Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/7cf06975-928b-3630-b5db-f2d0c63f518f.roa
File:                     7cf06975-928b-3630-b5db-f2d0c63f518f.roa (raw, json)
Hash identifier:          QeQkATjK1Ooopq2GXpOTMoQWpCdLjOpbw026hhCzF54=
Subject key identifier:   D7:BC:FB:11:63:7A:21:1C:14:92:C3:1D:7C:56:BF:97:C0:CF:73:58
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F4328584A9E6560013F6C2290D2597F00
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/7cf06975-928b-3630-b5db-f2d0c63f518f.roa
Signing time:             Wed 23 Jul 2025 23:22:44 +0000
ROA not before:           Wed 23 Jul 2025 23:22:44 +0000
ROA not after:            Tue 21 Oct 2025 23:22:44 +0000
asID:                     7385
IP address blocks:        166.0.159.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:9e:65:60:01:3f:6c:22:90:d2:59:7f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Jul 23 23:22:44 2025 GMT
            Not After : Oct 21 23:22:44 2025 GMT
        Subject: CN=119dea4d-b566-46a5-9da5-2390fd845449
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:fa:83:b7:86:8c:c5:ad:e5:25:74:74:67:23:
                    20:8c:da:4f:0d:24:7a:8f:74:bf:11:91:36:be:0b:
                    7f:b8:a4:52:21:0f:c3:48:7a:fb:ec:8e:b1:b4:a6:
                    2e:cf:7e:ac:a4:7b:c6:53:3a:e5:b8:e7:d7:d2:8a:
                    b4:2c:59:03:49:70:de:ea:a6:4f:bd:80:28:bf:07:
                    e6:74:c9:27:21:f3:71:be:ed:9a:c5:be:bf:5a:7d:
                    80:c8:a2:74:17:1b:33:a2:e3:ea:8f:af:fd:c4:cc:
                    04:3f:8e:b6:98:75:1f:a1:6b:36:45:c1:b2:58:b7:
                    de:5c:8b:e6:ae:50:29:0e:09:78:5d:48:44:eb:b0:
                    2b:b2:06:e0:be:25:36:86:ff:3a:06:a5:cb:d7:df:
                    45:f8:62:65:df:13:e1:b6:c6:f2:59:00:bc:38:48:
                    da:9c:58:df:16:01:39:21:29:e3:3c:d0:a8:b3:99:
                    9c:ff:1a:65:ee:8e:1c:e1:19:a6:34:9b:4b:b6:36:
                    31:0f:4d:d9:3c:07:6f:51:cc:e6:8a:53:e9:6e:6a:
                    dd:57:e0:31:51:60:50:d0:d4:d2:7c:45:78:71:50:
                    31:3c:a4:43:36:fe:c3:95:f2:e4:a3:b6:fc:39:4b:
                    ad:4f:4d:31:cd:1e:a3:9c:05:79:74:2d:e7:e0:77:
                    da:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:BC:FB:11:63:7A:21:1C:14:92:C3:1D:7C:56:BF:97:C0:CF:73:58
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/7cf06975-928b-3630-b5db-f2d0c63f518f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.0.159.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a4:db:b0:24:9c:ce:17:8f:fa:f2:c6:ef:85:3f:2e:f6:fe:3c:
         f1:43:80:72:00:2d:95:f8:f2:3c:31:f6:ce:95:e7:af:99:c9:
         b2:bc:b3:7d:9e:ca:ee:57:bd:f4:b8:0d:b9:ce:3c:d5:b5:68:
         ce:e1:79:14:5e:d5:a4:73:23:05:db:33:14:f9:6e:51:e5:5e:
         84:39:0f:3d:2c:d9:02:63:02:82:bf:f6:16:bc:8a:cb:7b:e7:
         90:3b:32:96:0c:d1:19:df:37:ff:6d:aa:55:7d:ff:46:d6:75:
         92:7b:94:e5:a1:c7:21:fb:53:ec:5c:0f:bf:9a:c5:8d:47:25:
         84:bc:72:58:05:1c:59:a4:17:ae:af:d2:55:6f:d8:68:8f:05:
         6d:74:47:69:5f:77:7c:a9:3a:24:f6:2b:89:d7:e9:59:c1:45:
         0e:db:f9:c3:b0:ad:9d:d9:71:56:ff:79:7b:b2:56:3e:e3:79:
         41:58:fb:64:ed:5e:e3:65:62:1f:fd:5b:45:35:74:b2:af:f0:
         eb:ea:54:8c:e5:d2:ba:89:b6:ef:32:03:c6:c8:d1:23:de:20:
         3a:f5:eb:1f:df:cc:c3:d1:11:af:72:db:ab:d4:83:8d:a1:3b:
         7d:c0:55:86:32:76:11:7f:4e:09:10:6e:b0:d3:3f:fa:0c:f4:
         8b:c6:fa:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 13:02:55 2025 by rpki-client