Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/4d6569db-93ab-3fe2-986b-75e79959ddbb.roa
File:                     4d6569db-93ab-3fe2-986b-75e79959ddbb.roa (raw, json)
Hash identifier:          XeYBu9bZrEpy4MH5hmjOvlkt3YL4fMOeERL3nbM/XEA=
Subject key identifier:   10:35:AF:64:3C:A6:B6:22:C5:50:8E:B7:25:68:44:0F:17:00:A4:C6
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F4328584AB22128237EFE913EF7B60F80
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/4d6569db-93ab-3fe2-986b-75e79959ddbb.roa
Signing time:             Thu 31 Jul 2025 01:00:32 +0000
ROA not before:           Thu 31 Jul 2025 01:00:32 +0000
ROA not after:            Wed 29 Oct 2025 01:00:32 +0000
asID:                     58061
IP address blocks:        166.1.63.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 06 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:b2:21:28:23:7e:fe:91:3e:f7:b6:0f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Jul 31 01:00:32 2025 GMT
            Not After : Oct 29 01:00:32 2025 GMT
        Subject: CN=656efd51-76ee-4443-8425-15b9026df4be
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:e0:17:88:50:20:f1:df:cf:75:b2:ad:92:51:
                    66:7e:6c:e0:9f:9f:c6:0e:50:c2:97:4d:b7:d6:8f:
                    69:7f:d6:0b:80:00:36:c8:17:0b:ab:ca:94:81:47:
                    d6:3c:b1:6b:ca:58:06:b1:7c:99:1c:2f:61:b0:7a:
                    c0:8c:7b:1a:46:2f:88:b7:49:87:b4:0b:e3:a0:99:
                    44:01:e3:31:28:b9:3b:d5:99:96:be:7e:94:30:c9:
                    69:79:5a:cf:6b:7d:a1:da:2a:db:85:ba:66:05:9a:
                    97:06:1e:c3:31:25:aa:4f:ed:78:dc:ff:9f:05:21:
                    e5:bb:28:73:d2:1e:6a:89:91:52:23:83:2f:da:ef:
                    8b:12:5b:21:4c:bd:b0:b9:52:af:2c:94:19:40:91:
                    b6:e5:20:ba:6f:a0:e6:3b:ca:e3:b3:4c:97:c1:da:
                    84:f3:85:da:7e:ae:9a:00:65:b0:e0:d8:ef:ba:c9:
                    54:49:f0:84:0e:63:95:16:f3:34:17:9c:35:b2:64:
                    ba:73:0a:87:76:9d:72:c6:a4:41:79:2c:31:2a:6b:
                    d9:b9:f2:dd:88:58:d9:cc:e7:b2:85:49:ff:d3:21:
                    53:8e:34:56:42:6b:1f:c4:02:22:b5:51:0c:ce:b1:
                    ee:b0:4e:e8:a4:bc:74:cc:a0:4e:43:03:a4:ef:80:
                    d1:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:35:AF:64:3C:A6:B6:22:C5:50:8E:B7:25:68:44:0F:17:00:A4:C6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/4d6569db-93ab-3fe2-986b-75e79959ddbb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.1.63.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7a:c6:2d:18:d8:03:f8:7c:cc:8c:61:a6:ff:d6:99:51:d3:c4:
         4d:50:43:38:1f:d2:e4:9e:47:9b:8c:28:a9:bc:0a:a0:ce:d6:
         a0:be:d7:cc:de:30:74:5b:c8:9f:e9:a8:c3:ec:50:a6:f5:fe:
         51:d4:82:18:0c:52:3c:ee:83:59:27:8d:57:82:18:bf:3d:17:
         ad:ad:3b:ae:b6:b6:f8:b3:2e:07:5f:e0:6b:3b:e3:c5:31:54:
         28:f7:77:3c:88:d4:66:34:55:68:3a:94:d5:da:2f:22:b1:a0:
         03:f3:3d:73:f7:13:52:4c:63:fc:86:20:a8:b3:00:85:f4:34:
         9a:66:c8:e0:41:fd:63:95:d0:57:22:e3:35:96:a5:37:81:9a:
         8e:0c:2d:a5:fe:0f:f5:30:3d:c0:59:23:44:ea:75:3c:ff:37:
         e9:c5:8d:be:9b:3e:d5:06:40:81:54:6f:41:b1:b1:18:3d:b2:
         1f:0b:b4:0b:b9:cc:c2:5b:6d:96:77:31:af:8c:0e:39:f3:c9:
         57:be:8d:be:aa:95:ff:86:d9:57:8b:c9:e2:1f:56:cc:d2:8e:
         4e:6f:2e:39:63:fe:40:7d:99:af:7d:f4:21:db:b8:88:2b:12:
         36:02:cd:82:b9:47:8e:c8:94:85:19:97:34:3d:b6:83:33:92:
         5c:c7:a2:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 16:06:38 2025 by rpki-client