Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d/f2c43a6f-3a97-3978-b7ce-83d35f1e0ec7.roa
File:                     f2c43a6f-3a97-3978-b7ce-83d35f1e0ec7.roa (raw, json)
Hash identifier:          r0nRyzcmcCSUvVvl9JwBnaq7Yxfgg+e1nkoP0KXxIeo=
Subject key identifier:   19:A2:06:0A:05:E2:75:BA:34:8D:39:06:07:8F:AA:91:9D:2F:0B:9A
Certificate issuer:       /CN=f8e7a246-465c-42e8-8be1-af167b20b04d
Certificate serial:       010D0C9F4328584A7A4B3FCC21C58F540F303540
Authority key identifier: 47:E2:47:E2:08:C3:82:0A:55:A4:99:5E:E0:10:DE:78:D2:94:F1:CE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d/f2c43a6f-3a97-3978-b7ce-83d35f1e0ec7.roa
Signing time:             Fri 11 Jul 2025 01:00:51 +0000
ROA not before:           Fri 11 Jul 2025 01:00:51 +0000
ROA not after:            Thu 09 Oct 2025 01:00:51 +0000
asID:                     266820
IP address blocks:        107.166.4.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d/f8e7a246-465c-42e8-8be1-af167b20b04d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d/f8e7a246-465c-42e8-8be1-af167b20b04d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Jul 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:7a:4b:3f:cc:21:c5:8f:54:0f:30:35:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f8e7a246-465c-42e8-8be1-af167b20b04d
        Validity
            Not Before: Jul 11 01:00:51 2025 GMT
            Not After : Oct  9 01:00:51 2025 GMT
        Subject: CN=3edb4d16-90ad-42ae-afbd-fed694108abd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:6c:9b:d9:3a:df:91:6c:7f:d8:db:23:d6:9b:
                    94:e1:38:4b:8b:76:26:df:0e:ba:b4:dd:8d:bf:ed:
                    ed:f6:3f:33:1a:43:11:7b:73:db:29:c5:f5:53:fc:
                    3d:18:6f:a1:92:7d:ab:ac:3d:0c:51:51:f8:1a:db:
                    ea:8f:dc:98:0b:32:aa:05:c8:76:0c:cb:45:30:44:
                    0f:e7:4c:4d:ac:39:10:f2:60:bb:4f:74:b2:5a:4a:
                    1a:a3:f2:82:51:47:d2:ad:5e:d7:21:d1:29:03:52:
                    e4:30:15:2f:5a:1a:f1:a6:66:5e:1d:a8:e5:94:fa:
                    65:68:91:08:fa:8a:9f:30:97:a4:09:fc:6b:da:9b:
                    b7:7e:f8:a8:e6:d8:93:f6:b0:01:9e:4a:36:0f:fd:
                    dd:82:ed:ed:3b:1f:bf:7b:b3:47:84:0d:95:ae:ff:
                    2e:d3:31:e4:0f:43:1c:d5:b3:4a:00:de:a3:17:ef:
                    18:7a:10:a0:50:3a:6a:d4:db:e0:ed:37:61:82:30:
                    a9:e4:de:fd:c7:be:cf:c0:52:e1:4f:28:04:72:97:
                    a3:5d:27:95:b6:5c:40:0f:35:25:7e:c6:5c:71:2f:
                    1b:79:e1:1c:85:c2:eb:ff:7b:9a:9d:c6:26:9a:4d:
                    c0:c4:40:c4:ed:0e:56:93:5b:67:f5:43:19:65:b6:
                    7b:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:A2:06:0A:05:E2:75:BA:34:8D:39:06:07:8F:AA:91:9D:2F:0B:9A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d/f2c43a6f-3a97-3978-b7ce-83d35f1e0ec7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d/f8e7a246-465c-42e8-8be1-af167b20b04d.crl

            X509v3 Authority Key Identifier:
                keyid:47:E2:47:E2:08:C3:82:0A:55:A4:99:5E:E0:10:DE:78:D2:94:F1:CE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  107.166.4.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c0:4c:42:37:69:6d:73:ee:ef:c4:4f:c1:c4:6b:09:95:82:6b:
         ad:ab:44:ca:14:07:ac:62:8f:22:dc:ef:f6:9c:30:49:d2:35:
         f9:03:78:d3:77:b2:72:e3:25:95:99:af:92:e3:61:eb:7c:25:
         6a:ac:89:a8:7d:1f:dd:31:d8:b1:6d:d2:8f:e0:74:83:dd:f3:
         7f:e3:54:05:b7:86:56:1f:61:b3:f3:15:94:e8:da:89:98:76:
         6a:e1:5f:5f:01:fa:59:4b:93:51:c2:7e:92:b2:01:6e:2b:04:
         15:6c:99:b5:ff:50:c8:09:43:95:69:9c:a1:3f:3e:7a:c1:ed:
         51:49:ce:a9:37:32:70:29:88:17:ef:39:ad:39:a0:c8:d8:82:
         47:e0:70:8f:f0:b7:3c:ba:ed:30:83:9c:01:cc:7f:d5:74:3f:
         c0:29:7c:7a:cd:3d:75:ca:15:e1:34:bd:90:82:f0:f7:66:e3:
         16:3c:8f:47:f2:1a:dd:5c:b0:40:16:c9:08:4b:6f:f9:a7:b7:
         00:3c:72:8b:53:d8:f4:3c:dd:6c:69:8e:a1:3f:eb:50:85:bc:
         0e:4c:82:1d:78:19:c4:7f:21:e5:bb:d4:fd:f3:6a:ef:8e:f1:
         41:6a:87:2d:dc:6c:e7:32:00:b7:73:a2:93:40:cc:ce:15:bf:
         b1:06:05:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 20:12:32 2025 by rpki-client