Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/f32fe338-5429-31c6-a355-c358dd0647d0.roa
File:                     f32fe338-5429-31c6-a355-c358dd0647d0.roa (raw, json)
Hash identifier:          +v6xirBFdI9XNcuDasyRUb60IskkaSPkDzf+RJZqf/c=
Subject key identifier:   86:0B:24:07:FF:22:2C:59:83:E5:44:15:4F:3E:E0:53:6D:65:FF:86
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F4328584A87B8BDA14AD7B372079CA980
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/f32fe338-5429-31c6-a355-c358dd0647d0.roa
Signing time:             Tue 15 Jul 2025 20:27:07 +0000
ROA not before:           Tue 15 Jul 2025 20:27:07 +0000
ROA not after:            Mon 13 Oct 2025 20:27:07 +0000
asID:                     44559
IP address blocks:        166.1.178.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:87:b8:bd:a1:4a:d7:b3:72:07:9c:a9:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Jul 15 20:27:07 2025 GMT
            Not After : Oct 13 20:27:07 2025 GMT
        Subject: CN=5656c421-9285-4ba8-b77d-57bd1d7b687a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:f4:15:78:c8:83:73:b6:2a:80:90:62:c5:81:
                    c9:74:a1:2e:e1:19:15:77:c8:16:99:19:a5:fb:02:
                    88:b9:a4:8f:ea:47:2f:7a:1b:d2:c7:ec:4c:35:9e:
                    50:9d:6d:b3:74:31:2e:48:eb:2c:0c:b8:66:8a:2b:
                    b7:2e:a8:a3:ad:59:9d:80:79:2f:fd:40:46:1d:59:
                    f0:cb:97:5c:7a:42:02:68:d9:53:76:04:99:5a:2e:
                    85:b7:79:e0:18:2d:99:40:24:11:2f:bb:5f:d3:dd:
                    49:f9:b0:4e:6d:40:70:01:5d:d5:bd:72:99:48:1b:
                    e8:7f:0f:8b:59:4e:75:09:ad:1d:7d:42:fb:3a:8b:
                    e6:37:20:30:d7:90:4a:f6:79:f4:f5:92:2c:31:e8:
                    a4:2e:3f:75:e6:8f:a2:d8:17:40:32:dc:e4:49:48:
                    0a:90:ae:f6:ae:2a:02:06:c9:89:e0:9e:77:99:3e:
                    ce:37:f7:e2:e2:54:5f:b2:a1:f3:29:8a:ff:b5:04:
                    7c:ab:4c:e1:0d:a2:7b:a9:26:b5:d2:49:e3:88:1e:
                    5a:4d:92:26:53:88:22:37:98:a0:9c:8e:27:92:e0:
                    01:d3:66:a7:4a:50:7e:ff:b4:d2:b7:07:0f:d5:35:
                    79:14:22:c5:99:3d:8f:ff:1a:86:80:aa:55:4b:1c:
                    38:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:0B:24:07:FF:22:2C:59:83:E5:44:15:4F:3E:E0:53:6D:65:FF:86
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/f32fe338-5429-31c6-a355-c358dd0647d0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.1.178.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         af:df:5b:39:97:e3:a2:2b:36:ca:3d:89:ea:68:24:85:e1:db:
         1b:67:82:6f:e3:d8:2f:c9:44:a5:25:ca:87:f4:9d:1c:2c:b3:
         7c:9d:4c:7b:58:a2:eb:54:ab:e6:e1:d4:4e:2d:98:29:58:65:
         8f:95:6f:da:3d:47:20:a0:07:62:ea:da:1e:cd:96:71:6c:82:
         51:ba:6f:10:0f:51:9b:23:18:a8:ab:c0:b0:24:8d:47:a4:52:
         1b:85:cc:7f:47:ff:c3:55:92:8a:9b:36:ae:01:7e:d5:f2:fb:
         5c:f1:00:26:5f:16:6b:91:78:c2:36:d2:4a:e9:e9:cd:f3:ae:
         03:32:ec:6b:15:53:65:98:12:70:f3:cd:51:75:ad:27:c0:7e:
         99:1d:c3:34:80:78:c5:95:4d:ce:98:0a:df:30:e3:cc:8d:fe:
         0a:e6:06:84:d3:fe:0a:00:90:ad:d4:82:4f:53:79:3c:8f:0c:
         c9:06:71:0e:89:d5:a9:43:8a:4b:93:db:3c:e0:87:8d:f1:57:
         46:96:dc:ba:87:0a:af:74:36:44:32:69:22:97:98:b8:2f:ee:
         4e:96:f1:ff:25:73:46:5c:25:6b:3e:01:66:cc:5f:ce:87:36:
         2b:c6:0c:30:33:f8:56:94:6b:53:7f:9e:ae:7f:17:ff:ed:74:
         e8:e0:1a:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 21 08:37:04 2025 by rpki-client