Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/76a6fd65-088b-37a5-b934-e1834109187e.roa
File:                     76a6fd65-088b-37a5-b934-e1834109187e.roa (raw, json)
Hash identifier:          3/I/oxaKj8j4bjHspZ5t1a4nOVLmSaC/izg7CSBJqh8=
Subject key identifier:   5B:C7:E4:7B:F3:D5:A8:CE:92:BC:91:75:35:1F:9B:5F:D2:D4:1C:65
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F4328584E561A0F23CF3A625C4F635D40
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/76a6fd65-088b-37a5-b934-e1834109187e.roa
Signing time:             Mon 29 Jun 2026 21:00:12 +0000
ROA not before:           Mon 29 Jun 2026 21:00:12 +0000
ROA not after:            Sun 27 Sep 2026 21:00:12 +0000
asID:                     49770
IP address blocks:        166.1.103.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:56:1a:0f:23:cf:3a:62:5c:4f:63:5d:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Jun 29 21:00:12 2026 GMT
            Not After : Sep 27 21:00:12 2026 GMT
        Subject: CN=f7f1248f-ad25-4123-8b60-14f850235ae5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:73:dc:e2:f0:4d:3e:54:6c:d4:49:9e:96:70:
                    d3:ad:9d:dd:87:ce:bd:a8:ce:42:61:cc:a0:35:f8:
                    cb:2f:8d:5a:5c:3b:d9:56:df:68:fa:99:83:b3:2c:
                    23:56:eb:45:4e:cb:e0:0f:b2:80:bf:a2:81:52:07:
                    50:7a:f3:ac:a5:e4:95:2c:21:61:b0:8a:15:56:1f:
                    85:96:ae:7f:1b:5b:48:56:4c:9b:06:be:26:1b:1b:
                    0f:97:80:6b:7d:17:5e:d1:a7:e4:b3:9b:16:80:c7:
                    d9:cf:b1:b8:2f:ef:69:08:bd:7f:98:49:94:2d:d8:
                    39:c3:ad:77:68:05:51:aa:27:05:f7:f3:33:d2:f6:
                    71:6d:9b:9e:a8:67:e9:0f:60:fd:78:5c:bc:56:a8:
                    b3:2e:b7:a1:42:ce:1d:5e:80:93:eb:5d:9b:bb:7c:
                    81:a6:51:61:97:34:7f:d0:60:59:e6:7e:b0:cf:03:
                    8e:ad:e8:50:76:c5:02:9f:eb:72:15:80:ba:ea:35:
                    82:ec:01:be:df:c3:e6:4e:c1:83:91:b6:c2:77:37:
                    00:ea:43:a6:18:5c:89:aa:70:27:d2:a6:5f:48:1d:
                    d4:b6:42:2c:9f:0a:b3:6f:84:2f:f2:52:11:ea:f6:
                    c0:82:8a:b0:3e:37:11:c3:ff:d5:34:e6:53:e1:c0:
                    3b:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:C7:E4:7B:F3:D5:A8:CE:92:BC:91:75:35:1F:9B:5F:D2:D4:1C:65
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/76a6fd65-088b-37a5-b934-e1834109187e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.1.103.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8b:ed:c9:97:21:1c:f4:53:66:c6:f6:6c:af:3c:84:40:c5:d9:
         38:6b:9b:8f:cc:14:c2:55:16:66:96:d8:e8:cd:72:23:a4:a1:
         08:01:7f:a7:f7:d4:b2:18:2c:b2:52:5d:54:49:ec:ea:83:8f:
         c5:d9:91:d6:ea:92:76:30:29:fa:94:0a:06:bb:5e:fb:33:35:
         24:35:58:59:62:b3:1c:e8:7a:e6:e0:ef:e9:5f:8b:66:88:11:
         3a:3e:56:c1:89:9c:b9:9b:0d:33:94:ae:10:04:74:04:1d:c9:
         81:ad:bc:dd:d3:93:8e:59:59:a9:bc:cc:d1:1d:2e:3a:a8:5a:
         b6:b1:9e:01:09:e0:0b:11:1f:f9:f8:5e:c1:70:e4:af:23:06:
         ae:6c:65:ba:f4:2b:12:fa:3f:52:e5:72:67:94:3a:e2:9c:eb:
         86:3c:be:79:df:2c:c1:b0:1c:c6:ad:be:ab:01:3b:0f:74:11:
         25:6a:8a:7d:34:fc:50:65:17:20:cd:6b:82:48:c5:96:46:59:
         e7:3a:7a:a0:f5:cc:eb:e4:91:04:b0:aa:6a:a7:c3:49:9e:3e:
         7a:64:fb:ef:ba:4d:cd:f8:02:ee:c8:54:ae:80:40:0b:cd:cd:
         be:54:41:5a:c3:40:5e:b2:2b:9d:35:79:3f:1c:fa:8b:d2:40:
         d9:f0:fd:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 05:18:37 2026 by rpki-client