Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/3d427201-c7b6-30a8-9a10-a814e052c518.roa
File:                     3d427201-c7b6-30a8-9a10-a814e052c518.roa (raw, json)
Hash identifier:          w3XcgdeVrypHya//fyWYuz67+1B7o/sP4Wem8h8e1GE=
Subject key identifier:   13:80:49:51:B2:09:BF:27:B0:A5:7C:67:8D:47:21:56:F2:E0:54:A1
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F4328584B758C9EEF806F7F9FC2362C80
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/3d427201-c7b6-30a8-9a10-a814e052c518.roa
Signing time:             Thu 09 Oct 2025 01:00:28 +0000
ROA not before:           Thu 09 Oct 2025 01:00:28 +0000
ROA not after:            Wed 07 Jan 2026 02:00:28 +0000
asID:                     58061
IP address blocks:        166.1.17.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:75:8c:9e:ef:80:6f:7f:9f:c2:36:2c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Oct  9 01:00:28 2025 GMT
            Not After : Jan  7 02:00:28 2026 GMT
        Subject: CN=a2e9358a-d7aa-4a6f-ad88-52e92770d534
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:da:0a:b7:9a:01:63:b5:12:59:05:cc:28:14:
                    e2:27:cd:d5:49:c1:b1:ed:c6:53:f3:0d:e5:15:ed:
                    27:05:bb:28:cc:c3:62:9f:44:de:86:68:57:18:3e:
                    ab:c7:7f:11:d1:3b:ba:f3:fb:44:d1:7f:bd:38:29:
                    80:6c:21:3e:d9:98:1b:7c:cd:2e:bf:7c:1d:c6:b9:
                    f6:f8:4a:29:6e:34:fc:bc:23:05:a1:40:62:55:0f:
                    63:fd:ff:6f:76:61:b2:36:24:96:65:20:a4:dc:f7:
                    a6:03:75:60:51:30:fa:5e:a0:52:dc:aa:67:c1:82:
                    8c:54:38:1b:89:c9:68:d5:30:f7:d5:d1:11:fc:fc:
                    f0:7b:9e:e6:b3:59:54:46:4c:ba:61:2c:06:f2:38:
                    af:ae:26:dd:7a:55:40:73:49:30:4d:27:88:03:f8:
                    d8:00:f5:d0:a2:df:f9:bf:53:39:13:14:e5:16:3a:
                    71:a9:4f:56:5c:67:6b:4b:b3:d0:d0:dc:fa:19:1d:
                    e1:a3:c6:ef:a6:41:39:bd:94:57:06:bc:1d:cb:3d:
                    0b:d9:0e:20:fa:e7:ad:52:2d:db:d0:fc:76:27:1a:
                    f0:fb:c9:33:31:a7:25:11:86:bb:cc:d9:7a:2a:26:
                    10:0a:dc:55:c7:32:bf:ee:d1:b2:d6:87:0d:e7:ea:
                    e3:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:80:49:51:B2:09:BF:27:B0:A5:7C:67:8D:47:21:56:F2:E0:54:A1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/3d427201-c7b6-30a8-9a10-a814e052c518.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.1.17.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         00:e1:5a:78:4d:c1:79:6d:30:30:c4:c9:5f:8f:40:d6:b8:0b:
         e2:c8:e0:45:4a:b5:ff:53:48:25:a6:8f:b3:7e:26:28:79:85:
         37:53:38:c5:ad:e0:8c:91:c5:a0:0b:d3:87:9a:0d:5e:0d:0f:
         7b:0d:6a:a5:db:b1:1a:5f:9d:48:f5:77:4a:07:d0:27:13:4c:
         04:c6:9c:67:d3:7d:e3:32:19:14:83:6b:64:21:fe:83:c2:59:
         b7:16:8d:12:6b:b3:95:a4:55:ea:94:bb:d0:57:95:41:03:b7:
         8e:b3:d2:48:46:e1:66:0d:49:0f:b3:89:16:a8:74:28:aa:b2:
         f1:ae:ca:48:25:5a:b9:38:fd:f8:fc:9a:5f:37:63:ce:ac:d6:
         f5:3a:01:57:39:5e:ee:2d:e6:ee:10:6e:66:ba:1c:bb:52:30:
         14:91:1e:b3:f5:c7:3b:a4:35:a7:17:04:8d:59:61:56:ce:06:
         d9:4e:83:14:a6:6b:6c:bd:18:88:c8:8f:e2:2d:f1:45:68:7e:
         04:34:ce:db:c4:35:e8:59:cf:67:b0:fb:56:08:d8:e5:e0:fa:
         a0:56:80:d9:9a:92:49:a7:37:87:f5:79:80:9b:63:22:54:dd:
         24:48:88:6a:23:0c:53:4e:ba:f3:26:ba:a5:24:a2:dd:b2:2f:
         c9:03:26:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 01:14:14 2025 by rpki-client