Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/45e15e54-1bdf-3c4c-b36f-25d7948fcd8e.roa
File:                     45e15e54-1bdf-3c4c-b36f-25d7948fcd8e.roa (raw, json)
Hash identifier:          B+iQ/dkr/YlA7/hx2lSHSvfqVKDtcM/OfPmuqEbphxU=
Subject key identifier:   6C:77:2C:01:DE:54:B6:33:83:39:B8:BD:B8:8F:F7:82:D4:97:6A:28
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F4328584B917782515B225C39B9593780
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/45e15e54-1bdf-3c4c-b36f-25d7948fcd8e.roa
Signing time:             Sun 19 Oct 2025 01:00:30 +0000
ROA not before:           Sun 19 Oct 2025 01:00:30 +0000
ROA not after:            Sat 17 Jan 2026 02:00:30 +0000
asID:                     62240
IP address blocks:        166.1.153.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:91:77:82:51:5b:22:5c:39:b9:59:37:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Oct 19 01:00:30 2025 GMT
            Not After : Jan 17 02:00:30 2026 GMT
        Subject: CN=79698b15-cd5f-47f3-b695-96e128bad4d3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:d3:86:13:9b:a1:cf:81:58:42:ab:53:b9:4f:
                    bd:3d:7e:f4:2e:cc:f9:f6:80:6b:b1:0b:da:f4:5e:
                    16:95:15:2b:db:74:a1:7e:19:fb:1b:d9:13:41:22:
                    e8:13:0c:c5:a0:17:ac:31:fc:22:2e:c3:38:e5:2f:
                    42:7f:dc:8f:08:f0:40:5e:83:b8:65:8d:68:7f:9d:
                    b1:64:c0:bb:b6:ac:4c:10:6a:59:b6:4e:b4:bb:75:
                    f4:23:28:79:47:64:64:dc:12:0e:46:bf:e2:ca:67:
                    47:d6:e3:5e:e2:cd:92:05:5a:e7:b1:89:76:32:eb:
                    37:cd:9f:18:16:fb:62:9a:9f:75:1a:7d:e0:11:9e:
                    00:74:7a:7c:e0:43:84:dc:60:c3:5a:ba:31:21:ed:
                    13:d9:f8:3d:78:9b:c8:bc:59:2b:ed:52:09:e6:b0:
                    51:51:da:02:df:77:82:30:84:16:63:c0:5d:dd:3e:
                    3c:1d:5a:67:8b:44:ec:92:73:cb:37:49:bc:c3:22:
                    9e:6a:86:fa:b3:c0:ad:e2:aa:3f:2e:4e:de:78:70:
                    48:66:06:27:00:bb:ee:c5:68:e3:ae:7b:8c:b8:0c:
                    dc:46:b1:45:f1:5c:0a:c3:7e:cb:32:e1:7b:2e:fa:
                    98:06:0e:5f:b6:a6:5e:2c:30:53:bf:7e:10:c5:95:
                    ce:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:77:2C:01:DE:54:B6:33:83:39:B8:BD:B8:8F:F7:82:D4:97:6A:28
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/45e15e54-1bdf-3c4c-b36f-25d7948fcd8e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.1.153.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         87:6d:38:90:71:57:5a:87:09:30:12:bc:60:08:13:7d:3b:48:
         11:f9:05:42:37:bd:51:81:25:da:70:de:7f:a7:43:1a:f9:10:
         df:05:95:23:03:f9:42:1d:20:4c:34:11:ef:73:89:b4:d7:df:
         da:61:e1:dd:c7:08:35:f0:76:bb:5b:3d:e9:06:04:88:33:b0:
         d8:80:c4:73:ed:4b:90:f4:4d:e9:3f:a6:3a:61:44:8f:eb:a9:
         b0:15:7e:4c:66:a4:8e:7e:0c:6f:26:a4:4c:a8:be:29:96:e2:
         b1:19:61:94:41:d7:2a:62:22:13:02:40:59:d1:38:f5:63:5e:
         cb:6a:61:24:eb:28:f6:5e:ef:c9:c4:f6:10:e5:4d:6e:7a:a4:
         dc:d2:03:27:3e:26:ab:5e:8d:3b:ad:f3:09:e5:3b:2e:18:3d:
         34:e4:f6:e7:df:a6:9e:ee:5c:d3:2b:72:9d:34:ce:cc:9c:5e:
         89:90:3f:11:d2:a9:4f:47:0c:76:10:5f:a4:4f:b6:3d:13:44:
         ff:f2:bc:b6:60:17:f6:14:af:dc:9c:a3:7e:bc:68:d8:f1:86:
         a0:63:5d:21:ab:16:bf:54:05:6e:3b:ee:54:e4:74:5b:15:b5:
         7c:bb:b6:38:3a:5d:75:81:fa:f8:05:c5:f0:d1:ac:26:27:d8:
         06:15:26:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 12:41:25 2025 by rpki-client