Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/a0775e72-3a4c-3546-ada2-de5824ee8c3d.roa
File:                     a0775e72-3a4c-3546-ada2-de5824ee8c3d.roa (raw, json)
Hash identifier:          eLVhFxDNIEtrHsdDnUL+lOQHCYk1pwNZLC/OoFVBubk=
Subject key identifier:   19:F5:1E:CC:2B:13:D9:48:66:B1:D2:AA:83:D4:07:F3:E3:3A:B3:AD
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F4328584A87B8BD1458A76D33D389E920
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/a0775e72-3a4c-3546-ada2-de5824ee8c3d.roa
Signing time:             Tue 15 Jul 2025 20:27:07 +0000
ROA not before:           Tue 15 Jul 2025 20:27:07 +0000
ROA not after:            Mon 13 Oct 2025 20:27:07 +0000
asID:                     44559
IP address blocks:        166.1.168.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:87:b8:bd:14:58:a7:6d:33:d3:89:e9:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Jul 15 20:27:07 2025 GMT
            Not After : Oct 13 20:27:07 2025 GMT
        Subject: CN=fedbfbf5-18ce-4dec-a45d-c70a7904eb20
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:08:b2:46:f3:db:61:43:5a:a9:5c:66:d9:51:
                    31:54:33:c7:7d:36:df:fb:97:3e:01:c2:86:d5:e7:
                    4f:f1:0e:a8:37:b3:ee:b1:00:b7:7f:dc:d0:8b:85:
                    e6:27:59:e6:ba:95:bb:83:d7:36:a8:68:d0:70:36:
                    17:3c:ad:82:26:6c:0e:d6:08:23:40:10:87:e2:71:
                    ae:30:2b:5b:35:37:dd:a8:22:e9:09:52:ea:01:6e:
                    2c:c3:47:cf:9b:2c:f8:30:ca:6c:15:c6:59:f0:35:
                    09:cd:66:1c:ba:09:59:22:0d:b3:91:ab:0e:3f:db:
                    c8:3b:4c:88:9f:fb:1d:37:c2:3b:fb:ed:6d:d2:1a:
                    8e:ee:88:49:6a:dc:b2:19:bf:51:e6:e9:ba:4b:14:
                    65:d6:a7:31:13:55:55:b5:9d:4c:00:aa:da:d7:29:
                    9f:1e:da:ee:32:5d:29:48:0f:93:e8:05:47:cb:6b:
                    0d:bd:eb:f6:69:ea:7c:61:81:53:02:08:57:47:4b:
                    2f:67:ca:07:4c:9b:85:bf:84:0e:04:93:05:38:80:
                    a0:3f:fe:27:62:29:f4:3c:87:61:af:6d:2c:1a:a3:
                    b1:f2:0a:d2:f1:db:37:81:eb:4f:ef:17:b5:0f:a5:
                    52:b6:b2:ea:54:60:21:28:01:98:26:8a:67:79:1e:
                    a8:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:F5:1E:CC:2B:13:D9:48:66:B1:D2:AA:83:D4:07:F3:E3:3A:B3:AD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/a0775e72-3a4c-3546-ada2-de5824ee8c3d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.1.168.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2f:3d:c6:22:e5:45:4c:e6:9b:5d:73:59:c0:6a:ed:72:a7:ab:
         11:ab:95:74:82:4b:ba:53:6a:68:14:d7:ac:06:09:bc:99:32:
         3a:ca:31:59:9f:29:ef:62:e1:33:9a:d7:92:13:c0:86:d6:8a:
         77:be:1d:49:65:d2:56:46:34:74:5b:c8:9d:bb:9d:ff:4e:19:
         65:b1:45:5c:cd:49:c7:31:9f:85:16:40:da:99:31:c9:b7:07:
         34:80:e1:d1:e3:a3:1a:9d:4b:6a:92:11:01:e9:a7:1b:e4:47:
         16:b5:95:ff:19:c8:c1:23:da:dc:34:3f:d0:26:13:b6:49:fb:
         1c:a2:3f:a8:d7:a3:ac:8b:59:87:61:72:fa:49:b0:eb:f1:4b:
         3b:43:67:45:2d:b5:0c:c9:17:5c:d1:b1:f9:fa:73:29:19:c6:
         a0:76:68:ab:84:c2:e6:1c:c8:0d:9f:be:44:7b:c2:30:6b:9e:
         8d:44:d8:45:64:67:22:8b:3c:c1:ea:3e:42:79:5e:73:e8:e7:
         ce:69:8a:8f:67:7f:9f:4d:44:6c:29:d1:b7:ab:96:bf:a8:7a:
         96:9e:15:1a:bf:12:86:30:53:b0:03:eb:7f:c0:1a:4e:d8:6e:
         f1:0d:c5:80:41:34:05:c6:17:83:b2:24:94:98:7a:e8:51:c2:
         74:1c:46:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 21 18:09:29 2025 by rpki-client