Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/23397520-2a0c-324b-b945-9d7e5c320cef.roa
File:                     23397520-2a0c-324b-b945-9d7e5c320cef.roa (raw, json)
Hash identifier:          5nhs1vIkvKQzR67KuRVZ/JNiGrt8JwL8Oc98g8ry5gI=
Subject key identifier:   B0:5C:A4:8B:69:47:DD:BA:57:B1:92:47:D8:E0:97:96:BC:0F:30:BD
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F4328584A87B8B9FE8A30D7AA7A71BE00
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/23397520-2a0c-324b-b945-9d7e5c320cef.roa
Signing time:             Tue 15 Jul 2025 20:27:05 +0000
ROA not before:           Tue 15 Jul 2025 20:27:05 +0000
ROA not after:            Mon 13 Oct 2025 20:27:05 +0000
asID:                     44559
IP address blocks:        166.1.49.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:87:b8:b9:fe:8a:30:d7:aa:7a:71:be:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Jul 15 20:27:05 2025 GMT
            Not After : Oct 13 20:27:05 2025 GMT
        Subject: CN=a66072de-a8db-460f-a112-2c3e42e8ed84
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:9e:19:28:9d:eb:ec:01:73:e3:c8:10:38:50:
                    90:5b:e3:59:03:0b:77:6b:b4:87:d9:29:a3:23:58:
                    64:0e:45:9b:1a:20:28:eb:cd:62:ea:fe:ed:f9:27:
                    8c:f1:51:5f:d5:e1:d1:2b:b9:91:c4:7f:c7:fa:3b:
                    89:f7:09:38:9d:03:ae:80:8c:b8:85:a0:11:e3:05:
                    db:e0:a9:02:59:0d:b0:6a:e8:5f:f6:54:e3:bb:80:
                    a3:38:55:94:82:52:f2:ac:3c:99:07:be:0c:ba:50:
                    3f:a0:01:70:0a:a4:aa:e5:f4:37:6b:d0:fd:bf:d0:
                    2b:7c:fb:9b:70:5c:c3:c7:4d:e6:4e:ad:03:26:f4:
                    a5:0f:f2:55:44:b0:0b:fc:33:21:df:00:fe:80:0f:
                    f1:df:a0:92:dd:b9:32:88:7e:35:eb:34:f7:e0:03:
                    63:bd:b7:ad:d0:0b:10:2b:2f:44:95:a9:f6:5f:d7:
                    52:5b:0e:67:3d:5e:58:47:64:a1:a0:d7:59:cf:84:
                    f8:78:73:d6:d1:cc:bd:4e:a7:1f:47:73:b1:34:4d:
                    54:69:00:91:33:51:23:ff:98:92:74:81:d2:b2:04:
                    32:de:92:e5:cf:b1:06:ac:68:3f:7e:60:a7:51:44:
                    8e:23:7f:15:9e:e1:d1:cd:be:3f:c5:eb:fb:d0:9b:
                    7b:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:5C:A4:8B:69:47:DD:BA:57:B1:92:47:D8:E0:97:96:BC:0F:30:BD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/23397520-2a0c-324b-b945-9d7e5c320cef.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.1.49.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a6:0d:80:9c:50:df:eb:17:ff:90:61:eb:7d:2a:3b:57:0b:d1:
         dd:7c:b7:b9:19:ab:37:a1:43:51:4b:44:38:57:9b:bd:d5:9d:
         5c:92:a8:4e:bb:43:c3:63:bd:b2:9a:87:9d:04:46:f8:67:91:
         23:9e:ea:4f:be:b4:ec:ca:7d:40:04:7e:5b:c5:d6:f8:11:8e:
         0e:10:2b:c9:99:62:6b:7c:13:8f:d6:1f:58:c9:f5:6b:78:d7:
         ca:98:1c:12:eb:ec:0d:61:38:db:0d:47:b3:15:e4:d7:73:55:
         9f:12:23:c4:9e:7a:c8:44:f8:74:12:28:61:a9:12:b3:c0:5b:
         66:79:ee:3e:51:84:a8:48:a2:7a:5d:1a:94:44:23:39:61:1f:
         8c:ad:f2:13:59:45:b1:49:9b:db:58:d3:ce:c2:76:08:53:44:
         49:d4:0c:71:c6:90:fb:1a:7b:52:a7:ec:17:db:88:84:db:d1:
         5d:a6:0e:7f:89:7d:f0:44:6d:f3:48:70:47:af:5e:67:b9:8b:
         15:53:4a:2d:8e:12:91:bb:12:1e:c9:71:c1:8e:5d:0b:30:28:
         99:7d:92:e5:7b:45:fd:84:10:57:0f:67:56:b7:e0:b4:fc:42:
         e1:2a:1e:00:8c:dd:41:e6:81:8b:5e:58:97:2c:3e:d3:45:18:
         fd:5b:06:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 21 08:37:18 2025 by rpki-client