Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/b361c538-bdeb-3811-9450-91b0b91984d4.roa
File:                     b361c538-bdeb-3811-9450-91b0b91984d4.roa (raw, json)
Hash identifier:          cpxuqD9ZDEk1SpId/k75b4wAp7QOwCrY1VP0PBlgYbY=
Subject key identifier:   D7:39:78:18:13:F0:78:CB:A3:42:72:85:2C:65:D6:C9:2E:FC:48:CB
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F4328584B3DBA2A0EE206711693C32100
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/b361c538-bdeb-3811-9450-91b0b91984d4.roa
Signing time:             Fri 19 Sep 2025 01:00:33 +0000
ROA not before:           Fri 19 Sep 2025 01:00:33 +0000
ROA not after:            Thu 18 Dec 2025 02:00:33 +0000
asID:                     213823
IP address blocks:        166.1.72.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 Oct 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:3d:ba:2a:0e:e2:06:71:16:93:c3:21:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Sep 19 01:00:33 2025 GMT
            Not After : Dec 18 02:00:33 2025 GMT
        Subject: CN=47e13101-dec7-457a-b473-8b1fe547a8e8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:c6:7d:e8:5c:9a:7f:de:40:4c:e4:73:f9:a5:
                    ff:35:8a:2e:e8:53:6f:b6:43:b9:c5:8d:ed:21:81:
                    2b:bb:a8:07:68:d0:02:7e:2e:3a:dd:1b:c6:0f:fc:
                    24:92:46:d6:aa:61:15:f2:b5:e8:9f:d0:4e:0e:29:
                    20:0a:f2:1a:66:5f:bb:7a:2d:46:5d:3e:f1:97:10:
                    8d:25:b5:e1:2f:28:1c:68:2e:18:8d:45:b5:19:5f:
                    cb:4d:73:69:10:8c:c7:a2:4d:60:5c:e5:0a:16:f0:
                    5d:6a:c9:2f:3c:0e:a9:fe:42:c9:5e:01:d4:93:7b:
                    a7:be:e4:ee:d7:3c:17:6a:15:30:c4:2a:cb:f6:ff:
                    ed:49:6e:23:76:5c:74:77:f7:8a:ca:27:75:5a:68:
                    6e:65:42:ec:c2:84:37:88:fd:f9:4d:89:70:16:84:
                    f1:48:4a:6a:4c:bf:b6:c6:98:da:01:0f:d9:db:9b:
                    02:d4:21:b4:e0:c2:08:4a:5d:5e:2a:bd:37:94:ad:
                    80:aa:4d:bf:ef:cb:00:20:93:cb:75:62:93:da:ea:
                    07:bf:fd:eb:ba:74:2e:f0:8a:9c:7e:f3:92:fd:0b:
                    32:a3:72:38:6c:52:95:4f:61:1e:07:97:3c:45:92:
                    20:fc:c3:c9:14:64:60:ac:3e:62:5e:8b:a4:a0:70:
                    ee:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:39:78:18:13:F0:78:CB:A3:42:72:85:2C:65:D6:C9:2E:FC:48:CB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/b361c538-bdeb-3811-9450-91b0b91984d4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.1.72.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         85:a3:a6:42:4e:dd:a4:c7:ae:d1:87:4b:bd:15:90:37:d3:5d:
         25:29:d8:60:28:40:01:dd:34:4b:96:5a:92:34:49:e5:29:fa:
         ab:15:56:bf:a2:a1:39:3f:ac:a9:25:32:7e:81:1b:97:54:69:
         56:45:a6:05:23:bd:e0:36:0d:5d:03:ba:ce:73:38:11:a0:dd:
         43:19:99:5e:46:77:5b:01:b3:80:f0:b4:ae:d5:bc:f3:dc:1c:
         48:a4:29:1a:47:f0:38:05:c4:38:34:ef:7a:1f:88:47:42:87:
         35:eb:22:79:90:85:f1:a8:99:24:81:08:31:ce:dc:4b:3f:2d:
         de:92:7d:13:ed:4b:6b:05:a2:0b:f2:c2:dd:16:31:28:a1:e5:
         34:09:7e:4a:67:df:80:94:d8:80:df:1e:3d:78:00:5d:0f:9c:
         f8:dd:19:35:ff:3e:9b:02:ef:c0:9b:21:a1:19:ca:1e:ae:0c:
         e1:1f:be:e9:b7:88:86:2b:07:f2:c5:cb:5f:d3:a5:0c:aa:d4:
         77:d4:24:8e:a6:34:f6:3a:b2:a0:09:0c:52:01:29:c5:ed:b5:
         83:5e:4b:1a:99:54:2b:27:fc:09:5e:2a:c9:86:f4:90:d0:d4:
         0e:3b:25:a7:56:0a:9a:94:d5:e2:13:06:c9:b1:5d:d5:c6:39:
         2d:80:a3:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 11 14:45:16 2025 by rpki-client