Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/bf9038cb-768d-3c30-8595-1da41addd327.roa
File:                     bf9038cb-768d-3c30-8595-1da41addd327.roa (raw, json)
Hash identifier:          aVLOTpKiptshijutPDkGD3DeJxvMYdPjhAYz+XxcSqA=
Subject key identifier:   A2:D1:AE:84:12:B3:1B:20:5E:84:22:E5:0B:D5:86:A8:88:64:16:9A
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F4328584A9E655FCB95DFBB754E4AF200
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/bf9038cb-768d-3c30-8595-1da41addd327.roa
Signing time:             Wed 23 Jul 2025 23:22:44 +0000
ROA not before:           Wed 23 Jul 2025 23:22:44 +0000
ROA not after:            Tue 21 Oct 2025 23:22:44 +0000
asID:                     7385
IP address blocks:        166.0.138.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:9e:65:5f:cb:95:df:bb:75:4e:4a:f2:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Jul 23 23:22:44 2025 GMT
            Not After : Oct 21 23:22:44 2025 GMT
        Subject: CN=c998420e-defe-47d6-bd6b-7826ebc6bdeb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:9e:a3:f8:f1:f3:b4:66:02:fb:98:e5:a8:14:
                    9e:1b:bd:11:bc:85:41:1c:ab:b8:58:bb:25:c0:d7:
                    fb:b2:15:b8:69:bb:d1:3a:49:77:9f:b5:ce:66:c0:
                    57:8c:ad:06:18:01:6c:8a:49:aa:bd:2c:ca:fb:bd:
                    8a:6c:2e:37:4b:1b:8e:e5:7b:7b:3d:d6:e7:b1:09:
                    27:bf:e7:27:db:7d:60:8f:f4:ac:f8:39:8d:21:14:
                    65:f1:f6:63:b4:8c:f2:99:25:70:90:ed:08:c4:5a:
                    4a:2b:c5:90:84:78:dd:2b:6b:fb:f5:7e:93:ae:b0:
                    7f:b9:12:b2:c2:95:42:53:ec:ee:b8:35:45:57:ac:
                    fc:cf:aa:ca:58:d6:ba:84:65:28:68:11:c5:e9:26:
                    de:69:66:78:48:4b:db:3a:35:59:87:ee:c0:05:f9:
                    ba:9f:c9:8c:6c:72:45:c0:21:c3:65:49:ae:af:93:
                    da:12:7e:ec:52:bf:96:ad:5c:05:84:d7:3a:2b:02:
                    f5:ec:13:55:da:c7:f2:c1:6b:2a:ab:be:a3:0d:16:
                    e9:9a:e8:2a:a9:a3:60:f6:99:2e:fe:99:a7:01:f2:
                    63:6f:96:19:b0:1f:b5:d6:ce:85:f9:20:ce:65:9f:
                    66:99:53:13:88:3b:72:5f:b2:99:55:b8:f9:a1:79:
                    c9:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:D1:AE:84:12:B3:1B:20:5E:84:22:E5:0B:D5:86:A8:88:64:16:9A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/bf9038cb-768d-3c30-8595-1da41addd327.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.0.138.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         af:90:17:91:db:fd:63:a0:c3:24:be:02:e9:d8:c4:09:79:46:
         91:b9:15:4f:6e:b2:04:0b:a6:03:3a:c3:d2:03:5d:df:a2:fb:
         32:e1:5e:83:ff:96:6c:41:9e:cb:12:b7:fb:d5:0d:53:74:8d:
         6a:6d:e1:fa:ed:d1:6a:62:25:bf:af:53:78:f3:81:66:18:9b:
         90:f0:af:52:3a:ec:f6:64:7f:6d:f6:e7:8e:82:4f:28:59:ca:
         5f:50:18:e6:78:59:43:6c:8f:68:e2:d4:db:28:77:80:ef:4b:
         89:a4:84:1d:51:1d:26:c9:a3:3b:05:81:dd:16:41:c0:31:ad:
         ab:a0:04:65:33:fe:b2:dd:8e:dd:35:27:77:bb:8e:bf:19:ae:
         b3:37:24:99:c1:08:ad:e8:ad:43:db:19:8f:39:c4:d8:f3:bd:
         43:33:21:02:bb:ae:69:58:37:32:a6:fc:00:de:78:04:7c:be:
         85:4f:c9:6b:7a:4b:9c:ad:95:8f:19:28:e1:4f:9c:c2:a6:79:
         84:1d:fd:b7:9f:cd:bf:48:37:60:9c:7d:83:3a:8e:fe:57:35:
         0e:fc:7f:ef:09:b4:2d:a0:89:54:4b:55:9c:40:21:61:f9:91:
         a7:44:58:e5:5f:00:94:70:60:f0:08:19:70:c7:4d:a9:d7:35:
         db:71:79:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 13:13:24 2025 by rpki-client