Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/d375e134-2ed4-32cd-8bfe-5dd523888b3c.roa
File:                     d375e134-2ed4-32cd-8bfe-5dd523888b3c.roa (raw, json)
Hash identifier:          SsOh+z1y20qOg15f/PhMG3zzARu1iPbg2MDxtGcfn7w=
Subject key identifier:   7A:9D:E9:6E:99:7A:EC:D1:B9:99:83:E7:C9:A5:D3:4A:6A:1F:25:50
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F4328584AB0BB71F6F82220AA8A098C00
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/d375e134-2ed4-32cd-8bfe-5dd523888b3c.roa
Signing time:             Wed 30 Jul 2025 13:00:40 +0000
ROA not before:           Wed 30 Jul 2025 13:00:40 +0000
ROA not after:            Tue 28 Oct 2025 13:00:40 +0000
asID:                     62240
IP address blocks:        166.1.3.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 06 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:b0:bb:71:f6:f8:22:20:aa:8a:09:8c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Jul 30 13:00:40 2025 GMT
            Not After : Oct 28 13:00:40 2025 GMT
        Subject: CN=20af6aae-67b1-491a-a168-30c1ecc74a80
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:05:ce:0e:e6:53:41:65:01:f2:03:b6:8b:78:
                    dd:c9:70:0d:7e:81:39:28:c5:ce:19:10:fb:a2:b3:
                    ed:8b:e1:5d:f1:e8:48:83:eb:1d:68:51:65:1d:59:
                    a1:6d:d0:e1:d2:73:2a:e6:0d:25:0f:f8:62:3a:eb:
                    e9:c6:d2:31:70:b8:5b:da:ed:13:0e:0d:a5:1c:9f:
                    b4:90:c0:46:f4:0e:81:de:f5:8d:05:44:0d:44:aa:
                    d2:f2:ca:a1:2b:d4:65:36:4f:29:ba:e2:02:96:81:
                    0f:7c:0b:e1:a2:bb:26:14:4f:6e:ea:48:c8:50:37:
                    b0:9c:65:d6:1e:11:df:42:e8:bc:1f:27:76:f9:a6:
                    5a:e2:cf:53:72:f1:d1:73:df:12:38:15:8d:fc:41:
                    45:ff:75:26:e7:f1:e3:ff:81:99:90:92:3d:f4:7e:
                    f3:66:7e:c4:1d:f7:b0:75:81:05:71:6b:8d:3c:3f:
                    c7:3f:ab:14:71:1d:55:5a:3f:7a:08:a5:44:46:4a:
                    24:d4:56:3a:5d:3d:f9:f5:ba:95:6d:7f:3d:8d:49:
                    f4:d1:39:1e:d6:c7:29:8f:13:1b:37:52:c8:4a:f4:
                    78:dc:32:32:6f:ec:6d:c2:7f:9d:82:c4:a4:77:7a:
                    be:50:e6:08:87:23:8b:b3:89:23:c6:3e:20:94:50:
                    f4:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:9D:E9:6E:99:7A:EC:D1:B9:99:83:E7:C9:A5:D3:4A:6A:1F:25:50
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/d375e134-2ed4-32cd-8bfe-5dd523888b3c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.1.3.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         58:3e:c3:c2:d5:2b:93:e9:b1:72:f3:c7:a0:43:3f:7b:a9:59:
         0b:1d:bd:9f:d9:2a:1b:5b:88:21:3f:c1:f2:bf:25:5b:cf:74:
         69:57:a8:6f:44:04:90:fa:b3:8f:a4:09:3b:f1:11:0f:2a:0d:
         79:1e:89:c9:c9:ec:8f:3f:01:fd:c6:e6:49:a8:72:f7:59:db:
         71:69:5e:60:4c:d4:8a:27:6b:31:ae:e1:ca:85:9a:7b:ed:42:
         98:60:6c:2e:9c:77:d7:41:34:77:f0:bd:80:16:fe:23:b3:b6:
         26:aa:5f:41:04:ba:54:7d:d3:01:9c:ad:0e:85:f3:8c:f9:8c:
         7e:98:4a:1c:be:e7:3d:9f:75:c9:75:02:b5:78:b1:77:5a:c9:
         25:9e:56:11:d2:17:8d:6c:3a:75:d1:c3:a0:b5:f7:2e:53:b0:
         62:95:a8:b0:8d:2b:76:e3:fe:98:bb:e4:df:1c:5d:a8:db:1e:
         0e:e9:69:75:80:ef:f5:6d:5d:54:90:77:7d:57:15:70:9d:c5:
         96:fb:72:3d:21:3d:0e:3b:8d:61:1f:ba:de:58:ce:51:f9:d7:
         21:eb:97:01:d0:77:25:5f:66:d7:94:be:30:89:e2:be:1e:b6:
         63:93:57:6c:15:aa:74:8b:b2:8d:48:5d:ad:2b:c2:1e:dc:e2:
         71:50:1f:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 08:23:19 2025 by rpki-client