Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/0af93068-2f23-3c81-85de-955db8f20581.roa
File:                     0af93068-2f23-3c81-85de-955db8f20581.roa (raw, json)
Hash identifier:          xE/KtTLYCEF9mpWQAFx3/esrJodB3EtDQccOusmaed8=
Subject key identifier:   0D:EE:F9:2A:BB:E1:7F:F3:34:12:49:C0:83:65:4F:9E:E1:A0:88:BC
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F4328584AC8767D694F4FBF857260BAC0
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/0af93068-2f23-3c81-85de-955db8f20581.roa
Signing time:             Fri 08 Aug 2025 01:00:33 +0000
ROA not before:           Fri 08 Aug 2025 01:00:33 +0000
ROA not after:            Thu 06 Nov 2025 02:00:33 +0000
asID:                     401152
IP address blocks:        166.1.48.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 22 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:c8:76:7d:69:4f:4f:bf:85:72:60:ba:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Aug  8 01:00:33 2025 GMT
            Not After : Nov  6 02:00:33 2025 GMT
        Subject: CN=007a60e9-eba4-4f9e-991d-df47f126640f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:53:bc:8c:51:86:0a:7b:55:ba:1e:9f:98:b2:
                    b3:e3:f4:4c:77:f6:f0:9b:00:9a:a9:f8:56:89:1a:
                    98:2e:e0:9e:aa:de:e9:1a:d2:b7:ed:f4:11:5c:84:
                    cc:9c:80:68:78:60:f2:3e:8a:10:bc:bc:bd:4d:c8:
                    d0:65:ab:d5:fe:bb:b1:6d:fc:c3:a4:56:17:48:61:
                    c0:0e:5e:c3:66:2c:df:d4:96:10:03:d0:08:86:90:
                    8f:12:94:7d:07:2b:0f:a5:90:9f:00:7b:78:e2:47:
                    1f:83:63:dd:ff:7c:04:d8:61:8c:78:d6:3f:de:74:
                    ff:06:fc:6e:a7:93:ce:65:ce:de:07:5f:51:53:46:
                    33:d0:64:fb:49:b6:cf:06:f8:1c:02:18:d8:6b:30:
                    b4:ca:c8:43:ed:9d:7c:b7:e2:56:90:7b:c4:fb:5a:
                    32:61:d6:e5:c3:f0:c2:21:f2:d8:ad:ec:45:d4:c9:
                    fe:ee:c0:d6:bb:a2:11:7c:f0:d8:1f:b7:e3:d6:c0:
                    f0:a4:56:c3:91:df:28:aa:5c:a2:06:b1:ae:5c:9c:
                    ab:bb:0d:c9:88:af:f0:b9:cd:16:ce:fe:4b:17:27:
                    fe:6f:75:4d:2c:34:c8:3b:23:9f:01:b3:93:d2:2e:
                    36:8b:ef:be:67:7e:1d:e9:95:67:aa:12:c3:92:ad:
                    e1:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:EE:F9:2A:BB:E1:7F:F3:34:12:49:C0:83:65:4F:9E:E1:A0:88:BC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/0af93068-2f23-3c81-85de-955db8f20581.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.1.48.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         36:f3:78:96:ac:bd:8a:77:12:32:c4:6f:19:69:91:47:d4:c4:
         e0:59:77:6c:7c:54:81:7d:5c:aa:c7:ef:78:09:eb:c7:48:45:
         9f:8c:98:dd:59:28:14:42:9e:3c:ea:b1:40:70:21:91:60:e7:
         d9:0a:88:56:6b:a5:65:3f:59:9a:ab:2d:b0:e3:98:da:8a:8c:
         7d:91:ea:7d:1a:a3:25:24:9c:eb:ae:a6:03:f7:84:42:f2:8b:
         e2:15:71:d3:90:9b:3e:63:94:47:8a:4c:06:87:a8:5e:ac:25:
         ca:f9:0f:9f:55:ae:07:b7:6a:41:29:80:e5:00:55:b8:df:9b:
         a9:3b:e7:98:95:ea:23:b9:34:e9:e8:8e:a8:36:6d:67:ee:34:
         47:14:9b:1f:17:6e:9f:ba:9e:b2:25:c2:5b:ce:0f:45:bc:bc:
         dd:98:28:4d:d0:08:8c:8d:4d:7f:27:af:27:ed:2d:26:68:fc:
         8c:8f:6f:fb:75:42:8a:de:29:4a:86:82:96:32:b7:8b:db:82:
         60:f7:0f:9d:ef:ed:52:0d:53:b2:af:af:26:6c:6b:f2:97:cc:
         73:98:77:99:22:f1:46:09:45:0b:d7:ee:c5:62:de:5c:64:38:
         34:d3:b4:54:09:47:5d:9d:b1:23:73:38:4f:3a:eb:5d:2c:80:
         26:bd:07:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 20 13:15:43 2025 by rpki-client