Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/d55e942c-4bfb-3524-a282-3913048277e6.roa
File:                     d55e942c-4bfb-3524-a282-3913048277e6.roa (raw, json)
Hash identifier:          iAiw37uKcBXFKOtKx07sfcmh5eoVqw2M0tA5MMknAVY=
Subject key identifier:   D6:95:68:04:8B:02:33:71:F6:8C:38:BE:DC:C9:A3:57:A6:7F:01:12
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F4328584A84123ED74B9E7A1F9AC8E480
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/d55e942c-4bfb-3524-a282-3913048277e6.roa
Signing time:             Mon 14 Jul 2025 13:01:04 +0000
ROA not before:           Mon 14 Jul 2025 13:01:04 +0000
ROA not after:            Sun 12 Oct 2025 13:01:04 +0000
asID:                     58061
IP address blocks:        166.0.122.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 25 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:84:12:3e:d7:4b:9e:7a:1f:9a:c8:e4:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Jul 14 13:01:04 2025 GMT
            Not After : Oct 12 13:01:04 2025 GMT
        Subject: CN=1b0d45f6-d387-434e-b951-3b7996e86616
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:0c:ae:f1:6d:c9:13:6c:9c:f3:42:02:85:8c:
                    f8:26:3d:45:9a:1c:ec:37:6b:ae:f8:5d:19:92:a6:
                    38:ce:71:f8:e6:db:e2:3f:b5:84:79:d9:f6:12:eb:
                    31:8d:a3:56:a5:ae:d0:a6:a2:95:a7:02:ea:af:3d:
                    6b:c3:85:1b:ce:4b:46:53:be:c7:39:35:c5:c4:e3:
                    b5:30:4b:dd:80:c9:4c:3c:df:d4:75:ef:60:68:67:
                    82:ee:b2:f9:12:39:62:66:fa:01:54:39:30:ae:0b:
                    6f:a8:50:74:80:c0:b1:c2:ad:d5:3e:45:ab:be:49:
                    4c:a3:b4:cd:bc:92:a0:63:10:49:40:16:b1:83:31:
                    fc:7c:97:cb:cd:73:37:34:56:3c:f3:bb:2e:0b:2e:
                    e3:cc:ec:52:9c:11:7f:54:3b:20:49:12:eb:30:42:
                    7d:1b:ce:43:72:1e:8d:bd:7d:ac:02:d1:6e:34:dc:
                    e7:01:98:8d:e2:5a:eb:3f:b6:5f:c6:0a:c5:d9:6c:
                    f4:6f:9b:f7:92:ae:a5:20:9a:96:c9:4b:9d:83:27:
                    68:ac:2a:74:92:e2:49:a3:47:07:08:85:99:8f:bd:
                    b6:85:3f:0c:8c:6f:63:ed:44:00:4c:82:3d:43:7c:
                    9c:77:61:fc:42:6d:c5:b8:ef:5d:53:9b:2c:53:29:
                    18:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:95:68:04:8B:02:33:71:F6:8C:38:BE:DC:C9:A3:57:A6:7F:01:12
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/d55e942c-4bfb-3524-a282-3913048277e6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.0.122.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         10:3d:22:ba:f1:96:32:2f:bd:09:34:00:ad:29:2e:f0:cd:16:
         d3:22:2a:0a:66:f8:1c:fe:ea:9a:f0:5e:b4:fe:c5:65:6e:c0:
         9f:91:09:64:cc:4c:65:85:ab:23:32:23:a6:c9:27:23:76:6d:
         85:5b:92:c1:54:76:c4:35:30:03:61:3d:94:90:19:8d:73:db:
         0a:19:52:77:5c:96:bb:4e:75:35:8a:4b:f9:e9:04:13:54:e5:
         5b:29:bd:fd:18:dd:93:67:47:53:a9:4e:80:db:ca:f6:79:bd:
         0b:d0:55:c1:82:d9:65:5d:0d:37:3a:65:85:87:9a:4b:2b:54:
         83:82:e4:38:ec:a5:99:49:5e:b3:8d:8b:5d:89:7b:4d:e4:bb:
         e0:d6:c7:c9:62:da:99:69:be:d7:89:9a:c0:8b:9a:b4:35:97:
         52:ad:0e:bd:4c:e6:6e:5f:bc:a5:94:5f:93:e2:4f:45:68:58:
         84:c3:25:52:0b:45:27:e0:44:cd:7a:f1:37:e7:07:44:b7:a5:
         94:b7:4b:94:6b:25:9b:26:87:d4:4f:6e:9e:f0:2d:82:e9:61:
         5b:c4:30:81:eb:e3:74:ce:e6:ff:69:25:39:b2:72:12:04:61:
         6c:78:e5:25:50:44:d1:ff:cd:a3:56:db:96:39:cc:e2:1e:6d:
         78:cf:3e:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 23 12:11:49 2025 by rpki-client