Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/61a18bdf-08ff-390f-830b-38c34b5553b9.roa
File:                     61a18bdf-08ff-390f-830b-38c34b5553b9.roa (raw, json)
Hash identifier:          tB2HEivBdcwjdmBNLPGuUsbprbX5s2xaqZK9YjlNpUI=
Subject key identifier:   7A:56:1B:04:AA:5B:3E:C6:15:55:70:A9:F4:90:24:9D:F6:AE:8D:91
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F4328584D343A22935C61E26FAD46BE80
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/61a18bdf-08ff-390f-830b-38c34b5553b9.roa
Signing time:             Wed 18 Mar 2026 01:00:33 +0000
ROA not before:           Wed 18 Mar 2026 01:00:33 +0000
ROA not after:            Tue 16 Jun 2026 01:00:33 +0000
asID:                     58061
IP address blocks:        166.1.75.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:34:3a:22:93:5c:61:e2:6f:ad:46:be:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Mar 18 01:00:33 2026 GMT
            Not After : Jun 16 01:00:33 2026 GMT
        Subject: CN=983593d7-b4e2-48ab-bd91-56f0b805e9ac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:2a:de:da:10:bf:93:86:5f:c7:e6:e6:3d:04:
                    b0:7b:1b:04:cf:d0:21:79:e4:a7:8c:0d:c6:2d:13:
                    77:79:6c:a4:f0:4c:da:0b:82:f0:c2:ad:29:60:25:
                    46:af:59:ac:b6:ee:0d:5a:e2:d0:3e:53:d8:85:e7:
                    c6:46:c9:5c:2e:2d:2f:f1:86:59:6e:2f:ea:ab:0a:
                    6c:4a:60:46:74:bd:ce:a9:8c:ce:de:6f:a8:fd:62:
                    81:fd:bd:63:65:4e:7a:14:74:85:df:26:bd:97:50:
                    82:df:7f:17:51:88:a4:9c:ed:d2:e4:f3:34:6c:25:
                    9c:78:2a:e8:d1:e5:62:34:42:1d:58:c8:e6:c8:f6:
                    10:72:9c:62:0c:94:98:4e:3a:24:f3:95:33:87:4d:
                    70:97:94:1c:a2:78:1c:b4:bd:15:f6:9e:b4:0a:0b:
                    02:80:25:53:06:db:48:d7:77:8b:a6:81:65:2f:68:
                    37:cc:b2:71:cc:2f:47:27:75:68:8b:1c:88:e8:39:
                    59:a6:c4:ec:34:ff:bc:66:78:1f:2b:a7:cd:15:6d:
                    ce:5d:7f:f8:9a:3d:2e:28:53:dd:19:db:20:cb:ba:
                    ed:8e:63:e1:d5:e8:9d:45:b6:13:22:e4:33:6e:8f:
                    2c:8d:68:b4:3d:5f:4d:3e:e1:03:26:c7:87:b5:64:
                    94:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:56:1B:04:AA:5B:3E:C6:15:55:70:A9:F4:90:24:9D:F6:AE:8D:91
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/61a18bdf-08ff-390f-830b-38c34b5553b9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.1.75.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         80:d0:7f:c0:21:34:c8:81:6c:33:57:40:44:b1:da:7c:2d:e4:
         1e:db:ff:da:a1:bc:47:7a:41:9e:e3:3e:91:fd:b9:24:87:b2:
         96:a4:cd:90:3d:aa:46:94:38:e9:07:2e:7b:50:37:01:5e:31:
         4b:ff:ae:31:3c:06:2c:bd:53:cd:64:ae:50:2a:d8:8f:ca:ea:
         ec:3c:fa:50:6f:73:64:60:86:42:17:6b:2e:bf:9f:91:29:d9:
         83:b5:6d:a0:19:b5:22:03:85:19:0d:d1:9d:97:42:6e:74:f0:
         a6:ae:d5:7b:e8:80:87:b4:29:25:7e:f2:0a:51:e8:ff:dc:4a:
         49:5b:3c:e0:49:d6:84:76:21:4c:b6:13:0e:73:ae:2f:cf:45:
         b1:28:6c:f8:c7:6c:03:3f:bc:88:1b:ec:b2:72:e3:74:63:57:
         a6:06:a7:87:c5:38:e3:a3:ad:5d:f4:7e:67:84:bc:8d:76:3b:
         aa:02:f7:56:92:df:e8:fc:1f:50:5a:aa:d0:fe:a0:ba:b3:e8:
         42:61:f4:c8:ab:2f:46:3e:fc:69:f6:8d:27:a1:53:32:c6:df:
         14:59:09:48:66:1c:09:c2:c3:e4:ba:83:1d:bb:ee:0d:71:89:
         90:da:10:de:2b:be:f0:77:4e:74:44:ff:92:46:30:54:b4:df:
         69:3e:4e:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 15:43:33 2026 by rpki-client