Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/20f995fd-154b-3856-aa41-3a06888e2b0e.roa
File:                     20f995fd-154b-3856-aa41-3a06888e2b0e.roa (raw, json)
Hash identifier:          Jo0l4y5vUxYMm9uicQKjTHnXQ79r3Fih+lYxM9Ng1QU=
Subject key identifier:   25:0F:6D:84:C3:4F:13:81:EA:B0:CA:74:33:8B:C7:96:A5:25:CD:7B
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F4328584B91776D69BAF69E44181EC680
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/20f995fd-154b-3856-aa41-3a06888e2b0e.roa
Signing time:             Sun 19 Oct 2025 01:00:30 +0000
ROA not before:           Sun 19 Oct 2025 01:00:30 +0000
ROA not after:            Sat 17 Jan 2026 02:00:30 +0000
asID:                     44477
IP address blocks:        166.1.96.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:91:77:6d:69:ba:f6:9e:44:18:1e:c6:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Oct 19 01:00:30 2025 GMT
            Not After : Jan 17 02:00:30 2026 GMT
        Subject: CN=2945019e-bbeb-475a-9615-6e60071134ea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:0b:36:c3:7e:c0:96:e5:81:d3:9d:69:6a:7d:
                    89:f9:50:d2:76:d4:8d:31:1c:18:74:4c:08:64:82:
                    61:38:94:60:4d:2d:5d:02:95:c6:cd:34:5a:c6:15:
                    ef:f6:02:5a:57:42:61:f9:35:9f:e8:c2:ee:37:b5:
                    28:08:37:2c:ab:cf:80:76:92:51:7d:22:36:53:a1:
                    26:9d:54:4c:f8:58:1f:8d:82:f6:14:ec:70:8c:55:
                    37:d0:80:23:3d:72:70:e5:32:1b:74:de:18:18:11:
                    90:60:91:c0:93:fe:c2:f0:c6:b5:18:e0:30:71:33:
                    dd:cd:e3:3c:16:05:9d:64:aa:a8:e4:74:2d:51:8b:
                    46:9a:66:ea:8b:d6:91:83:ba:1d:f0:b4:30:08:ae:
                    1d:68:1b:23:3e:de:32:0f:40:55:2c:32:a1:ab:86:
                    71:93:14:f3:8e:57:dc:1c:9e:41:b5:b5:c8:53:f0:
                    57:cb:fe:2d:d8:d3:3d:5d:1b:3b:b4:29:c0:36:f9:
                    16:10:ca:42:6a:d2:ad:63:fc:46:89:1e:2e:fa:58:
                    4a:50:46:3d:ba:aa:48:fe:47:7c:4d:fa:a5:81:49:
                    33:37:e9:c0:01:95:53:c4:30:bc:26:32:e6:f9:23:
                    ff:e2:28:e0:b0:c4:1f:29:23:ed:e6:a2:ac:d9:4f:
                    71:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:0F:6D:84:C3:4F:13:81:EA:B0:CA:74:33:8B:C7:96:A5:25:CD:7B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/20f995fd-154b-3856-aa41-3a06888e2b0e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.1.96.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a9:1b:23:58:d1:8b:03:74:9b:ed:08:eb:24:a9:a1:b0:a4:b6:
         1c:8b:ef:4c:46:e3:3a:c4:53:e3:b0:08:51:30:86:25:dc:d5:
         6c:ff:6f:d2:ca:b4:77:e9:de:8b:f1:99:48:8f:c8:47:de:6e:
         c7:13:e1:99:c1:cc:a6:22:e1:30:7b:ca:ea:47:b8:3e:31:4f:
         2d:f4:8a:6d:00:ee:a5:f9:58:0f:d0:db:30:b1:31:8e:98:c3:
         aa:3b:95:59:e2:31:96:11:f6:23:04:9a:a7:20:d9:4a:ac:84:
         79:7c:14:6c:26:5d:48:49:26:ec:2d:6a:7d:d7:34:aa:b5:5a:
         d2:6b:96:44:e6:1f:16:9b:52:ad:7c:0e:cf:81:40:c3:0a:83:
         77:c9:54:68:d9:bb:7c:73:df:6b:c9:fb:f9:8e:06:59:27:f2:
         7b:f0:de:dd:fa:7d:c1:a3:32:2f:f4:3c:a2:69:5b:6c:3e:c5:
         ea:96:0c:0b:d5:df:92:ec:84:ca:27:6d:7a:e8:44:6b:14:a1:
         e3:3f:cb:83:73:3b:c5:26:36:26:03:24:da:21:88:54:03:8a:
         d3:23:6e:29:81:d1:44:fa:a3:a5:61:ba:b6:70:8a:b5:50:c6:
         93:58:4b:01:1f:1d:5e:0d:3b:7d:09:58:11:be:ce:8c:83:1c:
         53:6b:3e:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 22:35:22 2025 by rpki-client