Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d170fca2-5f74-4408-8dc9-597ba031cfe2/f55c43bd-0625-3da5-9763-c49f70e415ea.roa
File:                     f55c43bd-0625-3da5-9763-c49f70e415ea.roa (raw, json)
Hash identifier:          N7gLwGjjrsUJ1XsMhoqI02v396gW6yua34ozfAfi3pY=
Subject key identifier:   09:94:F5:5D:F7:C2:0C:3A:7B:F8:F8:5C:D0:BC:B6:DC:5F:B7:3E:6F
Certificate issuer:       /CN=d170fca2-5f74-4408-8dc9-597ba031cfe2
Certificate serial:       010D0C9F4328584B2496D7D25A32EFE50BDC5A80
Authority key identifier: FF:28:BA:9B:42:6B:7A:24:D9:A4:AB:B7:91:4D:BD:B3:6F:3F:62:9E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d170fca2-5f74-4408-8dc9-597ba031cfe2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d170fca2-5f74-4408-8dc9-597ba031cfe2/f55c43bd-0625-3da5-9763-c49f70e415ea.roa
Signing time:             Wed 10 Sep 2025 01:00:33 +0000
ROA not before:           Wed 10 Sep 2025 01:00:33 +0000
ROA not after:            Tue 09 Dec 2025 02:00:33 +0000
asID:                     198949
IP address blocks:        66.178.159.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d170fca2-5f74-4408-8dc9-597ba031cfe2/d170fca2-5f74-4408-8dc9-597ba031cfe2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d170fca2-5f74-4408-8dc9-597ba031cfe2/d170fca2-5f74-4408-8dc9-597ba031cfe2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d170fca2-5f74-4408-8dc9-597ba031cfe2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 19 Sep 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:24:96:d7:d2:5a:32:ef:e5:0b:dc:5a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d170fca2-5f74-4408-8dc9-597ba031cfe2
        Validity
            Not Before: Sep 10 01:00:33 2025 GMT
            Not After : Dec  9 02:00:33 2025 GMT
        Subject: CN=fdbf58e2-a9bf-471d-8b89-c82d19debfbb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:84:be:6a:b9:2c:f0:af:8b:10:38:9a:06:e5:
                    f9:06:1e:89:cb:6c:32:f8:a1:91:7b:1c:aa:99:01:
                    08:23:1f:ed:ae:d3:d2:58:cb:4f:59:43:c6:79:74:
                    61:b0:e4:f9:63:ca:80:8f:40:15:3d:26:6d:33:e8:
                    7b:8f:3a:a7:93:d2:69:dc:93:27:90:84:1b:21:3a:
                    6e:df:6f:11:2f:42:a8:21:82:7f:f6:dc:1c:a2:d2:
                    03:1b:bb:61:f8:f7:66:b1:61:60:4c:4c:1f:36:53:
                    92:7e:c7:24:df:68:50:72:45:b7:20:94:39:b6:ad:
                    79:92:7c:65:3a:57:43:3c:07:26:28:45:3c:29:e2:
                    28:cb:e1:53:cd:09:c4:e3:1f:20:af:63:24:33:9c:
                    06:b1:b1:d4:2c:ec:b5:cc:b2:b2:6a:de:8b:23:35:
                    ff:d4:db:ca:aa:9c:82:f0:34:56:77:50:17:c2:67:
                    aa:31:cc:12:77:c7:92:19:bd:81:b8:d6:83:8c:aa:
                    dd:c4:a3:f3:e3:be:7c:64:73:f8:51:e7:81:a6:af:
                    2b:e6:f0:98:ba:86:c8:e2:47:f3:6c:0b:09:cd:03:
                    51:17:03:e4:60:23:3c:32:0c:d9:6d:fb:c5:63:c3:
                    22:28:d9:b9:8b:fc:b7:9d:29:f3:38:9e:39:50:1a:
                    ea:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:94:F5:5D:F7:C2:0C:3A:7B:F8:F8:5C:D0:BC:B6:DC:5F:B7:3E:6F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d170fca2-5f74-4408-8dc9-597ba031cfe2/f55c43bd-0625-3da5-9763-c49f70e415ea.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d170fca2-5f74-4408-8dc9-597ba031cfe2/d170fca2-5f74-4408-8dc9-597ba031cfe2.crl

            X509v3 Authority Key Identifier:
                keyid:FF:28:BA:9B:42:6B:7A:24:D9:A4:AB:B7:91:4D:BD:B3:6F:3F:62:9E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d170fca2-5f74-4408-8dc9-597ba031cfe2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.178.159.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         26:9e:25:24:7b:e2:f2:5c:bc:fb:bc:eb:d7:91:79:89:84:23:
         a6:c3:88:c5:7d:6a:8b:f0:12:15:31:45:c9:ec:1b:d3:f1:88:
         f3:a6:74:e2:c5:dd:e0:a7:98:7c:d0:65:fe:67:f7:80:f1:6c:
         9d:35:11:54:64:62:e4:32:f4:c4:41:26:d2:aa:20:8c:7c:ec:
         06:57:f8:b6:8a:94:df:48:77:27:87:80:0a:1c:1a:d5:4e:32:
         fa:67:96:35:11:34:39:6d:a0:99:6c:f7:09:66:7f:4e:92:44:
         a7:9c:be:0c:73:9d:fb:28:39:de:3a:9c:a8:ec:c8:cc:a0:49:
         44:7f:39:fa:f6:16:1b:ef:53:ff:e9:38:29:8d:b9:4c:92:6f:
         ab:a0:e5:c8:17:5e:97:83:7e:e2:fa:59:29:2a:8e:d4:d3:07:
         ac:72:f8:a7:fd:a3:f0:72:94:5a:3c:43:e2:2a:fb:07:2b:92:
         a8:37:06:7c:9b:53:71:fe:0e:1c:c6:55:35:73:b2:f6:d1:37:
         95:3d:19:20:b3:ad:66:56:df:ad:62:fd:ea:3c:c7:47:8f:32:
         38:e8:43:23:72:76:d2:a2:af:e2:ea:ea:bf:d5:53:17:6f:61:
         44:40:a9:f4:2c:2d:31:f1:7e:d9:d5:96:5f:69:96:ae:a1:d7:
         ee:d9:9a:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 18 06:26:13 2025 by rpki-client