Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/7b8f7e2d-5e08-313b-8566-2e0d3facf156.roa
File:                     7b8f7e2d-5e08-313b-8566-2e0d3facf156.roa (raw, json)
Hash identifier:          cpAKN+0L6HmTg7fPwHH5mYwm38YWggrKxEEAtwneae8=
Subject key identifier:   C5:20:B0:7E:16:9E:C3:F2:FB:69:BC:A6:7D:0C:3F:D8:7A:17:34:14
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F4328584A9D30FAEE5D9E4D5E2E345B80
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/7b8f7e2d-5e08-313b-8566-2e0d3facf156.roa
Signing time:             Wed 23 Jul 2025 13:01:02 +0000
ROA not before:           Wed 23 Jul 2025 13:01:02 +0000
ROA not after:            Tue 21 Oct 2025 13:01:02 +0000
asID:                     11426
IP address blocks:        166.0.247.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 06 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:9d:30:fa:ee:5d:9e:4d:5e:2e:34:5b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Jul 23 13:01:02 2025 GMT
            Not After : Oct 21 13:01:02 2025 GMT
        Subject: CN=10ac612b-06aa-4bc6-b405-65ee890cbdad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:96:46:53:bf:ad:5e:b3:3e:47:81:98:9e:12:
                    64:40:69:cf:0c:fa:15:f9:27:d7:27:6a:9d:ce:e3:
                    41:24:d0:aa:f2:4f:c8:6f:0b:78:24:24:dc:85:48:
                    52:b7:0b:30:e9:40:d5:1d:de:21:c5:62:16:d5:bf:
                    b1:9c:d4:4d:1a:f1:3a:19:0c:5e:61:12:21:a6:4c:
                    df:6b:7d:24:08:ce:ce:13:5a:be:22:c4:ed:e1:b4:
                    e8:b9:cd:98:fa:32:ee:c2:01:c9:1c:b1:72:a1:64:
                    ae:21:4f:d1:f3:f3:c5:01:d7:3d:3e:42:a9:c7:21:
                    1e:2a:17:ec:8c:4d:71:92:42:72:2e:44:83:20:a3:
                    8e:33:d2:52:6c:ee:ec:17:be:75:06:a3:8e:34:5f:
                    dc:4b:4a:64:55:4a:ac:1d:95:75:ba:58:be:52:3a:
                    6d:fc:4b:f2:16:68:44:5d:ba:b8:a2:06:d6:77:17:
                    00:b5:a1:b0:18:b7:6f:36:94:36:ac:a3:09:79:e2:
                    4c:73:89:a4:91:68:ca:24:6b:b3:b9:62:42:8d:7b:
                    4d:96:af:59:6e:7f:0e:95:82:d1:d0:56:e5:63:34:
                    c1:d7:1c:be:73:59:31:f0:67:02:34:27:1f:9b:ac:
                    cf:46:fe:62:3c:f1:6d:cb:46:f2:a1:15:62:d6:b8:
                    9f:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:20:B0:7E:16:9E:C3:F2:FB:69:BC:A6:7D:0C:3F:D8:7A:17:34:14
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/7b8f7e2d-5e08-313b-8566-2e0d3facf156.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.0.247.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         91:92:4a:33:71:9a:6f:6e:00:5f:ab:6f:66:d3:f4:2a:b9:ef:
         66:5e:dd:c5:66:3c:96:24:46:47:4f:2d:21:2f:f2:9e:d4:f0:
         44:95:2f:06:be:c2:9e:b4:95:f0:e6:ad:c1:ae:6b:c4:0b:70:
         b6:39:a9:1d:91:54:19:66:65:b8:6e:b7:c4:b9:fe:d7:24:19:
         99:93:90:0d:09:66:d9:46:b1:06:ff:a2:c6:ec:0c:e7:22:0f:
         ce:68:bd:ee:2d:88:a0:46:72:f6:d5:61:dd:2b:e9:2a:c3:dc:
         be:09:9a:41:c9:92:07:46:a4:ff:58:a7:43:dc:46:65:1f:d2:
         ac:27:1f:51:49:83:df:65:47:c3:03:c7:3a:d4:18:b4:c1:61:
         33:06:26:80:14:f0:c7:f7:c3:35:40:51:f3:51:62:b6:92:c8:
         37:d5:bb:cd:e9:41:03:ed:d9:41:73:a9:3d:89:18:b5:a5:e3:
         17:66:b9:43:ea:7b:04:7f:c1:98:ed:82:f7:a4:ee:71:71:46:
         04:2a:e9:88:f8:2c:05:79:ca:9f:ce:5c:02:b5:21:d9:4a:35:
         42:fd:c8:38:40:54:44:d2:a4:4e:77:f6:46:5c:62:1d:72:95:
         0a:73:e4:a2:24:91:e9:4a:fa:0b:20:b7:e2:d6:e0:53:46:5b:
         7a:c9:f1:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 08:20:47 2025 by rpki-client