Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/b239ed02-bc4f-355e-8c84-1b627628964c.roa
File:                     b239ed02-bc4f-355e-8c84-1b627628964c.roa (raw, json)
Hash identifier:          hCpP2EI6rA4TObiBJsa55PyOsezRFnX+2XPMU+te5Fg=
Subject key identifier:   F8:BF:0D:0F:96:78:BF:DF:D1:B0:50:F8:0B:09:3D:37:CB:E5:F1:61
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F4328584AE8913D4DA8523B28253D02A0
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/b239ed02-bc4f-355e-8c84-1b627628964c.roa
Signing time:             Tue 19 Aug 2025 13:00:40 +0000
ROA not before:           Tue 19 Aug 2025 13:00:40 +0000
ROA not after:            Mon 17 Nov 2025 14:00:40 +0000
asID:                     22168
IP address blocks:        166.0.195.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 22 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:e8:91:3d:4d:a8:52:3b:28:25:3d:02:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Aug 19 13:00:40 2025 GMT
            Not After : Nov 17 14:00:40 2025 GMT
        Subject: CN=bf9984ee-5e1c-420c-b74d-4bed05b7ae7f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:5b:95:8d:25:93:2c:0c:65:59:42:87:a0:4f:
                    d4:4e:0d:5d:b0:29:9b:71:97:e6:5b:d8:8e:ee:63:
                    9b:2a:f8:ec:21:59:a2:6a:74:a9:a6:56:bb:f0:11:
                    0e:1d:49:5d:26:0c:e5:d5:ef:61:90:ca:22:ca:22:
                    58:07:a4:c4:61:1b:87:8f:13:76:4e:74:d2:96:b7:
                    82:ef:06:7d:ba:ee:d1:c1:ed:53:e3:07:f9:86:e4:
                    6a:b4:02:f6:3e:f7:18:d3:52:ea:6c:7c:e9:b8:25:
                    88:62:c9:20:39:e9:e1:00:c9:0d:77:ae:1b:7d:b5:
                    5b:98:89:81:b5:0f:12:52:e6:86:be:04:b2:5b:81:
                    18:b6:75:47:ca:80:51:6b:99:4f:e5:6d:0a:19:89:
                    2d:d7:62:6e:e8:3a:11:05:b8:05:77:7c:84:a2:d5:
                    67:91:5a:bf:b5:4e:6c:bb:54:3d:04:48:5b:61:32:
                    31:34:22:a9:c0:eb:4d:0b:7c:6f:ae:fe:90:d6:c6:
                    ee:d8:1c:70:b0:c9:d7:f5:9f:64:76:c3:a3:35:53:
                    5f:f6:78:a9:64:65:0b:9d:13:40:f8:73:c5:08:be:
                    98:11:de:2c:3c:ac:c8:81:0d:5c:7c:0b:fa:04:8d:
                    48:89:c8:15:5c:63:1d:81:3f:ab:ef:d8:76:12:96:
                    3c:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:BF:0D:0F:96:78:BF:DF:D1:B0:50:F8:0B:09:3D:37:CB:E5:F1:61
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/b239ed02-bc4f-355e-8c84-1b627628964c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.0.195.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a8:23:9d:9e:99:fc:3d:2d:c6:ef:d4:8c:5f:12:db:a2:9e:a3:
         b4:66:97:bd:c1:34:f3:92:f5:68:94:5e:d0:47:32:83:70:2b:
         87:90:6e:fb:8a:2b:66:36:fc:92:7e:7c:f6:36:7c:61:e3:a0:
         05:98:30:70:8c:5f:98:7a:49:62:58:fd:6d:e9:bb:4d:55:c2:
         1d:ab:1a:b7:f8:ba:18:3a:1b:11:1c:25:9a:4e:b4:49:8f:c7:
         e3:fd:b5:bc:52:ea:dd:99:7a:28:eb:71:d7:89:63:4b:e1:50:
         77:bd:2d:df:12:97:8b:d5:91:70:cd:c9:0a:5b:c1:2f:a5:7b:
         93:13:31:e4:eb:0c:6a:9a:e6:2c:7a:4e:85:8c:b7:fd:e7:5c:
         5a:11:78:c4:18:b9:6c:d0:ea:5a:bd:f4:72:5c:7f:9e:55:c9:
         42:ad:d2:0e:61:da:7e:e8:28:75:00:e4:d8:2a:aa:8d:3a:75:
         04:fe:dd:44:95:f1:99:00:a9:bf:86:16:15:63:26:a4:75:d6:
         5c:66:e4:21:2d:56:bc:4d:1c:b7:05:31:a4:80:16:f9:bb:45:
         7d:92:02:78:11:e2:2a:63:da:d0:23:e1:36:3f:0e:24:93:2b:
         4a:48:58:3c:78:5b:33:36:07:12:a5:90:42:70:89:e5:8b:47:
         d0:40:96:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 20 13:11:10 2025 by rpki-client