Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/c489cc90-83fa-3721-b652-91e4ea704d82.roa
File:                     c489cc90-83fa-3721-b652-91e4ea704d82.roa (raw, json)
Hash identifier:          YU6naSojzjT2J0stgTQMIWif+jWUh5ffGhp7c24UrTo=
Subject key identifier:   D6:D0:F6:81:1A:68:D4:AF:DB:53:9F:D7:9A:FB:24:0E:B6:F2:9B:3C
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F4328584B0746D3CC5DDC83B0F1C40FC0
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/c489cc90-83fa-3721-b652-91e4ea704d82.roa
Signing time:             Sat 30 Aug 2025 13:00:42 +0000
ROA not before:           Sat 30 Aug 2025 13:00:42 +0000
ROA not after:            Fri 28 Nov 2025 14:00:42 +0000
asID:                     273232
IP address blocks:        166.1.16.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 21 Sep 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:07:46:d3:cc:5d:dc:83:b0:f1:c4:0f:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Aug 30 13:00:42 2025 GMT
            Not After : Nov 28 14:00:42 2025 GMT
        Subject: CN=41748a42-1173-44f5-b1e5-e0275805898c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:4f:dc:50:df:f1:e7:e7:26:a8:1b:53:b2:f9:
                    f9:d4:ea:f3:5e:50:90:57:cb:65:b5:8b:03:cb:c5:
                    e9:fa:d0:4b:cc:cc:c8:df:ed:d7:78:1e:4b:c6:77:
                    ad:b9:ae:15:79:49:de:22:be:09:c9:0a:d5:b0:a9:
                    b8:8a:cb:d8:9f:f6:4b:ba:83:1d:0f:e6:ee:58:9d:
                    09:d2:1c:2f:f1:6a:91:e7:26:39:09:77:0a:45:60:
                    c0:5b:7b:61:e9:0a:af:63:75:71:cc:29:f0:81:5e:
                    aa:6d:5a:39:11:43:43:8b:06:78:ff:d0:f3:22:dd:
                    ca:e3:a9:de:a7:35:59:46:dd:69:6d:7c:ec:3e:da:
                    04:57:de:6b:f1:d1:d4:03:12:04:78:b8:fd:87:cf:
                    f5:2f:e6:76:ce:44:d3:8f:f0:0c:ab:e6:98:d0:92:
                    71:62:fd:9d:71:96:97:13:4d:e4:ae:70:4c:b3:75:
                    71:0a:b4:34:9e:a0:d1:2f:4e:27:06:8b:d8:1e:0e:
                    4b:93:ea:b3:18:61:38:41:9e:95:39:50:ad:c7:e4:
                    ed:a2:52:7e:24:ec:65:d1:a1:66:81:62:b1:1c:cb:
                    d1:d8:61:47:36:a6:fc:3c:02:2a:84:21:44:dd:79:
                    9d:b3:fe:ff:28:b4:bf:c0:2d:57:06:f7:f2:86:ee:
                    ab:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:D0:F6:81:1A:68:D4:AF:DB:53:9F:D7:9A:FB:24:0E:B6:F2:9B:3C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/c489cc90-83fa-3721-b652-91e4ea704d82.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.1.16.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5f:99:57:f4:a8:50:0c:62:0d:74:46:5b:ac:6a:1a:4e:a6:6d:
         64:6a:67:8f:99:51:cc:cf:af:18:ba:08:94:42:2a:fc:75:24:
         4a:dc:0e:34:a8:f9:4b:15:f0:3f:31:b3:9c:75:ce:32:5b:fa:
         16:08:13:ba:7e:0f:09:ae:23:86:6f:4a:be:47:5c:61:46:8f:
         f5:0e:c8:f6:68:66:52:95:2e:b4:ed:d8:c4:59:20:c9:ea:ca:
         84:9f:be:4b:cf:04:fd:3c:51:1e:0d:c1:4c:f9:09:9c:73:83:
         fc:ae:03:26:18:23:47:9d:b6:19:89:8b:dd:a4:56:18:c1:f7:
         84:fa:6a:7b:4b:93:77:56:ab:d5:65:4c:8d:e3:b4:01:65:7a:
         3e:25:d5:83:b5:6c:7e:fc:5a:86:4c:c8:df:41:af:72:39:15:
         2f:8f:3a:97:c7:32:ab:65:6b:cc:a7:f0:ec:43:75:9e:dc:9a:
         bc:03:31:cf:ef:48:1d:77:ae:c0:6f:d6:fc:82:bd:fb:ca:38:
         f1:2a:50:fe:42:d6:6c:5a:ef:8c:bd:32:f0:12:f1:36:fa:8f:
         77:8d:df:08:3b:a3:c0:14:53:92:9d:42:9b:97:98:ea:0c:be:
         38:62:f7:9e:cb:12:98:c1:5a:59:c9:42:37:25:f0:21:93:38:
         a3:d0:d4:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 19 13:05:00 2025 by rpki-client