Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/0aac2c1f-adbe-392b-9555-25a8c2beb596.roa
File:                     0aac2c1f-adbe-392b-9555-25a8c2beb596.roa (raw, json)
Hash identifier:          qxhGSEvPqeG8lPZZ305fK5aunvZvC8E8frg8YWKyFn0=
Subject key identifier:   D7:8E:24:EE:F1:9C:E7:77:73:D2:39:C4:A6:DB:FA:5F:5E:6C:68:03
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F4328584ADD669A541129D95E192F4CC0
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/0aac2c1f-adbe-392b-9555-25a8c2beb596.roa
Signing time:             Fri 15 Aug 2025 13:00:41 +0000
ROA not before:           Fri 15 Aug 2025 13:00:41 +0000
ROA not after:            Thu 13 Nov 2025 14:00:41 +0000
asID:                     7979
IP address blocks:        166.0.68.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:dd:66:9a:54:11:29:d9:5e:19:2f:4c:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Aug 15 13:00:41 2025 GMT
            Not After : Nov 13 14:00:41 2025 GMT
        Subject: CN=606dc40e-f140-4bf5-9382-1b4af8b70583
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:55:bb:a4:08:fb:05:40:c5:3b:1e:a4:d2:e0:
                    c1:4e:e2:9a:4a:30:7a:e1:7f:65:5b:f2:54:88:ed:
                    2f:e4:7a:b0:1a:c0:4a:6e:6c:4e:0a:34:d3:e3:d8:
                    56:2f:82:28:bd:0e:d3:b4:af:2d:f0:0b:e8:64:c3:
                    74:f0:7d:75:4d:bc:39:3a:08:dd:ba:0d:4e:0e:d2:
                    3d:d7:b1:c9:14:d4:08:c9:3d:66:6f:9e:78:48:ac:
                    58:1e:5e:ed:62:9f:ed:a7:69:aa:c5:89:6b:4f:e4:
                    45:19:a3:32:bd:d5:0b:0f:86:b9:3a:cb:0f:1d:1e:
                    58:c7:9e:9b:72:b4:85:0a:a2:12:79:ff:6c:34:d0:
                    7f:18:9b:0e:8f:f3:b6:89:59:74:02:55:31:d3:26:
                    fb:49:8e:24:9e:12:f9:8c:b7:8f:f5:44:10:23:ce:
                    10:c2:32:f8:7b:a7:84:76:ac:ab:c4:9b:a5:14:22:
                    77:9e:75:1e:f8:08:d2:b8:6a:4a:52:0e:ef:52:71:
                    31:a8:5e:ff:ee:80:bd:2d:55:c2:13:4f:b5:16:51:
                    09:a7:7e:1c:d8:3a:0c:e3:0b:9e:e2:1f:7e:a4:0b:
                    be:94:41:ae:42:dd:32:06:5b:51:18:29:b5:79:a3:
                    81:3a:70:2c:c0:4a:aa:3b:73:06:9d:91:ad:02:f1:
                    0f:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:8E:24:EE:F1:9C:E7:77:73:D2:39:C4:A6:DB:FA:5F:5E:6C:68:03
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/0aac2c1f-adbe-392b-9555-25a8c2beb596.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.0.68.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         78:e1:31:ae:8f:0d:d8:e9:a3:df:90:af:87:9d:8b:14:4b:55:
         2f:da:b2:95:cc:33:64:8e:16:40:f1:bc:7c:82:93:11:2c:d4:
         f8:d4:24:02:ad:84:f2:0d:4c:2f:9f:18:ee:13:fa:cd:e0:ae:
         d2:23:44:ae:12:01:d2:9f:a5:98:92:b1:b7:70:09:de:17:ce:
         c3:9c:ea:78:e3:ec:a1:6b:8a:16:ee:07:a7:bb:0b:f1:35:40:
         a0:8b:8b:ee:d4:d9:6c:35:86:f5:ca:f1:63:16:b0:66:65:57:
         a4:42:f5:96:92:95:ac:76:47:56:60:5b:24:ce:5f:3d:8e:dd:
         8d:c6:d3:78:13:ef:e0:9e:ae:8e:42:16:57:a3:5e:df:3d:16:
         17:07:92:d7:68:98:8d:8f:42:28:0a:ba:18:fe:b3:f7:ce:78:
         71:27:02:7e:61:d7:54:de:7b:19:89:44:aa:71:66:e1:3a:71:
         52:02:2c:f1:f3:b4:5b:8f:28:9b:62:d6:c6:e1:db:3f:41:6a:
         5b:dd:65:8e:69:29:1d:36:c3:93:cb:b3:d3:b7:41:a9:81:92:
         a5:78:f0:b3:c4:d8:ff:bc:cc:4f:a0:9c:5f:25:3d:c5:1f:f4:
         57:ad:ab:a4:0d:ee:4f:5c:8e:d7:76:84:fe:d2:5b:8d:48:a1:
         51:09:8c:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:23:49 2025 by rpki-client