Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/c1a6e858-5239-37ed-8045-24815b91f61f.roa
File:                     c1a6e858-5239-37ed-8045-24815b91f61f.roa (raw, json)
Hash identifier:          6VzwTt+tUmeZLrD0pVmJaglpvHKhmvLDqOeEMRrMDjM=
Subject key identifier:   17:AD:54:11:81:A7:C3:C3:62:15:64:D7:02:67:7D:42:4C:26:E0:78
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F4328584A87B8BCF5756B03155B9D8DC0
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/c1a6e858-5239-37ed-8045-24815b91f61f.roa
Signing time:             Tue 15 Jul 2025 20:27:07 +0000
ROA not before:           Tue 15 Jul 2025 20:27:07 +0000
ROA not after:            Mon 13 Oct 2025 20:27:07 +0000
asID:                     44559
IP address blocks:        166.1.166.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:87:b8:bc:f5:75:6b:03:15:5b:9d:8d:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Jul 15 20:27:07 2025 GMT
            Not After : Oct 13 20:27:07 2025 GMT
        Subject: CN=c0776417-9946-4d32-abca-3fafa1826b3d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:81:3d:81:c4:0e:b3:6f:c4:24:27:ea:bd:1f:
                    45:d9:9e:6c:7d:57:a8:80:d7:f5:63:be:81:36:a5:
                    14:a5:50:e2:e1:fc:40:19:e1:74:86:ea:2f:1f:e0:
                    9c:c9:82:b2:56:1a:ab:b6:5b:d2:8b:0f:00:a0:1c:
                    1b:58:50:fd:32:f5:51:9a:f0:ec:27:24:15:0f:3f:
                    d6:b8:f1:74:61:4c:fd:07:1f:b4:fc:b9:14:0a:87:
                    9b:44:8e:b7:6d:1c:14:95:68:ce:6b:ac:f6:a6:e0:
                    5f:b9:e7:00:46:8c:2b:52:18:d3:cb:0c:1f:20:aa:
                    ff:6d:a3:08:05:68:ae:a5:d3:8a:01:22:25:40:58:
                    c6:91:5e:af:a8:3f:ed:9e:6e:26:04:09:f4:61:c6:
                    0f:dc:76:b4:45:4b:74:2d:d7:f8:f6:75:18:6a:4f:
                    a2:0f:a6:d1:72:2e:0c:9f:74:78:ac:f9:48:d4:cd:
                    45:f5:d1:a8:42:bc:c8:bc:68:47:5f:8e:13:cb:bf:
                    a5:38:dd:c4:18:72:31:c0:58:dc:8b:ec:84:03:8c:
                    4b:f2:4e:96:09:b4:5f:f7:e5:cb:76:7a:a9:c6:16:
                    4a:8a:7b:0a:0d:ba:df:bd:9c:18:cc:b5:0c:c7:fa:
                    86:7a:69:71:61:45:d6:c5:63:79:f1:7a:e5:7c:f4:
                    11:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:AD:54:11:81:A7:C3:C3:62:15:64:D7:02:67:7D:42:4C:26:E0:78
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/c1a6e858-5239-37ed-8045-24815b91f61f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.1.166.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         65:8e:5f:9f:4f:a0:6a:dc:75:7c:1c:0e:e9:b3:06:67:74:47:
         26:80:2c:9b:31:f3:12:78:0b:14:7c:71:74:fb:a8:99:1b:a7:
         a9:39:39:2c:1c:18:2a:84:d0:2c:09:47:ac:81:ad:e8:cf:2b:
         9d:d2:21:11:ea:9f:85:1c:b2:0e:3c:3d:ce:46:10:8c:4f:d9:
         9a:79:7e:30:8d:f2:01:a0:62:7b:37:e0:5b:24:99:b3:11:9b:
         ee:dd:c4:cc:62:cd:ac:ac:db:00:ce:e8:b9:de:b7:17:84:bc:
         f2:73:6a:69:aa:d1:50:9b:10:48:56:f7:b2:89:46:f2:7d:ff:
         e9:05:d5:cf:c1:da:e8:de:36:c8:db:0a:4d:08:f1:7b:fe:85:
         57:55:73:46:d0:d5:27:16:59:e7:05:21:03:ca:52:29:38:06:
         b5:0f:f5:15:f8:18:bf:63:db:5b:f5:2a:e8:f1:b4:a8:2e:d1:
         c8:63:43:58:9d:fc:a5:f8:93:95:6e:d1:f5:89:b3:40:d7:a9:
         df:e8:60:16:20:33:06:68:4f:d8:7d:7e:e2:69:a9:f8:c2:74:
         2f:e4:e1:b4:b6:d0:2f:f1:9b:bf:ee:28:c2:de:2d:62:f2:11:
         b2:f0:72:49:27:54:65:7b:08:2d:89:fb:d4:f7:51:7c:e6:18:
         9e:fb:62:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 21 13:01:50 2025 by rpki-client