Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/170a72b4-1870-363d-8776-ffe8157a5283.roa
File:                     170a72b4-1870-363d-8776-ffe8157a5283.roa (raw, json)
Hash identifier:          cmoPeoUtHmyuPiyOU5nE5zk23ezwynpkHq68z/bW1TI=
Subject key identifier:   CF:29:3C:CD:0D:E9:04:7B:6B:BB:AB:D6:02:41:C6:39:C8:96:AF:BC
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F4328584B67980038DC0F7BEF83FEF920
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/170a72b4-1870-363d-8776-ffe8157a5283.roa
Signing time:             Sat 04 Oct 2025 01:00:33 +0000
ROA not before:           Sat 04 Oct 2025 01:00:33 +0000
ROA not after:            Fri 02 Jan 2026 02:00:33 +0000
asID:                     44559
IP address blocks:        166.1.23.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:67:98:00:38:dc:0f:7b:ef:83:fe:f9:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Oct  4 01:00:33 2025 GMT
            Not After : Jan  2 02:00:33 2026 GMT
        Subject: CN=19026892-33a6-4c1e-8b80-86cc3038cdae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:a5:14:e9:73:4d:63:de:71:9d:95:97:21:a8:
                    8e:f6:4f:ed:55:d2:e1:f6:74:05:6a:d3:92:44:90:
                    53:e0:8f:e9:9f:28:1c:10:d0:90:03:69:e4:97:27:
                    6b:bb:d9:33:22:e2:f9:28:a7:92:9b:e9:93:f3:f6:
                    92:73:71:08:5f:f4:a7:85:6e:9c:60:7c:a6:03:88:
                    4b:a0:4d:d6:6c:52:63:ec:c1:04:b9:8e:76:72:69:
                    17:f0:f9:fb:63:9f:b8:17:de:51:4e:48:24:af:1b:
                    95:f7:0d:89:de:54:c6:0b:46:3f:0e:0b:54:f0:ea:
                    da:ca:eb:f9:c6:12:1f:7e:f6:e9:37:fe:da:f7:40:
                    ad:de:21:17:28:c8:df:1d:2d:da:cc:80:b8:18:bf:
                    ac:57:48:2e:54:e3:2d:9e:a9:70:d9:fa:32:63:5d:
                    f1:1d:81:8d:a9:e7:73:20:2e:d5:70:f6:db:62:b3:
                    7e:55:99:53:e4:af:37:e2:3e:79:c1:c3:51:3d:70:
                    79:38:89:16:60:71:96:29:53:3a:fb:a6:41:f1:7f:
                    35:31:74:04:14:b4:c8:27:c3:fd:d6:e0:1c:d1:c1:
                    32:71:fa:39:97:de:36:c2:66:cd:31:be:03:6e:de:
                    df:05:65:83:67:65:2d:b7:1e:ac:60:00:a8:f3:bc:
                    4a:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:29:3C:CD:0D:E9:04:7B:6B:BB:AB:D6:02:41:C6:39:C8:96:AF:BC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/170a72b4-1870-363d-8776-ffe8157a5283.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.1.23.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         35:29:be:d5:5a:1d:62:4e:4b:28:51:cc:a5:89:d5:83:0e:de:
         b1:0d:bd:17:de:c0:99:52:10:cd:fd:94:3b:ee:61:a1:2d:47:
         99:f4:1e:5b:59:4d:28:f8:16:c3:79:9b:91:65:66:c8:f9:7e:
         4f:c3:ad:97:54:51:1f:1e:af:86:a3:dc:4c:3c:88:af:73:3d:
         18:f2:79:9e:94:f0:7f:45:c1:8e:14:17:85:fd:7d:4a:a6:70:
         12:26:4c:24:93:0c:bf:43:aa:5f:b9:71:7e:d8:7f:a0:ab:a4:
         09:a9:b9:72:4c:86:8d:7f:17:2b:86:7b:fb:49:6b:af:3f:ec:
         68:cd:ce:aa:64:ab:69:a0:1f:3c:9f:36:ae:a4:67:dd:96:0b:
         fc:94:93:0e:2a:c6:31:8e:8a:39:f4:88:eb:5c:8a:dc:87:ed:
         79:84:98:2f:b4:9f:a7:7b:1c:b4:62:0e:cd:f1:72:21:e7:2f:
         4c:44:2a:3d:c6:50:69:59:e8:68:43:cf:e0:71:2e:21:4f:0e:
         90:48:d8:42:0e:f8:44:17:0b:74:9e:e9:10:be:67:2b:8e:31:
         75:06:8e:2d:6a:5e:54:26:94:41:bc:7a:10:4d:a5:71:1e:ea:
         ce:1e:8e:66:8a:1d:4b:03:76:c7:50:7d:40:fa:aa:19:47:ee:
         36:66:3a:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 22:44:44 2025 by rpki-client