Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/94bfa4a6-f4c2-357b-b917-94d73f76030e.roa
File:                     94bfa4a6-f4c2-357b-b917-94d73f76030e.roa (raw, json)
Hash identifier:          EOZMSPImYgnuWd9supcMi8zDcFr3OmhkRuR0dHQYaec=
Subject key identifier:   91:52:E5:0E:7D:DD:7E:CD:E1:68:50:1A:AB:60:82:70:EB:39:B3:E4
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F4328584AB22129261852780C9993E980
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/94bfa4a6-f4c2-357b-b917-94d73f76030e.roa
Signing time:             Thu 31 Jul 2025 01:00:32 +0000
ROA not before:           Thu 31 Jul 2025 01:00:32 +0000
ROA not after:            Wed 29 Oct 2025 01:00:32 +0000
asID:                     58061
IP address blocks:        166.0.214.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:b2:21:29:26:18:52:78:0c:99:93:e9:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Jul 31 01:00:32 2025 GMT
            Not After : Oct 29 01:00:32 2025 GMT
        Subject: CN=c92507ba-7e74-43c5-aa76-dbd7833c7ee4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:1c:af:46:ee:da:c6:3d:58:78:6d:d7:a2:d6:
                    3c:c7:50:dc:5f:39:87:b6:01:f7:a6:e9:f7:78:0d:
                    af:e2:4e:b0:e4:35:91:00:3f:2e:c9:07:af:47:54:
                    21:71:28:f7:71:ab:3f:ee:19:3a:c5:8d:97:c9:5c:
                    a8:c4:ce:e8:7f:41:c5:41:35:73:68:3b:84:07:d5:
                    0b:65:7b:60:7f:05:97:5b:71:8a:72:11:4c:e0:20:
                    85:e9:46:83:a1:bd:b9:64:05:f4:90:3c:85:c0:60:
                    28:fa:06:a7:71:79:20:f0:67:38:58:14:c6:a9:c9:
                    ea:18:87:15:55:02:14:76:e9:36:7a:1a:12:a9:ce:
                    9e:40:72:8e:f5:73:bf:b2:de:f4:72:e7:02:1c:75:
                    7a:52:71:d1:1f:42:2a:02:43:9c:94:97:b7:be:44:
                    10:0f:fe:4d:1a:80:57:2e:f7:08:37:0b:a0:71:3d:
                    5e:fd:c7:c1:b3:69:46:61:8b:cf:a8:5b:a5:24:19:
                    7d:9a:4b:c5:55:2f:d9:de:3d:4f:14:b6:6e:19:cf:
                    05:49:6c:22:4d:5d:fc:30:a5:02:23:5a:d2:31:93:
                    83:bc:d0:65:db:85:74:c4:9e:9a:ea:b2:a4:e7:7e:
                    70:f6:e1:ed:a8:84:14:7c:8b:69:bd:1a:c9:26:4a:
                    e0:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:52:E5:0E:7D:DD:7E:CD:E1:68:50:1A:AB:60:82:70:EB:39:B3:E4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/94bfa4a6-f4c2-357b-b917-94d73f76030e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.0.214.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         52:a0:40:a2:fe:fc:25:47:99:2d:47:7f:f0:82:b1:fc:24:7b:
         95:34:aa:4e:b6:6c:53:9d:89:b1:31:0e:af:cb:c6:23:6a:4b:
         70:18:8c:26:d9:a3:62:d2:93:fa:4a:f4:81:75:07:77:62:a9:
         43:dc:99:1c:27:7c:e9:95:d0:45:70:dd:e8:0c:6d:a2:33:a9:
         3c:8a:e1:7e:b0:ce:e9:b7:6e:50:e9:3c:78:5d:03:10:c9:7e:
         77:df:07:b1:47:7e:4f:75:f2:27:43:cb:f7:dd:78:5e:2c:c3:
         77:fd:6b:34:ec:99:37:73:67:e7:9a:71:14:fc:52:06:54:f0:
         aa:fb:62:75:8e:cb:af:62:5b:6f:33:93:24:15:51:b1:93:63:
         5b:93:78:6a:65:42:c9:12:85:2a:93:e8:c2:7e:ed:99:8f:95:
         9b:39:b1:7d:50:87:85:9e:d5:0f:ae:2b:67:b4:a2:1b:78:61:
         49:3e:2c:ab:e0:e8:c5:cf:27:90:93:cb:12:d7:ee:2a:8b:47:
         c0:5e:92:29:13:d6:7a:df:17:55:f5:78:d3:23:da:6b:19:3c:
         b6:6a:96:38:f3:64:a8:9c:08:31:6a:6c:8f:03:33:fb:7a:72:
         68:31:c0:e9:bf:b6:79:0f:17:35:49:36:4d:a5:0d:8c:04:36:
         02:5f:d9:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 09:32:14 2025 by rpki-client