Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/32315e23-926f-3606-9508-25f4fb8c3286.roa
File:                     32315e23-926f-3606-9508-25f4fb8c3286.roa (raw, json)
Hash identifier:          rQq+xZPcziASWK+3y3+8MTi8/uyycPOnOrE8PK5/k8I=
Subject key identifier:   94:A0:3D:9A:42:23:F9:9B:FC:67:5B:88:B9:89:46:23:92:14:CB:09
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F4328584B679800A182AF0E2BEFABC580
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/32315e23-926f-3606-9508-25f4fb8c3286.roa
Signing time:             Sat 04 Oct 2025 01:00:33 +0000
ROA not before:           Sat 04 Oct 2025 01:00:33 +0000
ROA not after:            Fri 02 Jan 2026 02:00:33 +0000
asID:                     44559
IP address blocks:        166.1.35.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:67:98:00:a1:82:af:0e:2b:ef:ab:c5:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Oct  4 01:00:33 2025 GMT
            Not After : Jan  2 02:00:33 2026 GMT
        Subject: CN=c83a0f2e-fba8-4e2c-a73a-b035b46a6dd7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:f8:c8:a7:0f:a8:06:5e:39:da:1c:df:63:8b:
                    70:c7:5c:68:d8:70:8f:28:ce:e4:01:34:55:b9:12:
                    c3:09:71:8e:c9:8d:66:80:0f:35:90:52:3a:1f:c5:
                    22:94:76:62:5e:0a:5a:7f:b0:f7:42:5b:79:a5:83:
                    9e:05:e0:64:55:cc:10:fb:0a:6f:e0:53:b4:ed:a1:
                    10:f5:5e:35:2e:27:c4:6f:17:6a:aa:a1:24:99:b8:
                    8a:be:db:51:fc:c0:64:a7:a4:c3:4b:9f:99:70:ed:
                    91:e7:1b:c7:d2:a4:ad:93:0f:18:ad:be:ae:05:ba:
                    3f:09:81:d0:d7:1a:e3:00:c8:8a:12:28:34:ce:cb:
                    4d:2b:8f:8d:fb:72:da:5d:d4:16:2b:fa:79:a8:4e:
                    7d:28:6e:c3:48:56:1e:0a:1f:01:54:76:a7:9d:18:
                    6c:c7:f5:6d:9b:b2:0d:41:b8:b8:1e:03:1d:55:30:
                    70:13:b5:d7:a8:9b:6a:b3:e8:36:13:ee:9a:42:ad:
                    93:40:4b:5f:1b:a8:90:e0:2c:6d:26:07:19:57:2b:
                    d2:c0:41:3b:6e:a4:f1:0f:9b:2f:c2:5f:e5:7c:67:
                    ce:61:4d:47:85:d3:3b:32:d3:6a:d6:83:40:f4:9b:
                    0a:bb:73:a7:b8:9a:a4:f1:ab:ba:21:63:e6:c9:74:
                    fa:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:A0:3D:9A:42:23:F9:9B:FC:67:5B:88:B9:89:46:23:92:14:CB:09
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/32315e23-926f-3606-9508-25f4fb8c3286.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.1.35.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         85:2b:89:ab:03:e1:71:5d:07:96:67:09:57:35:d2:bc:1a:32:
         5a:8e:9d:e6:6a:a2:ec:4c:4e:2a:d2:87:99:9a:ee:56:ce:b9:
         f4:4e:26:15:eb:18:72:ac:41:ee:3e:39:a6:8b:c3:05:91:0c:
         d4:63:d2:7f:2f:ff:de:2b:16:b3:7a:15:aa:1a:4f:9d:7e:18:
         5d:e8:2d:5c:42:ce:09:79:f9:4f:ee:f2:18:78:6a:6b:3a:09:
         e7:77:d9:cd:00:c6:2e:2e:8b:28:3a:b3:cc:d3:2a:56:e5:69:
         e0:ba:5d:b7:76:a4:74:9f:6d:18:7b:92:d0:ef:13:78:e6:2c:
         5e:fc:73:f6:db:33:3a:07:03:fd:67:63:5e:37:80:58:4c:13:
         02:96:e9:9f:ee:61:e6:a3:af:11:0d:cb:79:05:21:61:f5:ab:
         5f:03:a4:84:94:b5:2f:15:f1:77:0f:5c:a2:7e:76:34:b1:fb:
         b5:71:85:e1:97:c5:d0:5f:77:54:b0:3b:03:89:eb:71:2a:d4:
         81:66:40:b6:00:ae:1e:85:bb:77:4f:fa:9e:15:20:5f:f2:21:
         08:52:88:06:e3:f5:b4:3c:94:e8:5b:84:f7:1e:33:b8:86:24:
         03:f4:85:90:3b:ae:7f:b5:9f:98:9e:89:73:6f:99:7d:ae:a1:
         92:d6:48:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 22:29:34 2025 by rpki-client