Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/4b6c418f-9bc1-3fe1-84bb-abfbf16350c8.roa
File:                     4b6c418f-9bc1-3fe1-84bb-abfbf16350c8.roa (raw, json)
Hash identifier:          rb9UTbsiYwaQpCabYpBjKigOpy/gP4QjZkXCoN8vrak=
Subject key identifier:   5A:1A:14:F6:4C:00:39:15:D3:88:B0:DB:6E:2F:C3:07:70:2A:4A:94
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F4328584AB0BB744C568F0C92C42D3300
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/4b6c418f-9bc1-3fe1-84bb-abfbf16350c8.roa
Signing time:             Wed 30 Jul 2025 13:00:40 +0000
ROA not before:           Wed 30 Jul 2025 13:00:40 +0000
ROA not after:            Tue 28 Oct 2025 13:00:40 +0000
asID:                     62240
IP address blocks:        166.1.114.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 06 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:b0:bb:74:4c:56:8f:0c:92:c4:2d:33:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Jul 30 13:00:40 2025 GMT
            Not After : Oct 28 13:00:40 2025 GMT
        Subject: CN=0a960562-eb18-49e3-9764-027132ee8b6d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:4d:59:62:bb:a7:82:03:99:6a:82:ac:29:3c:
                    d3:dc:11:dd:38:f0:fb:af:aa:b5:8c:23:30:85:62:
                    ed:e7:a1:e9:45:1b:dc:5f:00:ec:ef:e0:12:36:0b:
                    ed:b0:7b:66:89:99:02:4e:dc:4d:f1:d6:00:f9:60:
                    21:75:be:ab:d3:8e:e7:6f:78:9d:14:82:42:12:34:
                    33:f5:07:e6:6b:a6:fd:4a:30:5c:9e:7b:f4:ce:8e:
                    88:07:0a:91:06:2c:87:31:9d:97:36:c6:1e:d8:41:
                    f3:88:00:c5:f4:bb:86:01:32:e3:4b:38:89:54:e3:
                    3d:3b:db:79:4f:43:39:66:1a:57:60:5b:65:f6:99:
                    9e:b2:7e:dc:b2:7e:33:4a:80:cc:24:0b:7f:ad:c1:
                    9b:0d:06:36:f5:0d:fa:6f:39:a0:62:f5:dc:ef:88:
                    ab:43:40:e2:70:72:e0:a7:f3:eb:4b:c1:d8:30:fe:
                    2a:21:38:d9:22:43:0a:1f:bc:b4:b5:48:a8:ed:17:
                    15:d2:5f:6b:00:de:41:c3:f0:f5:8d:8c:b3:d3:7f:
                    47:4f:19:dc:91:f9:31:cc:4b:4f:e7:7a:b9:b2:4f:
                    53:1a:92:65:e8:58:e7:96:c2:89:35:ed:e8:1d:93:
                    45:fd:53:e6:f0:87:6d:c2:93:8c:7b:ce:35:7b:59:
                    fd:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:1A:14:F6:4C:00:39:15:D3:88:B0:DB:6E:2F:C3:07:70:2A:4A:94
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/4b6c418f-9bc1-3fe1-84bb-abfbf16350c8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.1.114.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5d:94:da:46:32:bf:4c:f0:3e:cf:e4:98:cb:16:f9:d3:8d:92:
         8e:9c:f4:e1:2f:6d:1a:c6:8e:9b:3f:96:a9:61:f0:44:6f:01:
         59:56:a2:1a:72:65:10:c4:4a:bc:4c:60:b2:5b:76:69:0a:db:
         dc:b2:85:84:83:01:7e:f1:74:d3:6f:0f:74:c5:75:ab:b2:5d:
         c7:0e:be:8c:b8:51:a2:f1:5c:71:f0:41:67:62:9c:16:cf:de:
         99:47:cf:88:e4:93:c9:e8:b5:31:da:74:49:a9:df:ba:1a:7c:
         91:7c:a2:1a:28:5c:e1:0a:bf:4a:c0:42:1f:8a:e0:86:da:ef:
         ec:2f:1e:73:b2:3a:fe:00:fd:82:39:78:00:7a:1e:79:5f:af:
         56:e6:05:3b:2e:3d:4a:8e:dd:a7:00:f1:6f:2e:f5:8f:e7:89:
         80:41:b7:f1:d0:df:43:68:61:6b:73:19:fc:ac:de:f6:e7:d0:
         1d:7d:62:f8:62:c1:d7:6a:58:66:89:80:fd:0f:09:fc:e9:da:
         68:1d:a8:eb:eb:e9:d2:a0:4e:28:8c:07:f6:0f:e6:f5:01:78:
         d8:85:ea:a9:99:0a:25:bc:c7:74:b4:d2:a9:e3:43:a6:1d:40:
         6f:4d:90:2a:a0:68:79:02:65:2f:72:d8:d4:98:47:f6:9e:ed:
         b3:2d:07:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 08:31:00 2025 by rpki-client