Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/3d653528-7718-39b0-9ccf-7955d59466dc.roa
File:                     3d653528-7718-39b0-9ccf-7955d59466dc.roa (raw, json)
Hash identifier:          xnKudcTEQMswWz/PFVr+x5+CGj2lvi0b5okWsS24fpU=
Subject key identifier:   3B:05:CA:68:74:A3:30:A6:8C:A9:41:EE:69:26:9D:E4:F0:3C:F2:E6
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F4328584AB0BB7E6CAE18008B4F1EE380
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/3d653528-7718-39b0-9ccf-7955d59466dc.roa
Signing time:             Wed 30 Jul 2025 13:00:40 +0000
ROA not before:           Wed 30 Jul 2025 13:00:40 +0000
ROA not after:            Tue 28 Oct 2025 13:00:40 +0000
asID:                     62240
IP address blocks:        166.1.223.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:b0:bb:7e:6c:ae:18:00:8b:4f:1e:e3:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Jul 30 13:00:40 2025 GMT
            Not After : Oct 28 13:00:40 2025 GMT
        Subject: CN=368c6612-a092-46dc-9448-83de4049f9f8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:b1:6b:79:db:1d:c7:3c:65:96:0e:9d:43:b4:
                    18:5d:5c:d5:79:95:4a:95:f5:2f:04:ee:9d:9b:39:
                    6b:2a:6b:21:fc:30:af:7e:54:ef:2c:d6:e1:6d:8c:
                    e7:0e:b1:18:4a:90:67:b3:f3:4f:fd:28:42:04:5a:
                    ef:65:f9:52:c0:fc:2f:6f:f0:ef:a6:25:4d:d0:b9:
                    60:9f:e9:c4:27:7d:fe:d1:e4:d4:33:71:e0:f9:a7:
                    3e:b3:94:b4:78:9c:34:7f:ec:77:da:b9:8b:03:84:
                    07:f8:2d:02:eb:cf:40:5f:40:9f:ab:12:fc:0f:6b:
                    8c:ee:6f:b4:3c:3e:7b:c4:71:78:ea:0c:e5:f7:dc:
                    dd:07:f3:40:f7:21:63:df:e2:4c:5f:14:ba:82:1b:
                    ff:e6:82:a5:98:1f:d8:08:a9:1f:0f:6e:31:8f:86:
                    a8:f2:69:70:21:f4:68:d0:41:31:bb:67:94:43:c4:
                    ce:c1:a1:44:0c:e8:d2:a8:9f:e6:fb:fe:f8:a6:54:
                    e1:5c:74:a3:b2:11:88:bf:46:7f:f8:b8:09:75:6f:
                    1f:2e:fe:c3:4b:7b:04:ed:1b:30:58:dc:4e:8d:f1:
                    2a:2a:29:e4:e0:74:bd:9a:60:72:35:f8:02:a1:1a:
                    dc:d1:22:97:2f:37:66:ac:d2:b1:c8:b6:15:30:7a:
                    8a:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:05:CA:68:74:A3:30:A6:8C:A9:41:EE:69:26:9D:E4:F0:3C:F2:E6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/3d653528-7718-39b0-9ccf-7955d59466dc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.1.223.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a0:fe:d2:08:97:7a:42:27:3e:3b:3c:eb:9b:61:d8:c2:78:b8:
         eb:a5:00:08:5b:3b:4d:4b:93:6f:f1:2d:ce:e7:5d:49:02:c5:
         6b:c3:56:b2:e8:27:c2:1e:52:49:7f:13:e4:e2:98:6c:74:12:
         9d:a0:75:b8:0a:9d:86:ab:de:ba:b2:82:97:4b:cd:a5:5a:03:
         9d:a9:69:ba:88:77:4a:29:94:4d:a8:5c:ba:7f:4f:b9:7f:14:
         a8:7f:09:5f:20:9e:68:cc:a7:cb:54:43:65:58:53:82:b9:93:
         42:64:9d:41:01:ca:5f:7f:22:d9:d4:46:36:bc:a4:fa:93:78:
         8d:ed:2b:de:fb:18:3d:e4:4a:20:2d:d2:00:14:73:a9:7c:52:
         fc:88:1b:54:10:5f:cc:89:be:07:e2:e2:3a:fe:52:43:26:c2:
         44:5b:e2:82:86:9d:12:ef:52:d0:13:52:04:c6:7c:a0:78:11:
         2a:08:32:60:3c:5e:bb:0c:23:43:f0:27:52:64:40:2c:c3:b0:
         11:29:95:92:a3:40:c0:50:6b:34:24:bc:bf:97:c3:0d:b5:e3:
         66:11:6a:27:3d:70:c2:6f:36:84:4f:37:3c:71:c1:d7:de:3c:
         41:02:0c:1e:5a:ea:76:79:f8:33:3e:a4:dc:12:3c:82:9a:c7:
         bd:6a:35:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 13:09:17 2025 by rpki-client