Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/2c091973-f414-3b37-b867-572358e28f2b.roa
File:                     2c091973-f414-3b37-b867-572358e28f2b.roa (raw, json)
Hash identifier:          XBBfxg5CAwg4rjJjCPY/DwRjzoeWBcwRZVW5NbprCac=
Subject key identifier:   A2:51:CC:EF:68:55:A0:EC:12:21:8D:C7:A1:9D:45:F6:68:13:85:DD
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F4328584B679805F2B26E9604AA8AB4E0
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/2c091973-f414-3b37-b867-572358e28f2b.roa
Signing time:             Sat 04 Oct 2025 01:00:33 +0000
ROA not before:           Sat 04 Oct 2025 01:00:33 +0000
ROA not after:            Fri 02 Jan 2026 02:00:33 +0000
asID:                     44559
IP address blocks:        166.1.198.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:67:98:05:f2:b2:6e:96:04:aa:8a:b4:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Oct  4 01:00:33 2025 GMT
            Not After : Jan  2 02:00:33 2026 GMT
        Subject: CN=bc7d9e4b-9108-4f67-8c82-a23497476dbb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:1b:c2:b0:bc:bc:4c:51:00:2a:53:c2:a2:95:
                    2b:76:f7:57:99:2d:66:9b:e6:99:fc:65:ae:db:de:
                    84:fb:92:6f:58:5d:06:a6:d3:5f:b2:1b:8c:02:75:
                    81:16:47:46:ec:45:01:69:d4:89:0e:da:4e:67:b9:
                    64:fc:a3:75:13:e8:38:cf:46:1f:5a:89:b7:15:71:
                    14:96:b7:4c:af:df:a0:b9:eb:db:22:8a:e5:96:a0:
                    97:25:dd:d0:d2:b9:5a:58:5b:73:92:84:27:d0:6c:
                    f1:3a:29:a7:e2:a8:89:7b:e2:b0:8b:0e:bd:b3:42:
                    b9:10:77:ee:4a:0c:08:1b:64:52:67:75:bf:43:b2:
                    64:50:c4:7a:9b:26:7a:a5:0a:61:be:c6:86:25:f4:
                    00:39:91:85:3f:e1:32:b7:67:86:f0:46:bd:02:d4:
                    9e:99:46:ef:4b:8c:58:e1:ec:5c:70:63:c4:91:56:
                    2c:e5:20:90:d8:a7:c6:2e:05:e4:9f:dc:77:a3:37:
                    a6:24:68:e4:5a:6c:62:ab:a3:17:cc:1f:f7:50:be:
                    52:19:1d:e2:ee:e6:24:15:66:51:02:60:83:75:57:
                    dc:c3:a6:1e:dc:95:cc:af:0f:ca:1b:f7:e4:d1:cf:
                    68:30:85:6e:82:cd:19:be:6a:c6:b2:b6:15:13:0e:
                    0d:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:51:CC:EF:68:55:A0:EC:12:21:8D:C7:A1:9D:45:F6:68:13:85:DD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/2c091973-f414-3b37-b867-572358e28f2b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.1.198.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7d:0f:e7:6e:a5:59:76:ec:74:ca:62:bc:96:95:20:0c:4e:bc:
         74:0e:5f:c4:00:4d:c1:f4:7a:a1:f6:cf:87:ec:d0:3b:21:4e:
         7c:7d:f7:e4:36:5b:b6:8a:a0:40:de:b4:78:93:a3:53:f9:ab:
         e4:07:d2:4b:10:e8:1b:be:10:9e:9c:79:82:91:c7:af:cb:bb:
         38:de:3f:87:24:25:a5:52:37:9d:44:ca:88:a2:22:12:32:ee:
         99:7c:e7:22:71:41:b7:ca:43:cc:f4:8d:c8:de:ce:7f:bd:38:
         e1:a6:c7:15:1c:c0:f4:0f:fd:5d:da:d5:91:22:9f:07:99:d9:
         cf:70:97:8b:79:57:57:d0:d7:0f:75:e8:1e:cd:3f:39:00:25:
         bc:33:1f:2d:71:45:5d:47:e7:dc:92:59:95:1f:38:25:e9:84:
         f2:0e:e7:c9:56:a7:ed:ce:5b:05:21:1a:a3:21:61:77:9a:44:
         c8:7b:59:30:3b:4f:36:e3:e8:1b:aa:9e:4a:9b:23:98:8d:8c:
         bc:57:aa:d9:d4:c9:6e:3c:ce:c9:a5:da:11:49:2d:5f:76:1c:
         4d:0f:36:17:9e:e3:70:d5:3c:88:dc:d4:23:8a:34:41:dd:d2:
         53:68:b4:c5:d7:0f:42:56:8b:fc:66:75:8f:e0:5d:8a:6f:e4:
         b7:6a:56:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:10:00 2025 by rpki-client