Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/ea7a7edd-d32e-330e-bee3-1de363f22187.roa
File:                     ea7a7edd-d32e-330e-bee3-1de363f22187.roa (raw, json)
Hash identifier:          XUJ9CRtgTQPzM9gYjJyNgyWEP3s7Y8MYPYNar8ob6oc=
Subject key identifier:   41:F6:B4:43:EE:13:85:2E:D0:E5:9B:D5:4E:1F:CF:44:AD:A8:AB:EE
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F4328584B95AA30D3E16C8BD879E3DAFC
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/ea7a7edd-d32e-330e-bee3-1de363f22187.roa
Signing time:             Mon 20 Oct 2025 13:00:38 +0000
ROA not before:           Mon 20 Oct 2025 13:00:38 +0000
ROA not after:            Sun 18 Jan 2026 14:00:38 +0000
asID:                     212384
IP address blocks:        166.0.134.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 04 Nov 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:95:aa:30:d3:e1:6c:8b:d8:79:e3:da:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Oct 20 13:00:38 2025 GMT
            Not After : Jan 18 14:00:38 2026 GMT
        Subject: CN=c60e62ec-099a-478e-894e-8abc7513a281
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:b0:b3:4d:a6:6c:4d:e1:54:10:75:9e:6d:8f:
                    09:7d:fb:37:1c:e7:df:ad:f2:45:54:26:b0:ec:81:
                    ea:16:2b:0d:19:0f:05:24:28:1c:26:ce:89:ab:02:
                    93:5f:2e:8a:cb:2c:f4:5d:d8:77:63:36:c3:1a:c7:
                    13:72:04:a5:e2:09:8a:3f:44:ce:b8:34:66:af:5f:
                    80:1f:3b:55:df:bc:67:79:f4:e6:03:be:a5:30:e7:
                    0b:8f:d6:b1:bb:1d:c4:62:38:e5:5c:5f:b7:22:32:
                    3b:b4:e9:1f:e7:61:7a:54:29:48:4b:56:c0:20:ae:
                    96:1e:bb:d1:cf:7c:73:75:ed:76:83:94:ef:1e:f4:
                    e5:2e:c7:b6:ee:49:32:8a:9a:74:ed:79:a3:69:27:
                    63:68:09:2b:11:e6:c8:f8:e5:73:24:60:db:0d:b3:
                    60:08:5f:c0:53:6d:0b:45:bf:c5:27:ef:e0:03:c9:
                    3d:f2:13:7e:4b:cb:99:a8:cf:f3:be:93:d0:f8:0c:
                    78:a3:f6:c3:cd:1a:3e:06:21:c5:6b:77:23:1b:f2:
                    ac:52:cc:93:cf:32:90:95:fa:c6:3b:75:e0:3e:d6:
                    f9:23:d2:9f:c0:a3:1c:c3:48:fc:d0:f1:c5:ec:60:
                    bf:15:a2:96:bd:d4:48:a8:e1:93:ae:ca:c2:2d:ea:
                    eb:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:F6:B4:43:EE:13:85:2E:D0:E5:9B:D5:4E:1F:CF:44:AD:A8:AB:EE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/ea7a7edd-d32e-330e-bee3-1de363f22187.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.0.134.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         38:bf:70:71:2c:68:fa:a9:c4:83:5d:5c:f5:ab:f4:35:79:56:
         34:be:14:a3:cd:78:2f:9a:23:84:0f:08:38:94:ed:65:45:14:
         8e:50:30:27:ec:0f:c6:9f:85:76:57:85:c6:45:5c:57:f6:94:
         09:d6:0b:1a:e2:9d:42:bf:5f:e3:ba:61:0f:37:89:b6:7a:de:
         ef:0d:db:a9:cd:18:70:ad:fd:01:e3:51:65:ba:01:f5:57:ab:
         1a:2d:7e:f4:d0:40:46:c3:fd:a5:ec:86:aa:39:84:f1:01:b2:
         26:d3:63:53:ae:f5:a0:23:ca:b1:6a:e1:34:bf:b9:9b:b2:16:
         1d:02:8c:d1:a8:5f:da:f5:ec:f1:6f:b1:3d:29:b2:c9:e9:1a:
         b4:90:62:f9:d5:1a:ef:d2:e9:c4:aa:84:37:e8:26:0d:eb:a9:
         bc:13:35:fc:a0:7a:4b:ef:9e:ce:04:77:83:38:f1:78:48:b9:
         39:6b:ce:19:f8:2d:98:2a:ba:bf:5b:b0:9a:54:b3:ae:5c:ba:
         0b:c6:d2:4a:0d:d3:ed:50:eb:fb:10:78:53:82:5e:ec:ce:c9:
         28:53:56:d6:db:50:e4:8c:36:3f:b0:08:2d:c1:fb:0a:99:d0:
         c4:58:71:7b:d0:9b:c5:35:4c:b6:86:4a:dd:88:41:59:2f:57:
         c7:09:76:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 2 16:49:19 2025 by rpki-client