Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/6d1114f9-09c0-3e09-bce4-86238610632a.roa
File:                     6d1114f9-09c0-3e09-bce4-86238610632a.roa (raw, json)
Hash identifier:          A5vIQEjeLQZVK7g/DnWBxbxTearWLSy/iMqrimnrU2s=
Subject key identifier:   14:EE:BF:94:6B:EC:1E:2D:CD:5D:A2:4A:F9:23:55:29:0D:94:65:F7
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F4328584BBE405AB76EE587FDB057A740
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/6d1114f9-09c0-3e09-bce4-86238610632a.roa
Signing time:             Tue 04 Nov 2025 02:00:31 +0000
ROA not before:           Tue 04 Nov 2025 02:00:31 +0000
ROA not after:            Mon 02 Feb 2026 02:00:31 +0000
asID:                     7979
IP address blocks:        166.0.1.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:be:40:5a:b7:6e:e5:87:fd:b0:57:a7:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Nov  4 02:00:31 2025 GMT
            Not After : Feb  2 02:00:31 2026 GMT
        Subject: CN=35509c02-b5f1-4027-b06b-3bee4375f375
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:34:71:27:25:91:f9:29:61:18:14:f4:2f:76:
                    9a:0e:ac:1b:93:48:b3:b5:7f:46:3e:58:4d:34:26:
                    d7:5e:3e:e0:90:1c:f7:ed:63:d8:f9:4a:48:4f:ae:
                    6c:50:b5:7a:13:2d:36:f0:1b:62:65:19:99:37:38:
                    bc:af:3b:91:b0:f1:b9:31:97:90:51:55:54:00:4b:
                    7f:f1:77:de:96:f3:46:48:a4:92:d7:c4:79:33:f3:
                    ef:f5:01:00:ef:4b:4e:82:a6:29:42:e6:1e:17:30:
                    2c:40:05:1e:b8:be:19:90:6c:4c:77:9e:9f:51:13:
                    95:62:b2:59:99:ff:7c:88:c9:62:f7:86:81:ad:9e:
                    7e:28:0f:b7:f0:26:9c:0b:48:6d:22:66:95:c0:e3:
                    ab:1f:e8:f8:13:95:20:22:e5:da:ff:cb:7d:d8:c4:
                    5f:26:8f:49:5f:c1:b2:42:a4:8b:75:d6:72:ed:0a:
                    cd:01:d9:0c:6c:87:3a:44:d4:0f:9e:a1:b0:30:be:
                    2e:5e:c1:17:a5:6e:c3:c5:3d:5f:5e:75:1a:be:42:
                    2a:84:bf:5b:d1:8e:2f:52:13:8e:0b:08:36:e1:6b:
                    58:6c:7f:bf:c3:7e:85:8b:61:9f:46:cc:ff:d0:d1:
                    f5:a0:2a:7c:f7:07:b1:0e:8c:1e:3b:12:33:d9:90:
                    3d:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:EE:BF:94:6B:EC:1E:2D:CD:5D:A2:4A:F9:23:55:29:0D:94:65:F7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/6d1114f9-09c0-3e09-bce4-86238610632a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.0.1.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         29:8f:4c:02:78:99:75:e8:f8:65:b0:4f:72:5a:31:b6:ab:89:
         61:61:2f:bc:1c:1d:97:63:e8:50:8b:32:18:eb:71:16:bb:80:
         dc:dc:0a:e5:76:3f:13:fb:ae:72:02:d1:f6:a3:25:b3:7f:90:
         02:53:84:1e:d2:fb:5f:ab:cf:17:59:d3:3f:68:33:7a:15:b5:
         ec:06:3c:5d:01:3a:72:75:74:3d:d1:16:4d:ec:8a:4d:aa:52:
         b8:aa:08:b1:0c:db:b9:bc:4a:6b:86:de:cd:27:cc:0f:d1:c9:
         dc:5d:0a:4f:b2:54:0e:f3:9e:67:83:7c:48:e5:a4:f2:44:2e:
         8c:4e:f4:4d:5b:f3:e1:07:ca:f1:db:8a:bb:5c:1d:6d:8a:5e:
         a5:cf:60:b2:8d:61:4e:fa:b4:5a:46:39:d8:95:dd:d3:bd:b7:
         6d:d3:55:0a:7e:15:4e:ed:e4:f0:3c:68:61:49:b8:5c:65:96:
         1a:33:e3:60:ca:b5:1e:4a:40:cb:77:d7:ef:73:f0:86:9b:d6:
         6a:1c:ba:a6:2e:12:15:0b:e2:0a:87:dd:06:d1:db:53:0e:0e:
         44:56:fb:50:1e:bb:10:72:31:75:44:72:75:cb:ce:b4:e9:c7:
         19:08:3d:a0:2d:94:b8:97:81:8b:0d:f4:94:51:fe:a6:32:99:
         71:44:17:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 12:46:57 2025 by rpki-client