Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/fcefb308-d67f-3b12-b9ef-e8640af8120b.roa
File:                     fcefb308-d67f-3b12-b9ef-e8640af8120b.roa (raw, json)
Hash identifier:          2FSoW4aFTWuTLRR/ExLRntp1FJGFt2kICt9ygjJT4dY=
Subject key identifier:   62:63:13:C5:1D:2A:9D:CC:F7:06:EC:B4:3F:60:9A:92:55:A3:4C:AC
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F4328584DB0758A11F29FC1B2C188FE80
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/fcefb308-d67f-3b12-b9ef-e8640af8120b.roa
Signing time:             Fri 01 May 2026 13:00:30 +0000
ROA not before:           Fri 01 May 2026 13:00:30 +0000
ROA not after:            Thu 30 Jul 2026 13:00:30 +0000
asID:                     8881
IP address blocks:        166.0.47.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:b0:75:8a:11:f2:9f:c1:b2:c1:88:fe:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: May  1 13:00:30 2026 GMT
            Not After : Jul 30 13:00:30 2026 GMT
        Subject: CN=590dab8f-7398-42ce-bf3c-76c686893a94
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:80:63:56:04:7f:08:1a:05:83:a6:1d:38:07:
                    13:37:8b:80:37:08:7c:1f:61:5f:9d:f1:29:f1:cc:
                    d2:25:05:7c:37:af:4b:70:c2:19:7e:20:47:6c:e5:
                    7d:ff:35:59:e6:1d:2d:21:bd:6b:5e:06:fd:64:b1:
                    f9:b3:38:50:9d:9f:0b:1a:4c:07:46:46:ae:79:48:
                    f1:6e:4c:f7:25:a2:27:e1:9e:2b:d3:9b:14:1c:f2:
                    d3:97:31:45:00:79:1d:f6:10:1d:a1:a9:b7:e7:7d:
                    32:be:bd:85:ca:11:a0:08:a5:79:d7:cc:c4:a9:ff:
                    0f:07:56:7b:2a:2e:e8:72:a9:81:c0:10:ba:ff:0f:
                    70:bb:27:6e:55:81:e4:23:c5:61:59:b1:3b:87:f1:
                    dd:c4:29:01:3b:80:56:42:d3:78:8f:8a:0a:41:ce:
                    86:06:c7:0c:39:1e:4a:b2:91:6a:af:51:2e:22:4e:
                    43:49:65:40:fa:e1:fa:61:c4:0a:22:62:76:1c:85:
                    da:48:6b:7c:99:17:cd:92:af:13:05:08:93:c1:51:
                    44:cd:dd:e6:c5:de:6d:65:bc:79:28:d0:08:9e:31:
                    ff:bf:ca:c9:c9:e2:79:c2:82:31:8c:a4:a1:1c:f1:
                    a0:49:6f:e2:41:80:80:17:60:15:22:66:50:79:67:
                    df:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:63:13:C5:1D:2A:9D:CC:F7:06:EC:B4:3F:60:9A:92:55:A3:4C:AC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/fcefb308-d67f-3b12-b9ef-e8640af8120b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.0.47.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9b:46:32:37:b9:8e:41:28:a9:de:1e:43:ca:54:87:88:2a:b5:
         fd:29:ae:cc:09:a8:b5:4f:b2:fa:5f:a0:b9:9b:33:3f:9e:1b:
         91:5d:cd:b0:0c:1a:a1:f7:c0:80:87:1a:6f:cb:51:b9:71:7d:
         e4:f5:a9:39:61:36:80:68:7f:59:21:5f:da:9e:b3:bf:29:f4:
         e9:90:65:6e:a1:e2:2c:29:9d:a6:32:1a:34:a2:fd:c0:25:5b:
         3d:47:23:2f:4e:6e:14:49:a2:a5:5e:83:db:9b:61:0f:93:a1:
         22:63:fb:41:da:7a:58:e3:50:e1:05:67:e7:05:21:94:e5:50:
         51:60:64:c1:b1:63:a4:20:e9:37:08:b3:fe:90:f3:35:9c:b1:
         a7:33:31:6f:9e:b3:00:15:d4:21:51:3d:e7:22:f7:71:31:0b:
         4b:da:27:2f:c7:cc:de:4b:ad:7f:62:66:c6:fb:c4:6a:5a:aa:
         4a:2a:0c:79:b9:9a:01:4c:cf:df:79:ce:a1:ef:a8:89:94:43:
         3f:36:57:b4:01:af:a0:a7:61:c3:e7:7a:2b:b5:6f:96:74:1d:
         e6:17:2c:46:88:7e:b7:83:7a:2d:6f:72:e3:3f:1a:40:a2:de:
         bd:67:7c:24:7a:fd:49:e6:f2:5e:58:02:72:86:76:59:50:1c:
         3b:bc:35:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:01:42 2026 by rpki-client