Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/3cce6d36-dd4f-39a4-aaf6-786185f487b2.roa
File:                     3cce6d36-dd4f-39a4-aaf6-786185f487b2.roa (raw, json)
Hash identifier:          c/4zzwhoP0HeDKhy8C0iV26zKVuzgkhATWpEQGZxvK8=
Subject key identifier:   52:AE:F1:28:A0:79:AC:CF:B2:5B:3E:11:34:BB:EB:6C:58:9D:E1:72
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F4328584A7E7B7B92A10EB932EFA45500
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/3cce6d36-dd4f-39a4-aaf6-786185f487b2.roa
Signing time:             Sat 12 Jul 2025 13:01:04 +0000
ROA not before:           Sat 12 Jul 2025 13:01:04 +0000
ROA not after:            Fri 10 Oct 2025 13:01:04 +0000
asID:                     132335
IP address blocks:        166.0.242.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:7e:7b:7b:92:a1:0e:b9:32:ef:a4:55:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Jul 12 13:01:04 2025 GMT
            Not After : Oct 10 13:01:04 2025 GMT
        Subject: CN=f4ceff26-0dba-4aec-a458-ae04ed97a94f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:f8:b7:22:f3:02:27:6e:d4:27:67:1f:e4:c1:
                    4d:cf:0b:08:ab:c9:63:0b:93:05:3b:b6:0a:a1:a1:
                    0b:d3:74:be:2e:ed:a9:ed:8c:97:7a:d3:58:e3:09:
                    59:d4:0c:aa:3d:d7:94:f2:f6:7a:8d:90:b2:a7:70:
                    79:11:8b:77:28:42:46:61:bf:7b:fb:35:24:9a:7f:
                    40:fd:1d:6e:25:41:ae:c7:4c:19:90:79:5a:bc:f5:
                    c3:ec:1f:89:0e:01:a3:f1:20:d7:9a:ed:e0:f4:9b:
                    23:b4:fa:74:d3:32:3f:42:d8:bf:d5:e1:7d:86:dd:
                    cc:27:42:d1:12:b1:95:f9:e0:88:28:2d:ad:59:9d:
                    7c:8b:e1:34:37:b8:48:87:eb:fa:c9:4c:4e:1b:0a:
                    83:c5:21:60:10:c7:5f:71:4d:33:7a:d1:81:fe:ce:
                    a3:c4:41:7c:dd:fd:44:a0:89:bf:02:5b:7a:2c:22:
                    f6:e5:5a:1a:3a:d1:70:60:f0:51:b3:2c:3c:3c:5a:
                    95:2b:36:9b:03:e0:cb:66:f5:00:51:86:4e:82:1a:
                    4f:b0:dc:1b:88:da:dc:24:94:f6:d1:d6:71:8f:dd:
                    04:58:db:70:fc:0e:b6:4a:1b:58:f7:ed:ca:03:d8:
                    63:de:39:f5:f3:f3:99:58:43:7c:f1:62:de:2e:8c:
                    2e:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:AE:F1:28:A0:79:AC:CF:B2:5B:3E:11:34:BB:EB:6C:58:9D:E1:72
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/3cce6d36-dd4f-39a4-aaf6-786185f487b2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.0.242.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4b:f7:71:0c:f7:1e:1d:98:3e:1d:15:2a:fe:d2:4c:49:5b:e6:
         28:a2:fb:f9:4d:f2:78:87:26:33:3f:9d:88:fa:2d:5c:13:0d:
         2e:6e:c6:97:1f:f2:0a:c9:d3:06:24:81:7c:96:bc:c4:76:e7:
         5b:8f:08:24:8c:8b:c1:36:e2:e7:ff:0b:06:39:59:b9:86:73:
         4e:b6:d4:eb:43:3c:41:5e:f6:40:03:b3:19:4a:e9:f3:68:fb:
         e7:fa:bb:1f:ce:59:15:44:06:27:0a:55:4c:60:e1:25:63:81:
         c3:e1:bb:b0:60:36:de:ab:a1:1b:c0:ed:da:f4:65:f2:3b:1d:
         4d:7f:b5:86:23:55:03:04:22:ba:6b:c4:fc:fb:e5:39:c5:a8:
         f1:fc:4f:c7:3a:7e:7d:37:c7:24:1d:8b:50:24:0a:91:96:4c:
         51:b0:2c:50:93:7e:e0:0e:d8:51:d4:ba:d0:78:ec:ac:6c:3c:
         6b:c0:1e:8d:a6:92:8a:29:fb:14:52:b5:a4:e9:a4:86:60:e9:
         3d:17:ae:6b:7d:f3:e8:ed:0d:0f:1b:73:8f:55:2f:d1:78:6a:
         dd:14:df:d9:5b:d0:17:00:70:a6:b3:f8:0f:65:4b:28:f8:29:
         f5:67:b7:27:e2:aa:07:3f:a5:e0:3d:94:a9:1d:fb:39:46:ac:
         4a:bb:13:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 12:39:30 2025 by rpki-client