Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/e25875ea-0050-3697-89b3-dc43d945ab84.roa
File:                     e25875ea-0050-3697-89b3-dc43d945ab84.roa (raw, json)
Hash identifier:          LlLt9RGLKiu8um4iQS8ZAryQlJgMp1BW+6OS7exU6bg=
Subject key identifier:   8A:5D:88:7F:20:BA:30:EC:08:56:1E:28:0D:E3:89:6F:74:2A:F5:96
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F4328584D1DE491EE1CDAFEC6C983D400
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/e25875ea-0050-3697-89b3-dc43d945ab84.roa
Signing time:             Tue 10 Mar 2026 01:00:31 +0000
ROA not before:           Tue 10 Mar 2026 01:00:31 +0000
ROA not after:            Mon 08 Jun 2026 01:00:31 +0000
asID:                     47516
IP address blocks:        166.1.91.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:1d:e4:91:ee:1c:da:fe:c6:c9:83:d4:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Mar 10 01:00:31 2026 GMT
            Not After : Jun  8 01:00:31 2026 GMT
        Subject: CN=e8a8eeb8-1e9e-47e1-8e3c-4aa6031cc67c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:24:c4:07:b3:6a:fc:44:ea:fd:fd:5e:06:29:
                    ce:c4:7e:09:c8:72:f7:18:a3:81:d5:83:fb:8d:31:
                    a8:31:cb:af:83:3c:7a:ad:64:14:4e:fd:14:b1:d4:
                    09:db:f4:ab:c9:93:52:43:3d:31:b0:bb:ee:5c:df:
                    00:59:fb:5c:81:da:e1:a9:d6:ce:b7:6d:26:87:0a:
                    ba:42:68:c0:bf:c9:ea:cb:af:cc:59:21:61:3c:d0:
                    79:12:3e:f6:d6:70:12:5d:40:67:b0:b3:65:7c:3c:
                    02:67:7a:af:e5:6a:05:d0:02:ba:4e:b7:0f:e0:00:
                    5a:79:96:1a:9b:ce:4e:0b:48:be:8a:55:80:0a:cd:
                    a2:71:5e:46:1d:c6:c2:a5:1c:47:8c:55:6f:24:aa:
                    d6:e0:1e:7d:f5:ab:e9:84:77:7c:63:0d:4a:cf:9b:
                    d6:14:f1:b1:fb:fe:59:91:4a:93:ea:97:e4:7a:a0:
                    18:cc:1c:2b:45:64:e7:3a:9f:99:2b:23:00:19:36:
                    0c:78:a6:ef:6f:a5:5d:5d:30:6c:64:5a:2c:44:ca:
                    da:2c:21:05:fa:7c:12:54:3b:3f:c5:4c:32:b3:12:
                    c5:3f:71:79:1f:81:83:ee:55:51:6b:5c:fc:7f:48:
                    66:2e:90:dd:e6:65:62:39:34:8b:38:7c:4c:be:11:
                    15:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:5D:88:7F:20:BA:30:EC:08:56:1E:28:0D:E3:89:6F:74:2A:F5:96
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/e25875ea-0050-3697-89b3-dc43d945ab84.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.1.91.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         68:ed:6b:6a:f7:bc:9b:d1:74:64:2d:34:ed:27:3e:0a:2b:24:
         1e:3a:cc:3d:88:74:6d:ec:52:31:91:8b:17:43:b9:bb:d1:33:
         20:29:c7:aa:b2:db:79:47:b9:f7:62:2d:6c:d5:8c:14:68:c4:
         dc:c8:fc:de:2b:8b:9a:56:54:b6:5c:91:1b:88:dd:f1:7d:4c:
         9d:b3:c2:5c:ac:9a:23:29:71:eb:6d:d8:0b:25:fc:cd:65:05:
         08:cc:c7:08:05:2d:ce:2d:d2:12:43:41:52:1b:fc:9b:89:8e:
         8c:9a:b3:46:f0:a9:ae:27:1d:3d:cb:50:29:ed:ef:13:a0:55:
         3b:be:53:00:37:61:0c:b1:89:2b:a2:63:d6:16:cb:ed:d4:46:
         2c:b4:f4:d8:ae:b3:40:47:84:54:75:88:b3:8a:b6:1b:4f:cc:
         88:fa:12:69:b5:85:9d:79:b7:eb:80:8e:63:98:94:32:43:e9:
         eb:0f:86:14:bc:02:a3:0c:63:d7:8f:e7:89:de:0d:89:75:b2:
         98:8f:b9:e5:0c:62:f5:5f:cd:44:c6:0d:4a:5b:3e:a1:98:4e:
         5a:89:7d:f5:80:55:f3:a1:9a:3b:3d:c1:f8:b6:ae:cd:b7:f1:
         5d:ab:5d:f8:f0:e6:13:bd:f9:c1:71:5e:28:b7:8d:c5:f0:11:
         d1:34:56:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 14:34:03 2026 by rpki-client