Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/c319fc79-46b7-3993-9da4-2babe7bffae5.roa
File:                     c319fc79-46b7-3993-9da4-2babe7bffae5.roa (raw, json)
Hash identifier:          8PBp6yHDVMeuS7LpbfOQ8EW7IovSMBJAdKckJOf8YKM=
Subject key identifier:   AC:0D:80:24:A9:A7:5D:00:7C:05:97:B3:F1:0B:51:A8:5F:1B:71:BA
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F4328584A9DC9A1C15627B40FF31FC230
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/c319fc79-46b7-3993-9da4-2babe7bffae5.roa
Signing time:             Wed 23 Jul 2025 18:08:56 +0000
ROA not before:           Wed 23 Jul 2025 18:08:56 +0000
ROA not after:            Tue 21 Oct 2025 18:08:56 +0000
asID:                     401152
IP address blocks:        166.0.225.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 06 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:9d:c9:a1:c1:56:27:b4:0f:f3:1f:c2:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Jul 23 18:08:56 2025 GMT
            Not After : Oct 21 18:08:56 2025 GMT
        Subject: CN=0c9ed22b-6900-48cb-ae52-b0cf78a7e636
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:33:de:95:f4:95:1d:45:53:c7:a6:de:31:c9:
                    76:51:e5:dc:ea:5f:b8:e2:46:a4:26:ee:b0:ce:3f:
                    7d:3c:a5:3f:0b:5b:9c:47:c5:fa:ea:04:55:e4:f2:
                    5c:f5:68:f5:4b:d3:0a:e8:6f:63:0f:03:60:c7:63:
                    96:75:f8:16:ee:84:de:55:c1:f3:97:db:aa:d9:46:
                    f8:24:4d:19:9c:e6:f6:e7:60:44:8b:55:7d:64:4c:
                    59:3c:69:cf:64:ea:40:e7:a5:7d:c2:5f:eb:56:02:
                    01:a8:91:59:d8:ac:7b:18:e9:64:39:70:e5:3f:6c:
                    f5:ff:db:a3:a1:65:01:1a:5c:1c:98:41:09:e3:8b:
                    d9:d8:3c:47:c3:42:15:06:d4:07:fd:74:63:55:84:
                    c6:0d:b6:fa:d4:99:1b:35:48:ad:51:8c:c2:96:27:
                    03:5f:0e:5f:0f:89:be:15:ca:2a:06:5b:26:13:43:
                    d4:e1:d6:99:93:1c:c3:75:6b:a1:7c:f2:c5:df:e6:
                    8f:dd:3b:ee:1a:f5:c4:3c:20:33:45:54:1b:03:db:
                    fd:c9:33:ae:bd:95:77:1e:d8:c4:2f:1f:a9:84:5f:
                    ec:30:49:a6:22:cb:ec:1c:63:1f:93:8c:28:b6:c7:
                    b5:a5:50:7a:8e:a9:b2:4f:bb:ae:37:6a:9c:83:02:
                    4f:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:0D:80:24:A9:A7:5D:00:7C:05:97:B3:F1:0B:51:A8:5F:1B:71:BA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/c319fc79-46b7-3993-9da4-2babe7bffae5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.0.225.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1d:34:36:30:40:9b:3e:14:1b:cc:bd:ca:eb:9c:f5:9f:fe:84:
         27:7b:da:0d:cd:3c:41:1b:28:b5:4f:e4:af:e0:2a:97:a7:d2:
         f3:62:8e:2c:27:5f:54:98:c8:94:d4:63:8f:b8:13:83:5b:2a:
         64:a3:d2:45:a7:e8:08:a7:0f:88:70:1b:fb:96:09:ff:48:4b:
         4c:04:59:70:33:5d:d2:6b:86:11:4e:84:73:24:fc:44:03:b2:
         81:03:73:84:c2:27:cd:a0:20:c2:2e:5e:66:77:f0:d3:1a:90:
         01:58:07:60:33:3b:0a:0c:6c:4e:c4:2b:3e:d6:9d:d8:a9:a3:
         4f:09:e7:05:12:30:6e:4d:d8:cc:49:7e:46:04:90:50:f7:25:
         c6:18:4e:9b:a2:da:df:e6:6a:54:ff:61:30:12:e5:f5:d2:1a:
         ad:72:e1:6d:db:16:b2:a6:ea:ef:16:6d:f1:41:2e:2e:7d:b0:
         fd:db:0a:6f:2e:cb:9f:73:8c:6b:df:48:f3:7b:33:ec:ac:15:
         b4:fc:b4:ec:30:ee:71:9b:f5:52:5e:25:8a:ce:6a:80:3d:5e:
         91:45:6f:f9:ca:3c:b9:fb:4b:a9:ec:35:3a:98:62:83:17:d2:
         c1:45:61:1e:fa:2c:e5:2d:6b:fc:e1:38:b6:05:6a:bc:4e:36:
         1a:62:d3:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 08:18:57 2025 by rpki-client