Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/2881a4da-ae08-39ce-a86f-5d82f6749409.roa
File:                     2881a4da-ae08-39ce-a86f-5d82f6749409.roa (raw, json)
Hash identifier:          vkbezfBcLtvSxnwFQUuUi+hrCqQfIxD1RhNkWaIKbyI=
Subject key identifier:   B0:FD:48:17:45:A1:66:1E:45:E1:22:7B:0F:C7:9C:61:76:43:54:67
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F4328584AB0BB6EC830CED3B464268F80
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/2881a4da-ae08-39ce-a86f-5d82f6749409.roa
Signing time:             Wed 30 Jul 2025 13:00:40 +0000
ROA not before:           Wed 30 Jul 2025 13:00:40 +0000
ROA not after:            Tue 28 Oct 2025 13:00:40 +0000
asID:                     62240
IP address blocks:        166.1.245.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 06 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:b0:bb:6e:c8:30:ce:d3:b4:64:26:8f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Jul 30 13:00:40 2025 GMT
            Not After : Oct 28 13:00:40 2025 GMT
        Subject: CN=fab9a7c1-6fa9-4a60-90df-5602f0f56ae1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:0c:a8:e2:48:ec:c4:b8:d3:ff:c2:94:23:dd:
                    02:17:54:ac:5c:98:d9:62:14:ee:5a:79:07:e8:f4:
                    01:87:2f:93:e2:43:54:27:b6:08:dd:5c:bd:c4:48:
                    2e:42:b8:f3:be:84:ba:bb:c2:3e:0e:7e:af:5e:90:
                    41:59:1f:1c:08:32:fc:73:82:c3:f7:8d:9b:f7:2c:
                    df:bc:4e:e7:2b:64:f0:b6:7f:e6:19:ab:a9:c9:d7:
                    bf:f3:58:b0:f7:e1:bc:25:7d:e6:72:41:24:d7:d9:
                    cd:35:77:7f:ea:b3:3e:32:72:3a:fe:1e:0e:8f:c0:
                    2c:8d:81:35:1d:6a:e6:2e:67:38:c6:cc:96:18:73:
                    83:3a:25:b9:6a:d0:5e:f9:f4:1b:91:06:af:2b:0f:
                    80:72:37:9c:ad:34:6a:ff:5e:9e:c8:ec:f6:e9:c5:
                    f5:82:73:74:20:9f:0f:16:7e:19:f9:06:80:4c:69:
                    da:fc:83:17:94:ce:2f:af:93:b3:ea:5b:3b:45:d0:
                    b7:44:b9:2e:d9:bc:b4:c8:eb:cb:81:f1:aa:fc:67:
                    04:c8:f2:a5:0e:63:ba:e1:22:78:7d:98:a7:ef:04:
                    61:74:23:8d:92:92:6d:bb:18:e7:21:76:6b:07:40:
                    fe:5e:69:97:7c:c0:4d:65:3e:c6:fc:8f:bc:f0:dd:
                    35:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:FD:48:17:45:A1:66:1E:45:E1:22:7B:0F:C7:9C:61:76:43:54:67
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/2881a4da-ae08-39ce-a86f-5d82f6749409.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.1.245.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1b:be:8d:84:03:36:4f:b2:3a:b1:c7:06:fd:50:bf:eb:8f:16:
         65:71:28:da:83:8d:5c:66:bb:c9:49:8e:e9:b7:3b:11:dd:7b:
         78:85:2c:ef:e7:e5:37:3a:b9:37:c6:dc:6e:b0:ef:5c:fb:18:
         48:07:69:68:e7:14:19:c4:c7:85:5b:aa:1a:14:e7:0c:41:5f:
         27:c2:46:87:ad:86:b5:36:56:8c:86:e1:aa:19:06:66:1d:3f:
         8d:46:c7:06:c6:a9:30:f9:24:d3:e8:4b:81:21:35:f0:5d:ae:
         70:4b:5e:24:3b:c1:57:63:25:97:e4:7d:19:9d:b7:a0:dd:66:
         81:af:15:a5:91:48:55:20:be:ce:c5:d9:7d:f7:7a:c3:63:1b:
         7a:f1:ac:a7:f5:c5:5e:4e:75:f8:c5:54:09:98:cc:93:d0:ae:
         83:88:df:d9:f5:95:05:52:54:06:c9:ba:ba:30:4b:8d:d9:c2:
         ad:49:c1:a4:be:2c:ec:08:2c:ca:70:69:c1:6d:d6:8e:0b:dd:
         b2:7f:8c:e5:d9:c2:9a:59:ef:0d:85:0a:6c:90:55:f8:ee:d3:
         af:2e:9f:55:65:f1:cd:d2:6a:a4:57:9c:fa:4e:db:fe:fc:96:
         f2:ef:cf:73:f0:7e:1c:7a:e0:9b:79:59:f8:62:99:c2:a5:b0:
         6e:a5:5d:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 08:18:53 2025 by rpki-client