Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/7ae593e6-d90e-33fc-a0db-82d16ee38926.roa
File:                     7ae593e6-d90e-33fc-a0db-82d16ee38926.roa (raw, json)
Hash identifier:          wIs1+837OgYfLpX/Rs/dDPIIwkARWBQXwJqjdx8e1c4=
Subject key identifier:   D2:DC:17:0C:B9:67:CF:1E:C1:46:E5:CD:47:21:66:45:21:46:B5:D0
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F4328584E97B50006D0C761579871A2B0
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/7ae593e6-d90e-33fc-a0db-82d16ee38926.roa
Signing time:             Thu 23 Jul 2026 09:00:11 +0000
ROA not before:           Thu 23 Jul 2026 09:00:11 +0000
ROA not after:            Wed 21 Oct 2026 09:00:11 +0000
asID:                     9009
IP address blocks:        166.0.140.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:97:b5:00:06:d0:c7:61:57:98:71:a2:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Jul 23 09:00:11 2026 GMT
            Not After : Oct 21 09:00:11 2026 GMT
        Subject: CN=3e344a99-a411-4476-82fe-fc12c73c3950
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:cc:c7:95:75:a7:12:13:e9:9f:3b:b2:b7:99:
                    8d:75:36:df:a9:ec:30:28:11:6b:17:9a:98:8a:9d:
                    94:9a:4c:ce:13:2a:a4:a7:9c:4e:54:a0:6b:d8:4e:
                    03:9e:ea:be:40:f0:3a:f6:31:8b:e1:e6:1e:5d:b3:
                    61:d7:ea:71:97:53:4b:90:67:26:98:a9:42:d0:6c:
                    0f:e1:f7:1e:ce:cd:bf:f9:9f:c3:5e:83:80:af:d9:
                    bf:98:5b:a6:9d:f5:82:65:22:10:11:d0:a7:0b:34:
                    a7:71:06:f6:da:cb:e9:b0:b0:55:0e:0e:cd:b6:07:
                    f7:3a:4e:85:c1:df:00:6a:a4:f3:89:4a:97:29:a1:
                    ec:d9:32:a4:40:c1:ec:5d:87:c0:58:b5:04:66:e0:
                    06:66:f5:97:b4:e1:b2:b0:a2:25:e8:fa:c4:13:bd:
                    50:21:a9:16:59:f9:f5:0e:77:ce:6f:b3:39:5d:bd:
                    f6:9f:ac:a0:2e:4d:58:b8:17:8e:8c:d9:3f:e3:92:
                    78:23:ca:30:cf:ab:06:ff:78:ab:88:34:05:15:6d:
                    30:0f:60:a2:5b:6f:c9:a7:43:e2:07:00:b7:d1:1b:
                    c4:34:93:3d:93:ee:54:72:80:ac:bd:65:bf:7c:f1:
                    a4:c8:dc:32:b7:fb:f4:41:52:e4:28:f3:cb:e3:8e:
                    70:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:DC:17:0C:B9:67:CF:1E:C1:46:E5:CD:47:21:66:45:21:46:B5:D0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/7ae593e6-d90e-33fc-a0db-82d16ee38926.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.0.140.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4e:48:a6:ad:66:0a:bd:e9:80:c7:7b:12:5d:0f:70:42:7b:c6:
         b2:5a:12:8e:81:37:d1:39:56:86:23:b0:38:8e:57:c5:db:b6:
         95:35:3f:57:a5:32:c5:84:a1:d6:8d:50:23:66:5c:f4:9f:94:
         c6:d9:97:17:77:c8:2f:19:e3:a8:c4:78:ae:a5:01:ee:4f:ac:
         2e:8e:72:7d:20:49:e0:95:b3:fd:69:32:b2:13:e4:ec:bc:19:
         4f:98:3a:9a:0a:cd:97:f2:d2:f3:dc:83:9c:24:1d:08:c4:74:
         56:cc:e4:16:29:ca:bc:5a:cc:78:4e:e8:c8:73:36:d9:0b:ed:
         7f:11:b3:d7:70:38:ff:0c:a7:f9:d5:46:70:eb:7b:df:f3:55:
         68:f4:55:63:70:fa:9d:2f:14:a4:39:b4:7d:77:84:1c:00:4d:
         ad:b5:59:18:b9:28:1f:4d:4a:ff:83:fe:ee:08:66:5d:05:47:
         bc:8b:6f:42:de:f2:82:20:f0:e7:77:df:ae:76:66:b7:8b:84:
         86:f0:f5:d7:c0:08:08:95:d1:3b:36:61:39:4e:fe:a0:89:40:
         4e:4f:a0:38:20:50:26:8b:0d:b7:54:74:ae:27:35:c7:82:68:
         48:dc:de:69:05:39:bb:4a:b7:31:1b:d5:8c:8c:9d:94:9b:01:
         ad:e5:87:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 08:58:45 2026 by rpki-client