
            Not After : Oct 10 21:00:13 2026 GMT
        Subject: CN=daca987d-d506-4987-a45d-537f0b812af1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:ee:6d:bc:9c:df:73:27:17:a3:4a:2c:cd:98:
                    74:fc:aa:49:e7:e5:d1:3a:92:92:61:2e:0a:a0:a9:
                    af:77:52:81:c8:3a:b5:43:0d:e5:74:84:17:e5:ad:
                    c6:0c:b5:90:4b:43:c7:21:6d:f3:22:6a:98:91:77:
                    56:92:66:92:f9:92:5e:d4:43:05:bf:0a:ce:0b:40:
                    1d:ac:ac:04:40:d8:b9:da:35:93:51:20:7f:09:e4:
                    1a:d4:1b:45:2f:7e:f7:1f:da:71:06:42:b7:07:53:
                    1c:68:fb:83:53:92:40:89:92:15:b8:30:17:ac:21:
                    ec:8f:aa:e5:30:a8:07:55:45:3e:42:d0:65:e5:1d:
                    18:6a:fb:35:de:06:1b:07:4d:75:94:5b:86:b0:af:
                    e4:92:ad:07:fc:ef:c7:30:4e:65:c7:64:60:5c:7d:
                    9e:1a:df:18:cc:22:bf:67:4d:92:e9:23:d5:ec:aa:
                    59:5a:8b:b4:3f:c0:6d:d4:18:c4:2b:21:c1:c6:d3:
                    98:6d:3b:55:2e:c8:2c:f3:af:ab:ac:ec:ba:58:fd:
                    56:86:bc:61:6d:59:3a:7b:39:2a:9b:60:03:84:53:
                    7a:bf:3f:0b:75:03:33:eb:20:49:c9:4d:5b:ac:7a:
                    74:7e:16:31:9d:10:3f:c1:2d:10:9b:fa:c3:6a:8f:
                    d3:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:DA:C0:84:F4:B3:C9:A5:84:AF:97:B1:8D:BA:D3:CE:FD:DC:20:A7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/5846f7fa-c31b-3157-83ba-b174acac7fac.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.0.236.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a7:a3:b6:df:25:79:e0:6c:8b:69:74:70:3c:b8:23:0d:f1:39:
         61:77:c3:7b:ed:39:43:0c:63:20:fc:69:c5:1b:b2:e1:ac:57:
         54:b9:2f:1e:a6:fd:28:18:a5:e3:90:a7:68:71:cc:fa:24:c8:
         c1:89:8f:c0:36:1c:56:e1:dd:d3:97:7d:19:05:b9:35:9e:a3:
         e4:6c:b2:37:56:5f:61:10:71:d0:b1:89:cc:83:d8:d9:ad:2e:
         da:b1:d7:06:6f:41:0c:c0:a1:7b:87:41:87:b9:80:40:45:7e:
         40:6f:98:63:17:44:29:94:03:cc:d1:f6:d0:bc:e1:0e:4c:3a:
         92:71:08:ab:7d:23:74:47:8e:05:49:71:81:58:27:1b:02:7f:
         28:4d:f4:2f:85:9f:ca:14:1a:31:a8:a0:86:aa:25:cc:23:3b:
         fd:9f:22:bd:c3:41:20:f1:8f:93:81:83:92:20:3e:a6:f6:1d:
         62:b6:b1:fd:db:96:f9:7f:57:26:40:a2:eb:b2:4a:5e:89:56:
         75:d1:2c:89:d4:e6:14:fd:31:ad:2a:29:a7:4a:16:b6:19:71:
         87:f9:de:df:39:14:b8:c5:b5:b3:2b:8d:c2:b2:75:be:68:e3:
         19:0f:70:b4:5b:64:f1:de:7e:6f:30:f9:b1:a1:e7:b7:d8:05:
         49:6f:88:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:42:01 2026 by rpki-client