Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/b4fa7e98-9955-34c8-bb12-1922134062f8.roa
File:                     b4fa7e98-9955-34c8-bb12-1922134062f8.roa (raw, json)
Hash identifier:          KGUms8ozwaduuJtPpV3COpZWA9Uyh8qGUIDgNllh2I4=
Subject key identifier:   22:95:FE:AB:B7:50:2B:4D:1C:2D:7E:43:0F:99:A1:08:2E:A6:22:9D
Certificate issuer:       /CN=dc455e58-6189-4f28-b803-61a965a21c65
Certificate serial:       010D0C9F4328584B8EACE2367ED2EF1660BD4E80
Authority key identifier: 66:46:BF:04:CF:10:3E:4C:AE:90:A0:E6:CD:25:36:50:B6:45:BC:3F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/b4fa7e98-9955-34c8-bb12-1922134062f8.roa
Signing time:             Sat 18 Oct 2025 01:00:30 +0000
ROA not before:           Sat 18 Oct 2025 01:00:30 +0000
ROA not after:            Fri 16 Jan 2026 02:00:30 +0000
asID:                     30103
IP address blocks:        166.108.96.0/23 maxlen: 24
                          166.108.98.0/23 maxlen: 24
                          166.108.100.0/23 maxlen: 24
                          166.108.102.0/23 maxlen: 24
                          166.108.104.0/23 maxlen: 24
                          166.108.106.0/23 maxlen: 24
                          166.108.108.0/23 maxlen: 24
                          166.108.110.0/23 maxlen: 24
                          166.108.112.0/23 maxlen: 24
                          166.108.114.0/23 maxlen: 24
                          166.108.116.0/23 maxlen: 24
                          166.108.118.0/23 maxlen: 24
                          166.108.120.0/23 maxlen: 24
                          166.108.122.0/23 maxlen: 24
                          166.108.124.0/23 maxlen: 24
                          166.108.126.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 Oct 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:8e:ac:e2:36:7e:d2:ef:16:60:bd:4e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dc455e58-6189-4f28-b803-61a965a21c65
        Validity
            Not Before: Oct 18 01:00:30 2025 GMT
            Not After : Jan 16 02:00:30 2026 GMT
        Subject: CN=072f7271-1f9c-43ea-a10f-629d63896d01
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:23:24:8d:17:13:06:b2:49:e2:d2:4e:9e:8b:
                    a7:83:d2:61:fc:96:74:66:7f:21:9d:6f:3b:b9:68:
                    fb:44:4b:2d:ed:0c:d7:e0:6b:05:c2:ef:fb:35:94:
                    a3:6e:bf:ab:55:e0:55:d3:23:9f:0f:91:0e:bf:4e:
                    78:a7:2f:62:c3:d3:b6:7d:72:cd:51:65:e4:8e:df:
                    ee:b4:42:55:cb:e9:ae:66:90:b2:c5:51:1e:6d:b6:
                    30:69:9d:e3:38:26:33:1b:3b:6a:1f:71:cb:56:90:
                    f5:18:ed:8e:66:d8:6e:57:ff:00:37:4d:6c:6b:c3:
                    45:62:b1:1c:ac:b6:90:3c:49:83:78:8d:33:69:fc:
                    68:9b:0b:34:c2:63:51:fa:32:21:cc:58:31:28:62:
                    39:ea:63:e4:8d:c9:af:69:d7:05:68:ab:f4:e3:e3:
                    d0:f6:15:f7:bc:55:d7:fd:81:f5:8d:f0:e8:d7:9f:
                    36:c4:12:0f:f7:f6:ee:05:dc:bc:4b:ad:4e:36:dd:
                    85:07:18:a0:57:85:f4:5d:b3:54:e1:04:38:a2:e2:
                    96:cb:c6:74:1f:67:52:cd:00:77:35:2c:12:d1:54:
                    ae:25:ac:c1:ed:8b:ed:d4:c8:cd:1d:a0:f7:8d:f0:
                    e6:1d:2a:ab:49:07:92:10:a3:68:f4:40:ae:29:6a:
                    fe:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:95:FE:AB:B7:50:2B:4D:1C:2D:7E:43:0F:99:A1:08:2E:A6:22:9D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/b4fa7e98-9955-34c8-bb12-1922134062f8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.crl

            X509v3 Authority Key Identifier:
                keyid:66:46:BF:04:CF:10:3E:4C:AE:90:A0:E6:CD:25:36:50:B6:45:BC:3F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.108.96.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0b:e7:2b:ef:51:f5:22:69:60:ef:75:9c:d9:12:66:bc:98:ca:
         93:cd:0f:88:e7:43:13:e3:a8:2e:a7:c8:5b:e3:bf:21:a5:f1:
         80:d3:8c:e6:29:e6:4f:1f:b1:01:e8:81:34:16:a0:40:ac:87:
         17:3d:45:93:66:b1:e1:dc:83:6e:61:07:5e:52:07:1d:7c:39:
         54:be:0f:fd:c5:51:bc:cc:79:01:f4:51:3d:ca:0d:cb:de:ca:
         82:0f:e5:3e:91:2d:d1:1a:49:a5:d0:3d:d2:16:20:cf:5e:3d:
         3b:f2:3f:0b:ef:42:ea:b4:11:1d:ec:2c:62:91:4c:db:ba:6c:
         80:7a:37:66:4b:df:3b:a7:9b:b6:56:82:c8:1f:ba:8a:4b:27:
         06:b7:ce:9b:59:56:39:13:d7:52:a7:0c:4d:26:1c:91:c4:76:
         c7:4e:2a:16:d2:dd:5a:35:47:42:26:c6:d8:c1:20:56:83:d2:
         be:3b:5b:b8:75:c4:1f:95:ff:c6:e3:8a:4f:e2:ff:fd:85:6e:
         b2:21:43:0e:1f:30:58:10:65:39:b9:b5:91:c7:e6:bb:e3:75:
         2e:66:4d:fd:9a:ec:c5:cf:3a:83:92:9f:49:93:22:07:8f:9f:
         39:e2:64:3d:22:4f:65:48:00:a8:c8:dd:d3:66:f4:7e:b3:04:
         5f:27:3c:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 16:31:27 2025 by rpki-client