Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/fe7befd3-6096-3978-8edb-97da95fe85c2.roa
File:                     fe7befd3-6096-3978-8edb-97da95fe85c2.roa (raw, json)
Hash identifier:          gwlw0gqhg0/XwsIVzYUtuDhzTRj8Bme3SHYBSrnclgM=
Subject key identifier:   64:97:04:2C:F7:B0:37:85:E3:C4:B8:69:20:C8:8E:59:FF:A0:F0:61
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F4328584AB0BB7E9667C46DB5B55FC1C0
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/fe7befd3-6096-3978-8edb-97da95fe85c2.roa
Signing time:             Wed 30 Jul 2025 13:00:40 +0000
ROA not before:           Wed 30 Jul 2025 13:00:40 +0000
ROA not after:            Tue 28 Oct 2025 13:00:40 +0000
asID:                     62240
IP address blocks:        166.1.23.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 06 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:b0:bb:7e:96:67:c4:6d:b5:b5:5f:c1:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Jul 30 13:00:40 2025 GMT
            Not After : Oct 28 13:00:40 2025 GMT
        Subject: CN=d658c540-0fe4-4a1c-bf27-64459fc2e4ba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:c5:a8:9f:b3:a0:48:e8:0a:63:95:58:b6:41:
                    55:63:b2:5a:19:04:10:1d:ea:69:fc:3d:93:e9:bb:
                    e8:f6:3e:2c:af:1a:88:e1:85:bc:4a:87:96:b6:31:
                    25:eb:03:05:1a:8c:85:3a:86:cc:71:46:75:4e:cb:
                    7a:70:9d:58:dc:ae:11:76:d8:87:c9:2a:b0:98:0e:
                    38:5d:7e:e1:82:cf:96:49:d2:77:e0:54:33:92:16:
                    d8:59:45:b4:c0:14:72:63:b1:27:a8:2d:45:98:cc:
                    c1:f1:d8:97:be:a2:74:c6:64:05:fd:63:a1:6a:76:
                    c8:71:bf:4a:26:66:89:b0:43:9a:6b:9a:c6:0c:04:
                    76:9a:f0:f4:c1:6d:e7:98:31:f4:cc:54:0b:9e:ac:
                    2b:22:8f:a4:ad:bd:7a:48:73:da:7a:81:bd:6f:ff:
                    86:d7:cd:d1:18:00:ba:f7:21:ec:3a:5c:a8:a8:4f:
                    b1:47:3a:76:e1:4f:84:51:a2:a3:05:db:2d:3b:8a:
                    7e:71:7f:57:8f:b3:2b:71:08:c9:be:c7:77:d3:ea:
                    92:5c:0d:57:70:e1:15:c6:98:83:4a:2e:2e:15:15:
                    47:e8:0e:0c:8e:81:c8:0b:88:e9:7d:2f:10:4f:46:
                    4b:b1:ae:f8:66:ed:31:be:88:c0:52:8d:57:1d:a1:
                    80:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:97:04:2C:F7:B0:37:85:E3:C4:B8:69:20:C8:8E:59:FF:A0:F0:61
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/fe7befd3-6096-3978-8edb-97da95fe85c2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.1.23.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7c:da:b7:b4:a9:08:43:9a:1d:35:68:1d:b0:06:a5:6f:68:f2:
         bc:f5:91:c0:38:70:03:30:53:52:c1:1b:ce:9c:be:e4:32:0b:
         a1:8c:df:f0:5d:ae:d6:61:4e:c9:d0:f2:97:f8:e8:c7:9d:d9:
         c2:5b:ea:ee:2f:35:ab:8a:ea:ef:3e:c3:2b:29:c3:29:1c:79:
         d3:66:52:b2:ba:9e:6e:e2:a2:8f:59:71:8e:29:1b:51:96:24:
         e3:63:84:0c:b5:e3:c9:ba:d3:e8:15:29:75:60:34:cc:a8:37:
         a5:89:ed:9d:12:03:1e:c0:a9:64:8d:a4:94:f7:07:a7:28:ee:
         ed:ea:92:ba:8c:cb:2f:2c:0e:ef:dd:7e:9d:ba:22:f8:c0:d3:
         19:7c:c7:1a:52:ac:fb:77:b8:c8:d9:35:39:05:7b:4f:29:cf:
         eb:8a:30:61:f5:48:3d:90:af:fe:ba:0e:1f:8d:66:52:70:40:
         3a:d3:a5:60:6d:19:99:30:70:0b:a6:9b:13:06:bd:aa:e0:e2:
         07:15:7a:c3:fb:d3:5b:5e:30:b3:2c:f1:09:22:3c:df:96:5b:
         8c:8d:6d:93:0e:cd:27:5f:7b:ce:af:3f:5e:b7:84:fb:3d:53:
         05:89:bd:9f:56:85:c6:63:06:d8:5d:88:9c:a8:55:05:b2:0b:
         78:49:ce:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 08:16:15 2025 by rpki-client