Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/6bf12eb9-6c02-3450-a38a-0b28ee77186c.roa
File:                     6bf12eb9-6c02-3450-a38a-0b28ee77186c.roa (raw, json)
Hash identifier:          yc5hZpmtH6vDK2WCvfASla4fTMRndVAycM1JXVCFfN0=
Subject key identifier:   46:5D:7E:9F:64:AF:B2:E4:01:F9:9D:13:74:82:28:36:66:9E:A6:D9
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F4328584AB0BB7E051B1C5596DDA478E0
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/6bf12eb9-6c02-3450-a38a-0b28ee77186c.roa
Signing time:             Wed 30 Jul 2025 13:00:40 +0000
ROA not before:           Wed 30 Jul 2025 13:00:40 +0000
ROA not after:            Tue 28 Oct 2025 13:00:40 +0000
asID:                     62240
IP address blocks:        166.1.39.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 06 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:b0:bb:7e:05:1b:1c:55:96:dd:a4:78:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Jul 30 13:00:40 2025 GMT
            Not After : Oct 28 13:00:40 2025 GMT
        Subject: CN=abb76bf9-cfd7-4e65-8c4e-ea664e65d0a7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:a4:d8:1d:c3:a6:60:b3:2c:50:7b:78:c7:76:
                    20:bb:90:f7:6e:96:71:96:f1:67:c2:ea:57:46:a5:
                    e0:df:ac:02:e8:5f:23:29:ca:36:f0:f0:cf:76:e8:
                    09:f4:70:d0:b3:4c:b0:5b:c7:8f:87:f6:77:65:a8:
                    f6:e4:6b:3b:31:29:24:7d:b1:51:87:bb:02:2e:13:
                    35:5b:2f:76:9d:bd:1e:71:fc:23:12:7b:67:37:f5:
                    99:9f:50:23:b2:ba:5b:e9:a7:9f:84:ef:35:21:a1:
                    bb:d6:7c:68:41:ac:85:44:32:50:80:9b:32:4f:55:
                    bc:54:37:f6:01:e4:2a:4c:a7:a5:8b:65:96:bf:84:
                    8d:37:91:ac:a1:a4:7c:12:1d:47:78:ec:52:72:14:
                    68:08:58:a0:82:89:1b:dc:55:f7:64:89:b0:96:44:
                    49:f8:86:32:46:28:a5:ab:6b:a2:be:f4:9c:08:5f:
                    3a:f8:2d:e0:8f:11:fb:1d:51:d5:f4:20:c7:2e:a8:
                    3d:51:b2:da:2d:ca:f7:02:22:00:5c:2a:05:ba:9d:
                    32:2c:a5:88:ff:bf:4a:25:d0:46:96:bf:a5:3b:ae:
                    ae:5e:ab:94:0c:7f:6f:3b:e5:a3:9d:0d:28:d8:b5:
                    f4:2e:38:66:91:22:81:77:f2:fe:62:31:53:13:6f:
                    32:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:5D:7E:9F:64:AF:B2:E4:01:F9:9D:13:74:82:28:36:66:9E:A6:D9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/6bf12eb9-6c02-3450-a38a-0b28ee77186c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.1.39.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         34:bf:d5:b9:6b:88:63:bd:95:de:1b:ad:9d:4a:76:9c:1e:f1:
         8c:00:f3:65:68:ff:a8:df:30:57:d0:24:aa:2c:47:14:50:ab:
         ce:b8:00:ec:2d:be:9f:ec:71:11:1e:35:e4:95:0b:53:e7:42:
         0a:96:1e:b0:0a:a7:3e:1a:c9:07:c8:49:57:2c:e9:08:b1:1b:
         46:56:e9:8b:a6:37:e8:46:97:94:34:e4:c0:b3:ca:50:fb:ae:
         46:40:12:12:4b:bf:38:39:2d:9c:8d:9a:3a:d7:1e:62:3d:4a:
         94:a0:60:95:58:43:31:6c:c3:02:06:93:4e:77:6c:4e:d7:1e:
         80:a7:5e:a8:11:b6:30:47:96:d5:15:b6:4f:0f:55:9c:cd:93:
         f7:7a:c5:ef:56:d4:80:d4:8d:07:3d:c2:10:ac:c2:c4:1b:8e:
         03:1e:37:a1:1d:5a:e0:70:75:9f:0a:13:cd:cd:7c:79:22:45:
         88:95:52:4b:e4:28:8a:3c:2a:51:10:79:f2:ef:a6:b6:b3:f1:
         a2:31:f3:03:47:11:67:d8:00:f8:27:13:6d:cb:e9:73:d0:26:
         f6:2f:e1:80:93:d4:be:0d:66:79:7f:40:9d:88:63:1e:eb:2a:
         20:dd:9c:48:dd:9c:2b:ed:83:1a:3e:9a:c2:c0:2c:89:4d:fb:
         fb:f8:3a:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 07:52:55 2025 by rpki-client