Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/4651301f-4a80-37bd-9f60-ac8525c1ddb7.roa
File:                     4651301f-4a80-37bd-9f60-ac8525c1ddb7.roa (raw, json)
Hash identifier:          IdhnKz9wg0R7tZMFw26gE+n7RHmr7yzKcEkqKG7D7sk=
Subject key identifier:   07:AD:0D:73:64:C1:F3:E8:06:E4:9C:5B:84:8D:2B:0D:A8:37:AB:45
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F4328584B679803387CF6296CD918E780
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/4651301f-4a80-37bd-9f60-ac8525c1ddb7.roa
Signing time:             Sat 04 Oct 2025 01:00:33 +0000
ROA not before:           Sat 04 Oct 2025 01:00:33 +0000
ROA not after:            Fri 02 Jan 2026 02:00:33 +0000
asID:                     44559
IP address blocks:        166.1.146.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:67:98:03:38:7c:f6:29:6c:d9:18:e7:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Oct  4 01:00:33 2025 GMT
            Not After : Jan  2 02:00:33 2026 GMT
        Subject: CN=416848bc-306c-485b-82ed-1c73254df3d1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:19:4a:f7:05:38:48:e1:ac:da:59:93:51:c9:
                    27:a8:ae:71:91:82:ad:93:9d:13:e5:b1:6d:e2:58:
                    2e:44:e8:b6:f0:d2:ef:45:ad:12:b4:35:d5:ac:1e:
                    c0:a5:33:33:2b:e1:13:79:cb:25:28:4a:1f:66:f2:
                    86:6b:9c:5e:f1:16:fa:48:af:51:35:33:0c:22:a4:
                    18:07:25:f3:97:b1:a2:26:1a:96:38:97:c9:f3:e6:
                    d4:9c:39:79:0e:52:0e:f5:1f:9b:33:48:c5:c6:30:
                    01:ef:64:20:30:bb:79:4e:e6:54:15:ec:06:1d:11:
                    32:a4:b6:87:f9:b0:2f:48:c7:d0:0b:91:51:2d:5e:
                    06:ff:e2:c0:53:75:a1:0a:27:16:d8:2a:29:a5:8c:
                    6c:17:5c:b0:0c:ca:29:bd:46:c1:87:1e:d1:fd:a0:
                    d3:1a:9c:c3:f7:85:c9:7e:3f:e6:dc:d8:68:22:57:
                    fd:c5:7f:4e:bb:75:74:6e:7f:3f:df:12:07:c8:dc:
                    6e:4b:aa:be:62:2b:f2:1a:85:86:3a:5f:1d:29:f5:
                    be:c3:df:6f:f0:b5:de:ca:7c:2a:72:78:90:03:3e:
                    8a:b3:80:e1:47:73:96:0f:62:a4:e8:b3:07:16:d2:
                    86:cf:7a:9a:d1:76:1a:7e:53:18:45:ff:03:a6:31:
                    be:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:AD:0D:73:64:C1:F3:E8:06:E4:9C:5B:84:8D:2B:0D:A8:37:AB:45
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/4651301f-4a80-37bd-9f60-ac8525c1ddb7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.1.146.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         43:8c:60:85:b7:43:9c:47:98:11:85:dd:cf:43:4d:4c:01:f9:
         c6:67:3b:a7:19:e4:e1:64:1a:36:a1:40:97:57:b6:dd:27:9c:
         0f:69:59:8a:fb:32:56:a0:3c:3f:d6:2c:77:80:33:1f:fb:1b:
         04:34:23:73:00:7b:80:50:ac:80:78:6e:b8:ef:d5:7d:40:cf:
         10:51:70:a7:52:ed:b5:a9:53:5f:9b:87:65:57:84:51:36:d1:
         70:f9:f1:08:9c:ff:ca:cd:79:fe:56:d5:f2:01:a6:b2:ae:1b:
         aa:fd:b4:76:eb:1c:b5:85:36:8a:86:19:d4:99:cd:ac:f6:e8:
         00:cc:48:52:2c:e1:9f:0c:b8:94:e3:a0:3d:33:c3:24:22:84:
         79:9c:33:4b:d0:77:43:1d:22:01:6e:45:91:62:80:82:07:8e:
         ba:4d:f3:90:4e:96:5e:5b:f2:9f:b6:04:87:b3:51:03:e7:6d:
         f3:99:41:a2:98:5b:db:cf:b9:0b:c8:39:a4:70:c9:e4:ff:f3:
         e0:57:61:af:c2:1f:a9:b0:ae:e8:02:a0:d9:55:ff:04:f0:90:
         aa:f5:0d:74:e5:27:f8:2f:78:58:e9:0e:f3:82:d1:22:00:fa:
         03:e3:e1:39:42:3d:56:c8:2b:a0:69:fa:8f:18:42:00:7c:d5:
         f7:11:1f:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:16:09 2025 by rpki-client