Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/da1a8d71-5b6f-39ee-849a-a51b742599ad.roa
File:                     da1a8d71-5b6f-39ee-849a-a51b742599ad.roa (raw, json)
Hash identifier:          vXJKqQjddr4HgpMJZPePsEapuHHlSlLWRp0o7GhIrsE=
Subject key identifier:   8D:32:4D:21:34:9B:F4:A3:47:5C:21:B5:62:39:11:6E:B6:55:FF:AB
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F4328584B9496162314E8681A5DCD9180
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/da1a8d71-5b6f-39ee-849a-a51b742599ad.roa
Signing time:             Mon 20 Oct 2025 03:49:44 +0000
ROA not before:           Mon 20 Oct 2025 03:49:44 +0000
ROA not after:            Sun 18 Jan 2026 04:49:44 +0000
asID:                     401152
IP address blocks:        166.1.91.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 04 Nov 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:94:96:16:23:14:e8:68:1a:5d:cd:91:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Oct 20 03:49:44 2025 GMT
            Not After : Jan 18 04:49:44 2026 GMT
        Subject: CN=135f535a-aeab-4a75-a9a4-2f753eb3e141
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:7b:b5:d3:4c:a2:3f:43:2a:62:0e:86:9d:0a:
                    36:8b:86:69:46:ac:a3:48:3a:fb:71:de:d5:af:b6:
                    0c:5a:47:9a:df:0d:8c:01:cc:25:8a:62:64:40:b4:
                    da:35:78:61:af:7e:62:48:46:65:31:2c:65:5c:ba:
                    1d:ac:35:57:42:9e:67:13:e7:c3:fe:c3:fa:bc:3a:
                    47:81:ac:c3:8c:6e:c3:33:c3:fb:43:b3:42:1e:cd:
                    9b:ec:11:fd:81:6c:13:84:85:91:98:fa:8f:dc:97:
                    ad:81:d2:c0:26:46:fa:cf:28:ec:c7:95:2f:9d:a6:
                    39:d1:05:3e:0e:1e:6e:f3:94:61:f9:8c:1f:08:8a:
                    ba:b1:7c:83:87:58:89:fd:78:34:97:02:06:33:d7:
                    48:c3:f5:42:9a:74:e6:cf:01:52:61:f3:23:4e:71:
                    78:63:e4:82:df:64:a1:8a:43:ff:13:5c:4f:db:72:
                    5e:15:93:75:47:91:6e:79:b3:68:a4:c8:ae:80:b9:
                    d3:df:dc:3b:bb:a6:31:d5:0b:27:7a:a5:08:1a:9a:
                    92:36:46:e4:47:60:a1:ce:5c:29:60:2b:66:f7:c7:
                    5c:e5:e6:c5:06:8e:1f:4d:b9:2b:da:10:23:95:85:
                    b5:25:fe:e6:c1:a2:1c:48:f5:c8:11:09:dd:1b:1f:
                    35:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:32:4D:21:34:9B:F4:A3:47:5C:21:B5:62:39:11:6E:B6:55:FF:AB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/da1a8d71-5b6f-39ee-849a-a51b742599ad.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.1.91.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         52:79:31:41:94:59:bb:6d:80:d2:69:9c:7f:09:0a:a7:18:31:
         65:96:99:8c:05:fe:86:2e:5f:09:76:22:b1:55:56:45:d1:0a:
         45:f5:e5:9c:26:98:d0:1e:51:70:c6:a1:04:f5:df:50:25:9c:
         c1:80:9c:93:88:41:2d:16:a4:51:b7:23:4b:a4:da:50:09:51:
         32:20:1e:f9:84:0e:65:6d:c8:dd:99:09:ba:2a:dc:35:5a:63:
         5d:a3:f3:27:17:d8:15:96:ad:04:27:79:01:df:1a:73:25:6a:
         97:53:79:de:bd:dc:e3:6e:b8:2e:e9:15:05:13:2f:9d:a6:aa:
         eb:43:d2:c6:60:d7:a7:9e:ab:6d:bf:39:ca:d9:bd:81:f7:c4:
         d3:dd:52:f5:37:ab:df:75:c4:32:67:69:98:3e:87:0b:c9:21:
         14:d8:f4:e6:3e:e9:ab:8d:f2:92:c7:b6:55:0c:96:2d:26:7d:
         04:19:69:36:d3:6e:30:31:05:b4:8d:16:21:d2:7d:d9:d3:73:
         71:57:52:a1:86:f9:ef:49:ca:89:af:61:c6:e6:01:3c:7f:9c:
         ec:61:a5:dc:1a:87:47:df:80:70:f8:ab:dd:01:2e:58:56:04:
         f9:7c:18:6b:1d:ff:ac:ca:eb:b9:60:1f:94:ac:1b:47:4a:ed:
         5c:2a:60:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 2 16:45:33 2025 by rpki-client