Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/3aa0aa95-5dae-3ce9-beda-7fa161efcb42.roa
File:                     3aa0aa95-5dae-3ce9-beda-7fa161efcb42.roa (raw, json)
Hash identifier:          XGdZ/P+S+1UFUkliaJd0psHdt9Zcv1jdPvoNxCceUwU=
Subject key identifier:   B0:9F:77:55:0D:0F:10:A8:58:40:94:5F:AF:99:36:62:33:E6:1C:7C
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F4328584B91776F38B83C6E9AE6F96A80
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/3aa0aa95-5dae-3ce9-beda-7fa161efcb42.roa
Signing time:             Sun 19 Oct 2025 01:00:30 +0000
ROA not before:           Sun 19 Oct 2025 01:00:30 +0000
ROA not after:            Sat 17 Jan 2026 02:00:30 +0000
asID:                     62240
IP address blocks:        166.1.64.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:91:77:6f:38:b8:3c:6e:9a:e6:f9:6a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Oct 19 01:00:30 2025 GMT
            Not After : Jan 17 02:00:30 2026 GMT
        Subject: CN=d5c7e6dc-ba42-46d8-8712-fe5d6352b10c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:e7:8f:fe:64:8a:c8:cd:99:47:b3:7b:bf:e7:
                    f1:44:69:16:64:4a:ab:bc:eb:c8:59:f9:e6:ee:ab:
                    40:70:c5:12:f0:c7:a3:54:f5:82:65:bc:a2:80:64:
                    81:f8:9b:26:62:0a:61:ea:00:93:97:da:6d:fa:5e:
                    e0:3f:34:07:13:6d:61:64:7d:5a:d7:d6:cc:5b:90:
                    a5:7c:a8:2f:d7:e0:21:34:f5:1f:f2:a2:3d:2a:07:
                    ad:18:a1:3d:60:f5:50:08:18:f0:05:52:a9:2d:bc:
                    5c:fb:35:f7:ae:2e:f2:2f:f7:f3:d2:47:a7:87:70:
                    09:17:94:a8:fd:82:ba:bd:c1:39:e4:bd:d4:b6:96:
                    5e:49:3d:a4:44:64:8b:fa:68:8a:79:b3:e8:2d:84:
                    c9:f3:f4:a9:ef:36:3f:c1:6c:57:05:4a:93:92:54:
                    3f:86:65:48:1b:2b:e3:ee:28:23:2d:01:a0:bb:cb:
                    20:f9:e8:ee:fe:52:03:da:90:cf:eb:9f:d4:c0:c1:
                    6f:fc:be:4a:c7:da:21:be:53:fe:b0:ff:ed:6d:b9:
                    a0:1d:4d:50:83:44:40:e8:a8:f5:d2:a7:1c:dc:d3:
                    38:f1:b0:28:2c:9d:68:0f:8b:c3:90:36:c4:58:00:
                    aa:62:a6:73:4a:a3:25:80:0b:74:e0:2a:c4:5e:23:
                    cb:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:9F:77:55:0D:0F:10:A8:58:40:94:5F:AF:99:36:62:33:E6:1C:7C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/3aa0aa95-5dae-3ce9-beda-7fa161efcb42.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.1.64.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         85:63:eb:2f:89:a6:c2:36:03:49:31:30:a8:71:5a:d9:0f:3c:
         35:76:f8:0c:6d:5b:b6:5a:a6:2d:a0:92:06:20:d3:80:1b:bd:
         fd:d4:b1:32:46:7d:e7:eb:3c:0e:19:fa:aa:5f:2e:f7:cc:3f:
         ae:37:e6:c1:19:5a:06:6b:a8:dd:42:d0:b6:22:68:b7:6f:ea:
         72:1d:65:04:e1:83:b4:b0:4f:2e:6f:91:b2:60:59:29:2f:00:
         f9:69:70:b9:e8:df:a7:db:a0:a3:99:38:c7:be:b5:4d:da:ce:
         85:6a:a4:24:06:2f:89:e6:ac:4e:b8:86:76:8c:f6:ae:bb:01:
         e8:f2:67:8f:3e:8e:9f:b7:26:fa:aa:f9:b3:0d:75:96:18:61:
         6a:23:19:a1:32:8d:69:1f:e5:88:dc:0c:61:9f:60:92:11:8b:
         6a:85:d8:ca:04:e6:f3:77:50:22:97:49:25:f0:50:d6:48:85:
         7f:ec:75:97:cc:5d:5a:73:89:9d:c8:e0:52:0b:cc:14:c6:41:
         f5:ea:39:90:b0:f7:9a:2d:83:81:3b:5c:40:79:27:de:0a:e7:
         15:69:4e:aa:76:6a:f5:09:06:b0:da:d4:18:29:c9:c2:ee:c6:
         13:b7:1c:2b:1d:c8:5b:e2:52:ec:8b:90:a3:3e:65:7e:8c:b7:
         51:27:22:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:16:17 2025 by rpki-client