Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/fdee93c2-5f4d-39d3-8cad-6a71bb0a4516.roa
File:                     fdee93c2-5f4d-39d3-8cad-6a71bb0a4516.roa (raw, json)
Hash identifier:          Er7WF0ofHKt3NCBlg52iOcC8qsTQ1QFLOJ/nPQVrkwk=
Subject key identifier:   87:F9:55:B5:06:CB:1A:8C:53:0B:F2:84:25:B6:8D:26:BA:88:9E:03
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F4328584B13D6D675705D8D4653469D64
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/fdee93c2-5f4d-39d3-8cad-6a71bb0a4516.roa
Signing time:             Thu 04 Sep 2025 01:00:33 +0000
ROA not before:           Thu 04 Sep 2025 01:00:33 +0000
ROA not after:            Wed 03 Dec 2025 02:00:33 +0000
asID:                     9009
IP address blocks:        166.0.55.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 07 Sep 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:13:d6:d6:75:70:5d:8d:46:53:46:9d:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Sep  4 01:00:33 2025 GMT
            Not After : Dec  3 02:00:33 2025 GMT
        Subject: CN=ca13375f-deed-4fd4-ad10-abf030dbd141
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:bf:66:61:5a:60:0e:23:90:39:c4:57:df:05:
                    50:b5:23:de:01:55:f0:fc:bb:cd:85:23:15:26:1a:
                    d8:d8:df:34:37:02:91:3e:df:0d:8b:ed:85:8a:60:
                    49:a6:ce:e4:dd:84:21:cc:1d:0c:e1:a7:8e:f5:6f:
                    a3:05:14:7e:ba:62:d8:24:57:4f:d8:4b:8a:cd:3b:
                    1d:5b:67:18:b9:bd:ad:87:2c:b8:d9:d4:75:8e:0a:
                    6b:c9:19:69:70:8e:cb:6c:23:55:d8:e7:ed:b3:93:
                    7f:ca:2a:20:93:c4:45:67:d3:78:3a:7c:0e:6b:66:
                    e7:1c:d6:d0:24:21:3c:5c:d5:35:0a:1a:b1:f2:e1:
                    00:b6:03:e5:09:18:88:19:16:6c:28:99:c3:73:67:
                    cb:8c:1f:78:41:1a:2c:84:2f:dd:3a:06:f6:ce:11:
                    f5:0d:46:bf:f1:8d:0b:e1:52:68:d4:3d:cf:da:82:
                    82:79:2d:fc:69:d8:19:d0:d5:ae:b0:69:66:9a:ef:
                    af:93:72:fa:04:a2:55:01:1d:3b:75:2d:b2:6a:d3:
                    72:52:a0:e7:42:69:ee:6e:a9:67:8c:ea:f4:e3:b2:
                    53:4e:02:15:2b:d6:a9:1c:19:ee:2e:b0:bc:59:03:
                    37:91:fc:7d:6a:f9:a4:da:f8:77:7e:45:29:d8:e9:
                    a2:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:F9:55:B5:06:CB:1A:8C:53:0B:F2:84:25:B6:8D:26:BA:88:9E:03
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/fdee93c2-5f4d-39d3-8cad-6a71bb0a4516.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.0.55.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         34:b1:3c:c1:d0:fc:7c:18:33:0f:df:58:2c:7b:ba:e5:77:cb:
         5a:92:3d:d4:99:97:0d:d1:a5:d0:12:ce:5f:1e:1c:a3:4a:39:
         41:ce:8c:1e:aa:91:c2:df:f5:9c:3c:5d:18:68:36:8f:d1:c9:
         6e:4c:01:ed:c4:a0:3f:27:92:03:14:fd:f8:8b:ea:12:96:fb:
         a2:99:df:80:18:9f:eb:43:d8:bd:bc:2a:d9:e5:a2:47:9c:2a:
         f5:8d:c0:29:ce:45:c4:96:a4:a1:9a:ae:6e:c4:29:aa:00:d7:
         82:66:ba:f6:ea:7a:a9:3e:f5:d8:f8:b1:d5:95:10:a9:b8:c0:
         cd:7e:c3:cb:35:58:50:cc:13:4b:37:5e:b4:e0:00:1c:34:16:
         2c:69:e0:a6:23:57:e1:a7:d8:88:58:ed:2c:d6:84:59:ce:60:
         ea:0b:6e:97:22:45:87:60:74:19:53:8a:08:ea:87:d4:b7:f8:
         2f:ce:01:09:81:5f:66:2a:a2:8b:32:12:05:31:62:20:ac:f5:
         97:e0:8c:a5:54:4b:14:af:2c:b2:5f:a9:a8:80:5e:57:f8:07:
         f0:75:c1:37:63:b5:6d:7b:8a:67:55:e2:f6:06:e3:7a:14:1a:
         ad:fd:74:05:4e:31:0c:6a:a9:3e:64:20:81:da:ab:31:a5:0c:
         99:35:bd:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 5 04:25:40 2025 by rpki-client