Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/0d23a162-0447-3d5f-b951-13ee30590792.roa
File:                     0d23a162-0447-3d5f-b951-13ee30590792.roa (raw, json)
Hash identifier:          S2Yaoj/kKPh7mFxyzygTLXEEH0rgU39s1t9dSf5ka1E=
Subject key identifier:   2A:EC:F1:44:C7:C3:A9:0D:B5:1A:0D:46:E0:C1:B4:F7:8D:80:6B:01
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F4328584A87B8BD3454256426D0BC3260
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/0d23a162-0447-3d5f-b951-13ee30590792.roa
Signing time:             Tue 15 Jul 2025 20:27:07 +0000
ROA not before:           Tue 15 Jul 2025 20:27:07 +0000
ROA not after:            Mon 13 Oct 2025 20:27:07 +0000
asID:                     44559
IP address blocks:        166.1.170.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 25 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:87:b8:bd:34:54:25:64:26:d0:bc:32:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Jul 15 20:27:07 2025 GMT
            Not After : Oct 13 20:27:07 2025 GMT
        Subject: CN=2b1f3ae0-44f1-4edd-bcc8-90289895f74e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:c5:e0:17:99:aa:d7:86:44:93:78:53:54:c6:
                    09:a8:c8:a9:74:27:50:63:f3:f3:13:56:c9:7a:9d:
                    82:3c:ff:a0:52:f9:58:64:58:a4:88:de:f5:ab:29:
                    c5:23:18:24:fd:7c:6d:48:da:b5:7d:1e:dd:4b:be:
                    21:ff:05:c3:3c:81:db:18:18:03:9a:e9:64:aa:43:
                    00:90:f6:06:b7:06:53:7c:e9:5d:86:82:a8:98:00:
                    c5:0a:d2:6d:88:60:6e:6d:1d:52:7c:51:f5:7a:6e:
                    e1:ae:30:c1:a6:1e:c5:8b:e0:64:0e:b9:90:be:9a:
                    ed:b8:4b:3f:ca:0f:0a:7f:5d:df:d6:7f:e3:05:bf:
                    dd:fd:4c:39:0c:11:b0:ac:5c:24:97:5f:ce:91:02:
                    c8:72:09:a3:d6:55:d6:62:bc:d3:cc:9e:82:f6:e3:
                    0d:13:8b:bd:14:5a:23:75:b7:28:93:14:ba:56:91:
                    26:f1:1d:d4:7c:4e:37:f5:32:cd:07:75:4f:14:be:
                    09:de:88:19:f3:ce:a0:24:36:9d:ba:4f:7a:f5:00:
                    0a:34:33:2f:f4:67:51:2b:bf:7e:b1:24:62:33:99:
                    4e:4c:f3:90:88:12:b8:4c:c1:ec:21:3f:2b:d9:4a:
                    6c:10:93:a6:76:eb:c4:27:d3:9b:a5:7d:0e:a2:d8:
                    39:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:EC:F1:44:C7:C3:A9:0D:B5:1A:0D:46:E0:C1:B4:F7:8D:80:6B:01
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/0d23a162-0447-3d5f-b951-13ee30590792.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.1.170.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         01:c6:84:f8:8b:e9:f1:fd:8a:f0:ed:75:2a:27:8c:47:85:0a:
         82:b7:5c:ca:ad:de:68:04:b7:14:df:74:60:6a:63:ee:1e:48:
         11:75:88:43:6c:e9:25:d4:22:9f:48:09:8f:b1:86:e4:d8:89:
         d7:25:71:cb:1f:e8:4c:22:8a:38:33:9c:e4:7e:98:8e:48:c2:
         e7:69:96:35:21:b0:46:d2:0b:8b:a3:cf:80:26:58:a9:5a:ea:
         9c:46:36:2d:fc:1d:e7:80:11:58:bc:9f:fc:d0:e8:86:4e:3a:
         3a:51:28:d2:27:d3:5e:fb:7d:76:a3:06:b6:e5:d0:5d:35:5a:
         5a:16:f1:cf:9a:45:17:fb:b3:b9:44:c0:30:da:ee:b2:e3:f1:
         96:0d:10:29:f7:25:47:92:1b:28:b5:1f:9e:ad:5e:2b:0c:19:
         a3:dd:48:50:0c:72:6c:4a:3c:ce:e0:8a:b8:11:73:16:8c:64:
         28:f6:6f:aa:32:79:19:a6:3b:52:de:50:95:4e:66:57:ee:fd:
         f0:78:99:bc:cd:bb:f0:44:f7:8a:fd:e4:74:33:39:d9:65:17:
         40:ff:cd:92:f4:f9:80:07:83:c5:05:11:5b:ba:70:0c:2f:69:
         9f:7d:aa:82:dc:e8:ea:53:a4:6d:42:9a:12:ce:c3:39:1a:1a:
         3a:c5:09:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 23 02:24:37 2025 by rpki-client