Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/f07eea59-2908-30cd-81b4-5c1c0fd935d9.roa
File:                     f07eea59-2908-30cd-81b4-5c1c0fd935d9.roa (raw, json)
Hash identifier:          5N/NBCx/95tDDpd0UA0GwkOjKvIJPCXnH8GFNSIW/Rs=
Subject key identifier:   92:A5:2D:49:1C:E1:B5:BD:B8:7B:9B:19:09:DB:27:68:7C:D9:54:AA
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F4328584AB2212A478888C405E83CF940
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/f07eea59-2908-30cd-81b4-5c1c0fd935d9.roa
Signing time:             Thu 31 Jul 2025 01:00:32 +0000
ROA not before:           Thu 31 Jul 2025 01:00:32 +0000
ROA not after:            Wed 29 Oct 2025 01:00:32 +0000
asID:                     58061
IP address blocks:        166.1.104.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 06 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:b2:21:2a:47:88:88:c4:05:e8:3c:f9:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Jul 31 01:00:32 2025 GMT
            Not After : Oct 29 01:00:32 2025 GMT
        Subject: CN=a7f70af3-e39e-40c1-8760-556d18c4cfe2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:f9:1e:b3:45:4c:6b:1f:06:35:56:7b:f3:b8:
                    e9:81:d8:98:f8:6c:42:6a:ba:e9:ae:7b:95:04:b2:
                    b2:c0:31:15:7f:bd:5c:41:2b:ab:2e:39:83:65:cb:
                    7e:db:a5:1f:ef:88:16:7b:9c:dc:23:37:c6:af:77:
                    fe:43:32:2b:d0:0f:be:c0:ea:ee:01:3f:75:4f:94:
                    40:3a:5b:72:08:20:56:dc:88:71:18:81:2c:dd:db:
                    5f:39:cc:4d:e1:4c:0b:08:6e:c1:bd:3b:e9:8e:2a:
                    17:e9:e9:5a:7a:f5:39:2a:20:d2:b4:e6:24:0a:67:
                    b2:53:df:2e:0e:17:47:db:55:6f:1c:24:da:ab:a7:
                    46:dc:f7:2f:da:50:7a:5b:15:ea:51:bd:bd:c3:43:
                    e4:33:f8:0a:33:a2:b5:4a:42:d4:c2:1a:69:85:1e:
                    70:3c:54:ba:7e:63:6c:6f:f2:7e:ce:ba:e7:dc:ca:
                    b2:25:74:2b:1c:28:b4:8f:6b:9f:28:bb:73:3f:d4:
                    14:b9:ec:0c:7d:dd:5d:da:89:59:ac:78:23:f6:66:
                    fa:ff:ac:1c:90:af:b1:15:94:2a:f5:2b:4d:94:4b:
                    57:f9:b8:07:29:ca:ac:f9:a2:8e:49:43:5c:d3:4c:
                    e8:7f:d8:ca:da:76:63:67:95:bb:3e:87:ef:2d:e4:
                    3f:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:A5:2D:49:1C:E1:B5:BD:B8:7B:9B:19:09:DB:27:68:7C:D9:54:AA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/f07eea59-2908-30cd-81b4-5c1c0fd935d9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.1.104.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         43:01:ea:38:7c:ed:12:ce:e8:06:c9:34:ef:a9:d8:c4:f2:10:
         37:e4:e2:c1:18:87:51:22:88:54:c9:f3:01:92:1f:a1:7b:9f:
         92:59:26:5f:be:9e:76:3f:70:85:bb:fc:79:9e:3c:0a:a7:2d:
         9d:24:ee:23:bb:f4:ff:b9:e5:d1:2b:d2:81:39:3f:83:9d:b8:
         ec:e3:d9:1e:cb:1e:c7:8b:aa:4c:92:08:d8:e2:97:9b:fb:8c:
         9c:d0:58:cb:99:48:9a:8e:ec:a2:8e:49:06:b9:e7:60:27:3d:
         d9:b7:32:94:82:f6:81:b2:6c:d1:32:79:df:9b:48:a5:ec:34:
         63:96:df:53:25:57:49:06:6d:d6:59:66:14:0d:50:05:c3:c1:
         b8:6b:b4:8e:fc:17:2a:cd:c6:27:e1:eb:73:9e:7b:22:49:57:
         cc:9f:f5:41:83:48:a4:50:4e:4c:bf:9d:48:e8:56:d2:d1:44:
         60:78:5c:92:83:f8:2d:73:ce:69:4b:89:cb:70:74:24:d2:e4:
         4e:83:fb:98:4a:e4:b8:e2:af:dc:7a:4e:81:a3:8d:c5:1b:2d:
         68:9c:05:91:6f:99:9f:bf:19:42:aa:ac:59:35:21:d3:dd:be:
         22:45:25:18:0c:e7:b8:cd:90:f9:89:24:ba:ea:db:a5:b5:3a:
         14:93:31:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 07:55:13 2025 by rpki-client