Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/86d9b413-e25f-35e7-a0ab-b1ef4414a4ce.roa
File:                     86d9b413-e25f-35e7-a0ab-b1ef4414a4ce.roa (raw, json)
Hash identifier:          ucEswSWrBI8UxNGuwbRkjmQc3SgjmXxT+soYHC1gbW4=
Subject key identifier:   51:27:86:30:22:29:32:6F:68:C2:1D:05:AB:EB:EA:4E:BB:84:F0:FC
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F4328584B5F37585439FC97793CCF8520
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/86d9b413-e25f-35e7-a0ab-b1ef4414a4ce.roa
Signing time:             Wed 01 Oct 2025 01:00:32 +0000
ROA not before:           Wed 01 Oct 2025 01:00:32 +0000
ROA not after:            Tue 30 Dec 2025 02:00:32 +0000
asID:                     209043
IP address blocks:        166.0.76.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Oct 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:5f:37:58:54:39:fc:97:79:3c:cf:85:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Oct  1 01:00:32 2025 GMT
            Not After : Dec 30 02:00:32 2025 GMT
        Subject: CN=3aa2e9bb-1bc1-42b7-a89c-39956ff76186
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:c5:06:18:de:24:d5:45:b9:8f:33:0c:f7:e0:
                    f3:95:fa:8a:59:3d:3d:95:ae:fc:e3:09:ff:28:24:
                    6b:e2:42:53:c9:6d:74:21:c1:db:e4:6f:b6:7d:1f:
                    69:c5:f4:21:84:88:4b:0c:6e:82:03:38:a9:11:fe:
                    c9:21:82:39:eb:fd:99:98:6a:a4:2b:cd:cd:1e:e9:
                    12:b8:6e:fa:5a:8e:5a:17:20:33:85:c5:3c:82:dd:
                    b9:ec:d7:c0:f3:86:d0:cc:75:69:90:22:7e:e6:3a:
                    b7:99:d3:a0:f1:ca:ff:ef:a6:21:83:e4:48:3f:78:
                    a7:07:0d:bc:81:1b:ba:4f:db:e0:f8:2d:64:21:b3:
                    6e:68:47:c8:47:c8:86:98:9c:a3:17:c1:df:48:c9:
                    ba:05:10:d2:c0:3a:7a:d3:a5:a0:5f:89:dd:bc:a0:
                    4b:f0:a9:2d:e4:88:50:49:46:16:48:6b:0a:76:a2:
                    0f:f3:4f:5b:31:57:0f:54:3a:f4:18:c8:1f:99:64:
                    64:f8:d5:a7:21:ea:42:59:04:3c:56:eb:ba:f6:63:
                    f4:7a:7f:31:63:9d:3c:3a:c1:72:a4:e1:c1:8f:4a:
                    62:f5:6a:52:a8:81:54:dd:26:44:71:aa:29:a1:a2:
                    53:28:05:bd:68:0e:2c:16:33:f5:15:cd:9d:5b:24:
                    ff:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:27:86:30:22:29:32:6F:68:C2:1D:05:AB:EB:EA:4E:BB:84:F0:FC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/86d9b413-e25f-35e7-a0ab-b1ef4414a4ce.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.0.76.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         63:21:38:7e:0e:1c:f5:44:db:1b:82:46:2d:a7:4d:df:c7:74:
         77:88:2c:34:53:e1:de:02:05:fa:4b:7a:a0:c6:5d:d6:25:75:
         0d:c3:14:ba:d5:c7:b1:5c:13:ae:ac:cd:72:71:90:e1:50:ba:
         9a:40:05:47:b4:0d:51:81:83:c7:17:85:09:6a:21:99:26:0e:
         36:14:ce:a7:11:11:62:e9:fd:93:69:92:32:b8:de:13:35:f3:
         80:a3:20:c7:5b:b3:f7:80:a9:3f:dd:28:34:5e:12:de:53:ea:
         72:6e:c3:9a:ee:35:48:28:67:af:a6:d8:4d:fc:cc:74:a0:0c:
         18:93:b9:47:c5:34:aa:df:59:65:f3:44:26:7a:06:5f:56:10:
         a1:5e:4b:2e:a4:a3:bb:b9:df:06:31:bb:13:ea:cc:fa:f0:81:
         c0:73:16:b9:a1:a7:8d:43:64:b5:33:3f:be:67:4b:87:d4:8a:
         83:d0:a4:1b:3a:fd:20:07:e1:c6:ca:d0:0a:13:fb:13:19:88:
         78:4c:1a:37:45:91:6c:3a:aa:6a:2a:f8:60:1a:cc:ee:ef:a7:
         54:df:c6:fc:8a:68:d6:dc:5a:bb:db:7b:e0:60:0f:e5:33:b8:
         f3:74:3b:f7:85:00:6f:3e:70:c7:ab:37:66:59:ea:e0:f0:18:
         de:5e:c8:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 16 16:13:09 2025 by rpki-client