Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/0d8d3c39-4c4b-3955-8d38-bba718c2b1c2.roa
File:                     0d8d3c39-4c4b-3955-8d38-bba718c2b1c2.roa (raw, json)
Hash identifier:          DlqzsblaEMIsxiJolN38uYtIj0ad4DfDXHtwckw9hgE=
Subject key identifier:   73:0B:52:5C:76:23:9F:79:D4:E8:56:22:4C:3D:20:78:AE:19:A0:AC
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F4328584B59A1DFB4E18B79D2ACFFA880
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/0d8d3c39-4c4b-3955-8d38-bba718c2b1c2.roa
Signing time:             Mon 29 Sep 2025 01:00:33 +0000
ROA not before:           Mon 29 Sep 2025 01:00:33 +0000
ROA not after:            Sun 28 Dec 2025 02:00:33 +0000
asID:                     213823
IP address blocks:        166.0.123.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 Oct 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:59:a1:df:b4:e1:8b:79:d2:ac:ff:a8:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Sep 29 01:00:33 2025 GMT
            Not After : Dec 28 02:00:33 2025 GMT
        Subject: CN=eb6fbd59-9784-482b-9f16-428f93057a63
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:40:84:f1:4b:2b:d8:30:21:5c:bc:de:31:f8:
                    58:5c:d6:97:54:75:6f:55:4d:ef:ef:9d:e7:77:41:
                    2b:60:02:73:b6:2b:b6:53:33:79:f6:91:15:83:a4:
                    65:0c:62:e6:40:72:58:07:fb:58:64:39:00:a1:b1:
                    5d:79:8f:d6:5f:42:23:14:2f:84:65:91:b0:32:84:
                    9c:71:69:bd:4a:95:14:6b:06:d3:dc:28:b8:50:dd:
                    be:ab:91:cc:75:94:22:a0:75:18:b2:47:f3:35:b2:
                    70:db:c4:61:25:17:7a:80:5d:f5:ae:55:0b:00:a0:
                    e6:a3:ca:d4:83:97:0d:c5:a6:e8:75:5e:b2:e5:0d:
                    1c:40:8c:61:cb:4c:1d:d0:9d:74:60:14:50:05:d7:
                    14:8e:03:62:de:77:76:14:b4:bf:0d:36:fe:37:bd:
                    7f:f6:a8:b0:2e:0b:72:87:ee:e9:1d:ca:b7:1e:50:
                    95:ca:92:78:30:bd:b3:9b:8b:67:a5:c0:e5:71:24:
                    33:8a:aa:0f:c1:50:5f:b5:b9:bf:96:d0:43:8b:14:
                    a9:c1:a7:fe:e2:7a:c1:72:46:bc:6d:40:39:89:d6:
                    68:18:f7:74:7d:9c:ea:be:b8:f3:db:d8:53:e6:3a:
                    fd:9f:30:90:66:ff:11:d4:78:a3:e3:d8:c2:82:6a:
                    25:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:0B:52:5C:76:23:9F:79:D4:E8:56:22:4C:3D:20:78:AE:19:A0:AC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/0d8d3c39-4c4b-3955-8d38-bba718c2b1c2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.0.123.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3c:2e:34:a8:7f:c4:a5:f9:7c:b4:c3:da:26:bf:b3:dc:72:c5:
         7d:ec:a7:b9:77:6c:e7:23:c1:17:e1:5d:fb:ff:85:e4:52:ba:
         96:4f:4a:1b:c4:b2:49:c3:c7:a4:39:99:0b:6f:e0:5c:15:62:
         18:4c:27:56:79:fb:2f:8d:5f:47:ae:29:8b:1e:12:ae:6d:6b:
         b6:05:65:0c:2e:6d:c4:9e:e5:a0:fb:09:83:d5:46:db:bc:3a:
         5a:1c:e5:98:08:a0:2d:31:dc:25:28:4c:58:b8:77:2a:d8:04:
         a8:d2:9e:b6:53:47:4b:c0:5c:33:e0:24:92:75:93:06:21:bc:
         da:60:b3:4a:45:38:b9:20:11:d6:ea:2f:90:0f:6f:26:cc:fc:
         5b:bb:b8:32:a7:ac:93:bf:b2:e1:a8:03:84:69:c0:d6:f0:84:
         1d:ec:c5:b1:50:ce:24:68:1a:c7:a4:95:ab:09:56:6d:42:09:
         9c:54:fa:dd:94:3d:5b:a9:d6:cb:2f:d0:cf:48:40:8a:10:ba:
         49:7e:32:82:62:75:17:14:b3:63:74:f9:74:ce:59:24:26:eb:
         87:fc:5a:87:26:d4:2d:14:d7:d7:10:74:70:17:43:f4:c3:5a:
         36:53:6d:be:16:50:34:1f:3a:0a:8c:a8:59:68:8b:eb:02:37:
         a6:f9:aa:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 11 14:42:02 2025 by rpki-client