Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/a54febe9-525e-3cd3-a84b-a8540018e194.roa
File:                     a54febe9-525e-3cd3-a84b-a8540018e194.roa (raw, json)
Hash identifier:          xA6Y5sOXEw1xsMQ2Z9/OTPoSrs/DDvreAedDvEJfHPg=
Subject key identifier:   E3:4C:3E:E4:16:87:5C:D2:E2:7F:12:C9:7A:59:42:3A:8E:28:7B:E2
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F4328584E90BA4EB0CF565798EF6DA080
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/a54febe9-525e-3cd3-a84b-a8540018e194.roa
Signing time:             Mon 20 Jul 2026 21:00:11 +0000
ROA not before:           Mon 20 Jul 2026 21:00:11 +0000
ROA not after:            Sun 18 Oct 2026 21:00:11 +0000
asID:                     8881
IP address blocks:        166.0.34.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:90:ba:4e:b0:cf:56:57:98:ef:6d:a0:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Jul 20 21:00:11 2026 GMT
            Not After : Oct 18 21:00:11 2026 GMT
        Subject: CN=7961a57b-7173-428c-8b5b-aec28349cbe2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:76:c3:11:6d:8d:3e:69:f1:5b:91:f5:a9:1d:
                    b7:0f:f9:42:28:c0:78:7e:ed:56:f2:00:25:93:5c:
                    73:b6:9c:2f:9b:98:6a:47:f2:0b:bf:40:3c:b9:c5:
                    8c:a4:3d:fc:7c:a7:08:0d:1d:e1:86:51:8f:11:12:
                    70:a9:8d:5c:2c:dc:6a:03:cb:6e:27:38:40:84:56:
                    2c:95:59:b4:7d:6d:75:e9:a2:43:68:49:c0:93:a9:
                    3c:53:6f:e4:83:8d:46:eb:4e:fe:42:2c:a5:d3:57:
                    7e:b3:7e:49:91:26:fe:62:7e:ee:d5:a6:fa:ca:d9:
                    ad:c5:75:51:3d:d4:31:ce:3f:68:97:b8:df:9c:c9:
                    d8:d4:59:98:10:f4:b2:10:20:8e:fe:97:ee:6a:66:
                    87:83:e7:dc:bc:b4:5f:13:3e:46:7f:db:f9:bb:a4:
                    e4:12:27:32:f4:ca:a8:87:b3:ee:37:cc:22:36:cd:
                    d7:14:fe:40:be:87:eb:a7:65:fd:43:a7:d9:12:31:
                    a9:f4:bd:d3:73:d9:7e:e8:03:df:20:72:f0:b4:57:
                    34:a3:01:aa:bc:7a:b6:d8:c2:0c:ed:35:07:3c:da:
                    e8:ac:27:ac:86:ea:47:51:d8:ff:09:ca:5d:36:82:
                    80:27:6b:31:a6:53:98:d4:10:66:51:29:0c:21:d3:
                    a8:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:4C:3E:E4:16:87:5C:D2:E2:7F:12:C9:7A:59:42:3A:8E:28:7B:E2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/a54febe9-525e-3cd3-a84b-a8540018e194.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.0.34.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0b:18:42:94:ff:a6:fb:a5:c0:9b:2d:8e:45:2c:7e:a6:b3:51:
         c6:c2:a3:88:9f:fd:f9:ac:2e:df:e4:d6:27:5f:04:68:03:b7:
         eb:c5:19:c5:19:ad:f9:c2:4b:e4:a5:01:e0:db:b9:ca:73:5c:
         48:ec:77:b6:d5:32:2c:a6:c4:b7:18:67:08:44:52:bc:8c:53:
         d8:b1:09:56:fa:a3:77:c4:57:a1:07:07:a2:51:ad:43:45:39:
         de:5a:42:04:eb:22:e8:a5:26:3c:f5:90:27:95:46:ac:53:f2:
         08:30:b2:1d:45:96:b6:d8:bd:9f:d0:a0:d8:32:3b:e2:e7:9e:
         b6:4a:a4:41:73:e2:f2:72:2d:43:46:0a:9c:0e:30:57:d1:fd:
         9c:5d:5c:e1:c6:52:e9:1e:8d:23:d0:f7:93:00:e6:47:d8:9c:
         2e:88:aa:b4:47:6e:f3:66:20:1a:41:6d:ff:c4:48:36:ae:a7:
         74:db:b9:fe:d7:82:f8:f0:e2:67:3d:b1:9c:ea:62:16:a9:89:
         51:8f:73:2d:0c:a6:b6:01:73:0c:02:98:70:fe:38:3d:ab:c7:
         9c:a5:3b:c8:9c:bd:e6:53:bb:65:9d:29:55:d8:df:26:7e:3c:
         db:c7:ac:1b:48:03:b2:bf:28:63:ca:b9:2e:6b:9e:83:69:2c:
         a5:78:87:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 04:04:37 2026 by rpki-client