Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/20e35170-5b10-3644-98f3-4690c336a970.roa
File:                     20e35170-5b10-3644-98f3-4690c336a970.roa (raw, json)
Hash identifier:          7Z3pY+7WL7ufIWRLMiC+mIArZ4F4Pfda5MyT3cb/W20=
Subject key identifier:   5F:A3:C5:ED:1B:F0:68:9F:20:C1:52:77:6A:5A:22:D5:01:23:B2:B5
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F4328584AE4612137301EF0247EC16E00
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/20e35170-5b10-3644-98f3-4690c336a970.roa
Signing time:             Mon 18 Aug 2025 01:00:33 +0000
ROA not before:           Mon 18 Aug 2025 01:00:33 +0000
ROA not after:            Sun 16 Nov 2025 02:00:33 +0000
asID:                     48614
IP address blocks:        166.1.70.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 22 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:e4:61:21:37:30:1e:f0:24:7e:c1:6e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Aug 18 01:00:33 2025 GMT
            Not After : Nov 16 02:00:33 2025 GMT
        Subject: CN=240b1f0a-d862-440e-8166-7c42253ce464
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:fb:d6:3b:83:35:6c:48:33:04:65:8a:10:95:
                    90:ed:52:1a:85:39:a4:72:7f:1b:66:99:f4:7e:c1:
                    a5:cc:69:49:26:1f:6c:85:b8:fe:fd:ee:27:de:47:
                    60:76:39:bd:7b:78:9c:44:a6:e4:a3:55:09:48:8e:
                    4f:c0:17:c0:34:1c:bb:47:a3:a1:8b:9c:59:0d:df:
                    73:3e:93:4e:02:e7:86:ac:bb:53:72:fd:21:2a:2c:
                    02:d6:f1:ce:88:04:e6:14:e0:a5:a4:31:aa:ae:6b:
                    cd:7a:5d:4e:c7:57:1e:c8:cf:74:63:c9:ce:1b:07:
                    59:76:2e:09:20:91:09:5b:96:22:81:81:e2:70:bd:
                    44:c4:b3:4f:05:bf:cb:59:cb:38:ca:ba:61:ea:52:
                    e2:71:e4:1a:aa:57:ba:77:15:3b:2c:ec:4a:21:ec:
                    a0:cb:88:f4:39:92:4d:37:66:41:d7:95:a5:8b:b5:
                    41:86:69:b2:b7:83:ef:7d:e3:23:24:fb:f4:9f:d5:
                    b3:58:9c:7d:86:1e:75:a0:a3:5c:13:d0:55:20:64:
                    dc:5a:3e:20:a7:48:6f:ed:06:d7:5b:28:f7:e8:3d:
                    c0:be:42:17:58:1f:3d:ea:73:83:f7:01:7d:6a:f2:
                    12:a9:4c:56:ee:fe:67:49:53:39:31:a3:da:0b:de:
                    1f:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:A3:C5:ED:1B:F0:68:9F:20:C1:52:77:6A:5A:22:D5:01:23:B2:B5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/20e35170-5b10-3644-98f3-4690c336a970.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.1.70.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7b:ef:e1:83:8f:7f:c0:50:9e:d5:a8:dc:7a:7c:3e:3d:7e:ce:
         29:35:82:b5:ee:98:f7:ef:f9:c1:00:52:7a:df:8e:17:81:4f:
         27:92:21:bb:f5:b9:a2:7c:13:7c:85:a7:dc:aa:d4:9e:2e:c6:
         a4:78:b6:5b:97:c7:c4:31:2e:61:b5:de:cb:ab:d9:3a:a0:7f:
         a1:f1:1e:02:35:57:b4:b1:d2:d5:ee:e3:f4:19:1f:ef:6a:d2:
         a6:c0:86:5c:a5:64:de:46:27:a9:79:2b:4b:96:ce:f6:25:b2:
         5e:ce:d2:04:47:98:e5:2f:92:09:97:a3:43:19:01:37:c4:71:
         9b:25:3a:bd:9c:12:8c:08:b2:96:ff:6e:60:63:c9:c6:bc:d7:
         4c:c1:88:43:f9:8d:bd:dc:e0:db:88:8f:25:42:6c:74:78:52:
         c5:85:1e:b4:36:7c:31:9b:0c:0d:39:81:45:fa:3a:06:82:a7:
         3d:4c:1a:e4:df:99:b4:d0:d2:b0:03:87:d5:ec:27:4f:6d:4f:
         74:19:67:61:90:33:88:89:26:62:22:7f:33:d7:62:1e:b0:ac:
         15:4d:1f:42:5a:e4:f8:4f:bc:cf:71:0b:92:40:b1:32:4d:1c:
         63:87:9b:f1:4a:81:33:b6:74:30:52:fd:99:b0:a3:2e:5d:60:
         25:2f:67:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 20 13:17:52 2025 by rpki-client