Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/cc1854da-b688-3405-aa93-0a182377317d.roa
File:                     cc1854da-b688-3405-aa93-0a182377317d.roa (raw, json)
Hash identifier:          eV9FwAIIKwjcxOW8VsHVwGpy0e6DTN5C5daoIvNldac=
Subject key identifier:   EF:1D:20:8D:1C:F3:8F:91:33:73:12:FC:56:37:40:BB:62:0B:F0:4F
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F4328584A84123EF8E83D1ED9F801C9C0
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/cc1854da-b688-3405-aa93-0a182377317d.roa
Signing time:             Mon 14 Jul 2025 13:01:04 +0000
ROA not before:           Mon 14 Jul 2025 13:01:04 +0000
ROA not after:            Sun 12 Oct 2025 13:01:04 +0000
asID:                     58061
IP address blocks:        166.0.120.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:84:12:3e:f8:e8:3d:1e:d9:f8:01:c9:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Jul 14 13:01:04 2025 GMT
            Not After : Oct 12 13:01:04 2025 GMT
        Subject: CN=36fc9ae7-bce4-44a5-ac68-06a49e78f58f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:73:2a:d5:3f:a3:53:16:2d:1f:9f:e0:ca:f0:
                    e4:ea:e5:36:f5:fa:d9:ca:ad:d8:f8:a4:0d:52:58:
                    4d:30:26:95:93:ba:8f:74:02:c0:4c:f1:e2:80:77:
                    e7:62:0a:bc:f4:86:f0:e3:98:da:0c:c7:ea:e8:11:
                    f7:3f:e1:63:51:51:b1:01:36:7d:d8:24:21:0a:29:
                    87:10:e8:32:32:ee:e8:55:20:a9:e0:a2:e7:d1:34:
                    a9:57:82:1e:a9:09:a7:7d:d8:40:c9:b8:b0:61:fb:
                    d9:ff:21:2b:bb:d4:a3:08:3d:3f:a4:c5:f3:cd:ab:
                    fa:a3:70:d7:50:02:d5:0b:30:e2:18:ea:62:c7:f3:
                    cd:b5:cd:c5:2c:89:af:cf:db:89:19:5e:4c:c5:1d:
                    38:fa:d7:95:79:f3:cf:ec:70:01:04:e6:01:4a:c5:
                    d3:5e:81:65:ea:46:44:02:95:d0:df:96:43:7f:37:
                    37:03:e0:75:04:fc:ba:22:e0:e9:ea:e3:c3:99:09:
                    75:04:06:1c:74:c7:ab:d2:2b:b9:87:8b:6b:42:1c:
                    c1:f7:c4:cc:10:db:de:c6:0e:e5:db:42:1c:53:c7:
                    21:48:75:72:3d:b1:dd:47:2c:21:55:45:38:62:ac:
                    63:fb:d9:67:f4:b9:a1:c0:1c:a6:67:42:6f:b7:4b:
                    e1:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:1D:20:8D:1C:F3:8F:91:33:73:12:FC:56:37:40:BB:62:0B:F0:4F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/cc1854da-b688-3405-aa93-0a182377317d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.0.120.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8f:28:ea:8e:53:e9:43:8a:cb:01:89:62:86:00:1b:80:56:46:
         87:45:bb:87:91:2c:bd:19:b0:95:33:15:3d:f1:07:b0:ec:c0:
         63:cd:dd:57:4a:b4:2c:11:6e:b3:23:79:68:a1:4e:8e:71:4b:
         32:30:41:1f:13:ab:19:2c:fd:6a:0d:82:3a:45:30:db:48:df:
         65:be:ad:38:8c:1e:28:0b:80:c6:fc:7c:d6:e5:0f:6f:2a:b4:
         0c:b7:c5:d4:89:ff:3a:17:f8:b0:5e:06:e9:3f:bf:c8:5a:f8:
         92:73:3d:ca:fd:48:6c:6e:57:20:ab:19:70:ee:2e:96:ab:63:
         65:ee:05:36:f6:2d:a4:ca:8a:d6:87:39:5a:58:ef:fb:d2:0e:
         5b:eb:7a:6b:be:b5:f6:ba:df:9d:07:37:ba:98:9b:32:9e:f5:
         fd:19:de:73:5c:83:23:bd:0f:e7:33:b4:90:02:f3:7f:0c:91:
         c8:19:ce:fa:fe:9a:92:91:15:18:29:c2:92:96:44:22:71:c9:
         61:e5:8d:6d:7c:d1:ae:e0:27:99:3f:77:2d:93:df:de:f4:e1:
         2d:88:52:de:01:86:9d:51:8b:f2:5e:4a:f0:96:ca:9e:aa:f0:
         ab:58:d1:e6:5a:7b:db:fe:95:a9:82:32:6f:7b:52:54:e3:dd:
         77:17:38:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 24 17:16:09 2025 by rpki-client