Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/8765476f-13ea-3d3a-be97-f739fa0e75a8.roa
File:                     8765476f-13ea-3d3a-be97-f739fa0e75a8.roa (raw, json)
Hash identifier:          dzsmUKBRLJGu//+seVRcRDR2nLTzaBCGCLIrH2GKQvw=
Subject key identifier:   9E:16:0B:D6:7C:11:99:62:41:CD:4B:D1:FD:4E:86:66:3F:48:A8:91
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F4328584BDA2AFDF7CFC105AB722FE280
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/8765476f-13ea-3d3a-be97-f739fa0e75a8.roa
Signing time:             Fri 14 Nov 2025 02:00:30 +0000
ROA not before:           Fri 14 Nov 2025 02:00:30 +0000
ROA not after:            Thu 12 Feb 2026 02:00:30 +0000
asID:                     1239
IP address blocks:        166.0.190.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 18 Nov 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:da:2a:fd:f7:cf:c1:05:ab:72:2f:e2:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Nov 14 02:00:30 2025 GMT
            Not After : Feb 12 02:00:30 2026 GMT
        Subject: CN=87be38b1-31bd-46bc-ac48-d05a2f805113
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:62:9d:22:e4:1d:d0:97:07:52:91:6d:fc:93:
                    70:58:24:24:1b:d3:95:9a:bf:23:57:aa:32:6f:d8:
                    4b:ed:c3:b9:31:40:6b:22:7c:6b:27:ea:d2:e5:47:
                    39:76:b1:4d:cf:d4:be:f7:8c:44:32:4a:e3:cd:9d:
                    7d:23:25:e9:e4:e2:b0:20:19:ea:9c:71:1b:e9:0d:
                    19:64:a4:8d:25:d5:4a:cc:50:92:6a:c4:52:27:30:
                    ca:be:4d:1d:3e:48:ab:89:8b:47:a6:85:36:2f:76:
                    33:6a:c7:9d:8d:b8:48:c0:84:61:e1:f1:74:a4:d9:
                    45:41:89:f4:69:e5:e9:83:42:4c:db:c4:a5:fb:e2:
                    3b:f7:0e:62:21:47:8a:ff:bd:f0:1d:a9:1a:50:2f:
                    94:be:11:b7:c9:2a:25:5b:f2:08:6b:93:6a:0d:a5:
                    53:4a:7e:d0:d2:13:06:21:50:ed:a8:e6:20:6a:26:
                    0a:39:9e:f6:98:ee:59:57:6f:ab:57:8d:84:3e:6f:
                    e5:7c:fd:cc:db:90:52:df:fc:ba:aa:ad:c2:1c:47:
                    c8:d6:df:fc:57:5f:62:68:16:2f:89:26:b3:ba:18:
                    ec:5b:84:15:ec:c2:86:c8:c3:69:6e:dc:c6:89:c0:
                    51:3a:50:59:eb:76:91:c9:ee:d7:27:6c:fc:70:18:
                    e8:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:16:0B:D6:7C:11:99:62:41:CD:4B:D1:FD:4E:86:66:3F:48:A8:91
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/8765476f-13ea-3d3a-be97-f739fa0e75a8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.0.190.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b0:92:76:74:3a:e7:4d:9b:39:0f:a0:63:43:38:d5:1f:d3:bd:
         2a:c9:9a:a7:49:81:a1:85:96:b6:d1:67:5d:67:f4:58:4d:22:
         ac:f6:f3:76:1b:58:d6:22:1b:dc:76:58:bf:37:70:d8:f6:5c:
         ce:14:1a:db:ad:1b:fc:d4:62:e3:10:7c:07:c6:ab:89:24:58:
         c3:62:89:74:29:9f:f8:40:79:b1:82:04:78:ca:e5:7f:f9:74:
         0e:ec:f8:49:26:11:68:9a:56:9a:c8:47:3b:79:f4:b5:ed:bb:
         ff:45:5f:25:51:8d:1a:7b:86:d8:7f:99:49:8f:09:03:29:63:
         21:02:a4:ea:35:83:f8:c6:c8:7b:a8:d0:f5:97:ee:38:7a:8e:
         bb:dd:bd:5e:8c:51:7b:de:1b:26:e3:49:f1:4f:cd:8f:da:22:
         30:3f:57:7f:5b:d5:32:12:02:80:c6:1e:14:45:4a:4d:07:aa:
         15:71:01:4d:10:62:33:6e:93:be:35:e7:14:8c:2f:17:ab:a1:
         98:37:ac:82:be:35:40:e6:89:7f:73:13:f7:db:66:94:42:62:
         e5:bf:36:c9:18:1a:f4:3c:be:ec:3d:cc:7f:88:5d:32:0f:51:
         84:59:6d:df:11:52:a7:f9:64:2d:49:72:88:65:76:2d:40:07:
         08:fb:f3:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 15 19:59:42 2025 by rpki-client