Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/f4c68815-3d15-31ef-8c79-3e658ae8e571.roa
File:                     f4c68815-3d15-31ef-8c79-3e658ae8e571.roa (raw, json)
Hash identifier:          jOytRz5NtzKbwjoLT7hHTp3HfPhX9UB/aNTyfntktQY=
Subject key identifier:   9D:65:21:58:64:7C:75:69:E4:BB:8C:42:6D:AB:97:B3:BF:58:35:EA
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F4328584A82AB482F90E37EEFA121D400
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/f4c68815-3d15-31ef-8c79-3e658ae8e571.roa
Signing time:             Mon 14 Jul 2025 01:00:50 +0000
ROA not before:           Mon 14 Jul 2025 01:00:50 +0000
ROA not after:            Sun 12 Oct 2025 01:00:50 +0000
asID:                     197450
IP address blocks:        166.0.153.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 06 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:82:ab:48:2f:90:e3:7e:ef:a1:21:d4:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Jul 14 01:00:50 2025 GMT
            Not After : Oct 12 01:00:50 2025 GMT
        Subject: CN=705cf183-5b7c-43f1-87c1-62d142f7f66e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:94:94:65:2a:bc:4b:95:a9:d1:88:ef:a6:b9:
                    5c:26:8f:5f:23:d5:93:04:3b:7d:47:40:7b:73:64:
                    ec:3f:4b:0b:5b:19:1e:39:77:94:37:73:35:83:eb:
                    0c:0d:d8:9d:da:31:7b:f7:c6:6a:0d:08:a3:39:1b:
                    a1:32:98:44:4c:db:f0:29:f8:67:37:5a:8c:e5:be:
                    70:2f:f2:b9:69:02:06:80:25:9a:05:4b:92:5a:c4:
                    72:b3:ab:8a:88:2d:38:cf:ce:64:7a:04:e3:9e:88:
                    85:60:e9:c2:0e:97:8d:a5:57:50:5a:62:14:ba:1c:
                    5c:9e:f2:cd:38:04:7c:b7:03:56:64:8d:73:1f:1d:
                    c0:b1:66:fc:05:ee:e4:ce:bd:bb:87:bc:ae:e1:68:
                    3e:74:59:8f:2b:08:e4:6d:c0:9f:f0:c7:49:1f:af:
                    30:ef:56:05:ff:6f:fb:0a:e8:44:fa:b6:0d:b3:8d:
                    8e:c9:ed:cf:d4:45:06:cd:63:95:42:4d:07:8e:a6:
                    3d:11:bd:a0:4d:c2:fe:22:31:9f:5e:d7:a2:be:8c:
                    39:48:76:db:74:f3:a9:42:df:7f:60:cd:29:2e:f6:
                    69:5f:bf:f5:f2:cf:50:85:56:d9:c7:10:ed:0d:7e:
                    02:cb:d6:1b:c5:c0:b5:b1:9f:cd:62:3b:8c:bf:75:
                    7d:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:65:21:58:64:7C:75:69:E4:BB:8C:42:6D:AB:97:B3:BF:58:35:EA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/f4c68815-3d15-31ef-8c79-3e658ae8e571.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.0.153.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         41:07:af:b0:c7:5e:c8:54:4a:0b:e2:28:1f:37:f4:40:a5:09:
         8e:a0:60:18:7d:b2:e7:0a:26:69:25:f2:56:77:ae:78:6b:0b:
         36:40:0b:70:1f:cb:35:00:39:54:17:b2:c4:ec:6d:f7:ed:7d:
         2e:4b:82:d2:82:a8:50:e5:93:e5:de:c9:b6:f4:36:43:22:9c:
         86:11:ee:78:cd:9d:06:36:ac:b0:5c:f0:06:04:31:33:8e:b4:
         af:b0:0e:d5:13:d3:52:f7:bf:8f:17:05:fd:9b:91:cd:86:87:
         3b:eb:d8:22:c8:a2:3b:58:01:2b:c8:1d:f5:73:6e:ea:36:bc:
         99:9f:cd:ff:20:67:1d:39:37:d6:a2:6d:c8:f4:9a:a5:79:1e:
         6b:b0:2a:d4:8c:32:5c:96:58:d2:35:a6:dd:e8:60:07:4d:70:
         97:83:67:29:da:23:12:47:ac:80:dd:03:5d:13:00:e8:c4:6e:
         bb:83:7b:3b:38:9a:28:ff:f8:7e:b4:b2:04:08:0d:48:c2:37:
         f5:50:d8:ed:2a:79:a3:62:73:c0:ee:b6:37:b5:1e:9b:08:32:
         5e:60:ce:01:4e:14:eb:39:eb:be:24:8f:1f:22:fa:e1:ef:3f:
         ef:19:6e:3c:e7:63:6c:fe:72:8e:ce:4f:a4:b1:cf:ca:4c:e8:
         ba:95:1d:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 08:22:33 2025 by rpki-client