Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/b7c2d025-bc3f-3aca-80ed-60498eacc684.roa
File:                     b7c2d025-bc3f-3aca-80ed-60498eacc684.roa (raw, json)
Hash identifier:          Mk794hfk72m2GTVDxuUNuwm+rzjqOhKq/vqNrf7nufg=
Subject key identifier:   C7:0A:9D:12:BE:30:EB:6A:B1:CA:AE:2D:72:B0:CD:D3:02:FD:CF:68
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F4328584AC8767D3C5370335286070B80
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/b7c2d025-bc3f-3aca-80ed-60498eacc684.roa
Signing time:             Fri 08 Aug 2025 01:00:33 +0000
ROA not before:           Fri 08 Aug 2025 01:00:33 +0000
ROA not after:            Thu 06 Nov 2025 02:00:33 +0000
asID:                     401152
IP address blocks:        166.0.137.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 22 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:c8:76:7d:3c:53:70:33:52:86:07:0b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Aug  8 01:00:33 2025 GMT
            Not After : Nov  6 02:00:33 2025 GMT
        Subject: CN=b8e63146-9c93-426d-b197-767165ec50a3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:d3:bf:ec:41:b4:0d:e8:01:b5:14:eb:4f:5f:
                    f4:68:7b:59:7c:5b:e2:42:aa:4b:c7:a6:fc:6e:ec:
                    a1:48:d2:0c:94:10:de:f3:2f:f2:ea:da:a3:46:df:
                    ac:7d:5f:28:48:5f:4f:2a:26:f4:62:2d:b5:01:52:
                    8f:7d:06:88:7f:90:7f:fc:5e:dc:12:f8:8a:2b:3a:
                    5b:4f:18:4d:1c:bb:51:5c:d0:b6:3f:bd:d8:3c:bc:
                    51:f7:ff:6d:e6:cb:24:8b:0d:05:92:6e:c6:57:0b:
                    92:5d:53:f8:0c:16:ae:1b:68:1a:57:b4:00:7e:28:
                    3e:36:fd:54:ce:3a:f1:e5:c7:32:c7:a0:7b:34:c3:
                    9b:cc:a6:c1:d2:b3:62:03:db:e3:3d:47:c8:c8:70:
                    1d:e1:08:07:a4:9c:3a:aa:f2:21:86:a4:30:77:70:
                    e4:a3:02:65:63:3c:65:56:5a:ac:4f:94:4f:1f:90:
                    0d:4d:b8:12:15:7c:4f:8e:fb:f4:c7:ce:d7:7b:1b:
                    b9:49:13:c4:19:05:c3:28:5a:57:98:74:1a:8b:b3:
                    b8:68:63:23:e2:28:73:16:b0:6d:5a:92:63:42:d2:
                    bc:e3:bb:73:8c:70:9b:03:ee:8f:22:ee:7b:90:fb:
                    d0:5a:bd:d5:e6:e5:f4:da:37:eb:b7:b5:33:62:16:
                    be:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:0A:9D:12:BE:30:EB:6A:B1:CA:AE:2D:72:B0:CD:D3:02:FD:CF:68
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/b7c2d025-bc3f-3aca-80ed-60498eacc684.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.0.137.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         54:f6:7a:e7:47:0b:e6:8a:e9:54:71:69:43:58:8f:43:37:08:
         05:34:02:1c:72:05:83:d6:ac:49:c3:ac:3d:e0:1d:53:b8:df:
         f5:b0:5e:7b:c1:6e:f5:2e:36:02:7b:90:eb:d2:f1:78:ba:1e:
         5e:eb:f8:f3:57:d8:94:b8:95:44:98:ea:30:ed:09:51:61:0c:
         a7:46:73:10:89:46:12:a6:14:8f:bc:2e:24:35:10:ad:ca:08:
         7a:fc:5c:4a:a0:7d:6c:35:9b:43:62:07:5e:c8:d7:cc:b2:65:
         e2:91:ae:5a:cc:36:6e:fa:ea:db:03:2c:1a:e0:97:ff:74:d8:
         f5:d9:ed:ac:de:6b:a6:e3:79:a9:af:28:8b:e5:a5:77:a2:64:
         af:b7:45:1b:0d:c9:88:f2:bb:84:6a:13:e7:46:3b:41:d1:3b:
         af:92:fd:5c:2d:af:e5:00:ce:60:fc:0b:b0:95:4d:58:2f:b0:
         6e:75:c7:8f:59:04:12:d2:bf:ec:1a:6a:85:ae:a5:e0:5b:29:
         06:2f:00:75:c4:68:ba:56:17:4f:bf:de:a8:43:8c:e1:6c:60:
         47:a8:14:d6:85:3c:8e:0a:3a:de:da:ca:d2:dd:b6:e9:76:90:
         8b:b7:ef:76:e3:72:2e:0b:29:1a:ee:a5:14:0e:ae:b0:8d:e0:
         d1:49:dd:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 20 13:19:35 2025 by rpki-client