Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/57e2a605-4964-34fb-888d-85844ae988aa.roa
File:                     57e2a605-4964-34fb-888d-85844ae988aa.roa (raw, json)
Hash identifier:          dKid+WGW6RpJ71o6Qjm2K9+RqW4EqeuAbcq7U2EhAe0=
Subject key identifier:   5C:FE:DF:6E:32:8A:02:AF:9C:59:47:8F:51:C3:83:BB:E0:65:E5:DE
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F4328584AB0BB72225647F8CCA1AB0900
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/57e2a605-4964-34fb-888d-85844ae988aa.roa
Signing time:             Wed 30 Jul 2025 13:00:40 +0000
ROA not before:           Wed 30 Jul 2025 13:00:40 +0000
ROA not after:            Tue 28 Oct 2025 13:00:40 +0000
asID:                     62240
IP address blocks:        166.1.224.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:b0:bb:72:22:56:47:f8:cc:a1:ab:09:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Jul 30 13:00:40 2025 GMT
            Not After : Oct 28 13:00:40 2025 GMT
        Subject: CN=2cb82096-1896-4578-b4f8-7907c0554c4a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:f0:f5:b0:15:64:87:f2:db:c7:51:13:5b:8d:
                    2b:63:db:f0:e6:c2:50:b3:a8:44:9c:86:c8:eb:b8:
                    ee:2d:f8:cd:08:e2:15:66:cb:5a:00:e4:a4:6f:4d:
                    e1:71:be:c0:9d:75:85:be:4e:e9:f9:a3:4b:ec:82:
                    ea:fd:dd:4a:8c:10:22:a6:a5:62:96:43:a2:61:45:
                    37:40:93:9f:bd:8c:ef:6d:58:15:6c:fb:64:12:1a:
                    19:09:65:d5:34:ea:18:32:2b:2e:cb:fc:f1:15:4b:
                    e5:4d:94:1c:89:2d:08:e3:ab:13:12:46:e4:fe:63:
                    4a:41:e3:ef:c7:5c:1f:48:34:65:8f:10:fa:c1:53:
                    61:96:02:43:49:fd:65:c1:41:e6:da:96:b3:ed:f7:
                    78:74:03:d6:58:08:c9:9f:1d:44:ca:9b:fa:7f:9e:
                    85:aa:6b:1a:27:d5:5f:28:6e:ab:ff:af:da:e8:77:
                    6c:ca:c7:f4:98:c7:72:b3:95:a1:1e:51:a2:2d:eb:
                    e3:ec:0c:70:68:4a:5e:d8:6e:9a:5c:5f:61:81:1a:
                    18:10:b4:b9:90:0d:ad:e2:8a:f4:59:6f:cd:88:1c:
                    84:70:f9:49:00:d5:07:45:27:0c:fa:9e:e4:f2:29:
                    e4:b2:b3:e9:86:c8:a9:82:48:df:60:09:c6:bc:8b:
                    ac:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:FE:DF:6E:32:8A:02:AF:9C:59:47:8F:51:C3:83:BB:E0:65:E5:DE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/57e2a605-4964-34fb-888d-85844ae988aa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.1.224.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         76:e4:66:a1:a9:ad:05:d2:fd:b2:b8:95:1f:c6:4e:e2:bf:93:
         42:d7:7f:c3:89:8e:4c:42:4d:81:60:80:ed:ac:3f:fb:3c:f8:
         ff:4b:64:d7:d5:50:3e:73:3e:a7:be:7c:29:8c:b7:39:db:c7:
         80:11:94:85:0e:c4:46:28:19:5c:59:71:f5:3e:69:98:95:5c:
         d2:b4:7d:d3:ec:72:86:d9:c2:36:12:e7:6a:df:17:cc:73:8f:
         96:12:7b:1b:d1:17:6b:5a:11:f3:7f:6b:99:27:6f:57:26:99:
         19:36:4d:cc:a9:09:68:a0:a4:fc:ec:71:76:44:51:91:ee:c9:
         e6:44:60:fd:7c:56:d6:57:e5:c9:cc:41:ba:7c:7a:98:ba:bb:
         09:bf:3b:64:54:a7:12:96:77:5e:f2:ec:82:42:cd:46:24:40:
         27:45:cb:33:41:80:6f:2b:7d:ed:5d:d8:59:89:1e:d5:36:1b:
         c6:00:55:46:af:68:c9:84:14:f4:80:35:00:b1:39:94:3b:d4:
         5f:3a:13:44:71:b7:72:ce:82:e7:db:84:05:2d:50:13:a3:9b:
         26:dd:13:ec:4e:0f:de:6c:97:37:81:75:83:37:a7:49:4d:8b:
         35:fa:f8:01:57:07:0a:b3:13:b3:fe:e9:84:f5:c7:76:e3:d5:
         26:ce:d5:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 11:15:10 2025 by rpki-client