Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/0d23a162-0447-3d5f-b951-13ee30590792.roa
File:                     0d23a162-0447-3d5f-b951-13ee30590792.roa (raw, json)
Hash identifier:          D2LrQUHlyDaVP5QTJd8lDMqquaebtah09a1wWSM+6Ac=
Subject key identifier:   F3:FF:E4:DD:92:DB:AB:E8:88:C7:54:36:9E:1D:4D:7A:D9:F2:D9:BF
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F4328584B679804607EF6E1FE44CB3500
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/0d23a162-0447-3d5f-b951-13ee30590792.roa
Signing time:             Sat 04 Oct 2025 01:00:33 +0000
ROA not before:           Sat 04 Oct 2025 01:00:33 +0000
ROA not after:            Fri 02 Jan 2026 02:00:33 +0000
asID:                     44559
IP address blocks:        166.1.170.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:67:98:04:60:7e:f6:e1:fe:44:cb:35:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Oct  4 01:00:33 2025 GMT
            Not After : Jan  2 02:00:33 2026 GMT
        Subject: CN=2bc9ce68-2ebc-45f1-9885-9593666557c0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:31:03:d0:8a:c0:98:5e:82:f6:05:f9:48:9f:
                    37:3c:8d:82:4c:22:24:e0:27:ce:18:f3:f2:80:77:
                    d7:2c:87:e0:cf:67:ed:c3:a3:b0:ae:ad:88:40:ab:
                    1f:fb:c4:75:05:89:2e:9a:67:e5:2e:6c:b8:b3:70:
                    2b:22:9c:0c:9b:b0:65:4f:3a:a7:ae:b7:b0:4e:5a:
                    4d:09:47:81:2c:ce:f5:42:24:62:69:66:3b:71:4d:
                    15:65:e9:34:2b:4d:4b:3d:32:a9:47:0b:87:00:a7:
                    37:99:e5:ed:b4:00:60:5a:02:8f:01:1e:58:6a:df:
                    28:68:3c:c1:a9:03:c6:bc:91:12:f6:c8:75:16:f7:
                    05:9d:db:cd:a2:21:c8:e7:73:c3:73:d8:6c:3f:83:
                    0f:4e:c2:4b:28:fb:93:c0:97:11:8b:fc:9a:f7:42:
                    cd:55:94:70:d2:a5:7a:2f:6c:3f:61:73:c1:28:c9:
                    c2:46:4c:c2:60:37:2b:97:98:fc:87:39:0a:43:c0:
                    eb:23:b4:f6:08:5e:1f:da:eb:d5:38:52:67:62:0e:
                    2b:75:5b:7c:df:6a:01:b9:82:d7:fe:cb:59:49:22:
                    31:c9:e2:c1:2d:24:6e:6b:d2:0d:41:09:c7:76:42:
                    d2:88:a3:f9:c8:2f:f0:22:f7:3e:33:00:b7:5a:92:
                    cf:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:FF:E4:DD:92:DB:AB:E8:88:C7:54:36:9E:1D:4D:7A:D9:F2:D9:BF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/0d23a162-0447-3d5f-b951-13ee30590792.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.1.170.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         58:da:a1:61:6b:3e:11:cf:26:f3:83:20:23:8d:24:42:7f:e0:
         47:cb:76:a8:f1:e7:38:bb:a9:0e:01:94:53:e3:20:70:5a:b7:
         3e:2f:af:ce:1f:ba:30:e1:b6:a2:74:3f:61:fc:b1:53:f6:33:
         9f:4a:75:4e:e1:f8:89:d8:57:52:38:77:dd:89:b0:c7:3f:c4:
         59:a0:84:7c:28:f3:78:2d:0e:18:f4:c8:73:87:94:17:50:99:
         bb:15:26:77:da:fc:e8:79:89:60:35:d6:2d:a6:d2:e5:11:3e:
         55:c3:5c:27:c8:ab:ed:9a:fe:44:74:a4:14:5e:21:6d:aa:cb:
         ea:1f:c5:31:9a:e8:6c:6f:d4:c6:01:e5:79:6b:9f:08:80:d5:
         2c:9f:88:29:da:1c:5e:24:b8:ca:6e:a7:84:37:a5:43:a2:5f:
         28:9f:50:b8:a8:14:69:04:a5:00:c6:fe:58:05:36:2c:1a:ab:
         a0:e5:e7:57:9e:1c:1b:c8:3c:8b:cd:a2:26:c9:7e:4d:8d:65:
         a2:3b:89:cd:bb:75:88:1a:0e:49:64:7e:8c:99:04:ef:26:c4:
         c7:ee:4b:9e:24:bd:da:0a:7c:1c:68:04:32:bf:9f:e9:43:c7:
         31:04:7a:c3:68:74:cd:77:d2:a3:6d:41:a3:47:d8:19:2b:43:
         0b:ca:09:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:16:05 2025 by rpki-client