Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/55ecb2e1-a9a6-31ad-a31c-ad8f69fb21fd.roa
File:                     55ecb2e1-a9a6-31ad-a31c-ad8f69fb21fd.roa (raw, json)
Hash identifier:          X4t4WCnfV7KwsISzJJIHrJzuttCME1iewmKVsIJN5e0=
Subject key identifier:   72:36:1D:30:E8:1A:DA:E3:D0:FD:32:65:1E:2B:04:37:31:C0:76:AA
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F4328584B0FA6C175E71414A4F2F9D6E0
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/55ecb2e1-a9a6-31ad-a31c-ad8f69fb21fd.roa
Signing time:             Tue 02 Sep 2025 13:00:42 +0000
ROA not before:           Tue 02 Sep 2025 13:00:42 +0000
ROA not after:            Mon 01 Dec 2025 14:00:42 +0000
asID:                     8881
IP address blocks:        166.0.38.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 08:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:0f:a6:c1:75:e7:14:14:a4:f2:f9:d6:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Sep  2 13:00:42 2025 GMT
            Not After : Dec  1 14:00:42 2025 GMT
        Subject: CN=c64b809c-938b-4b40-ba7d-04b65aee0fd6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:09:22:49:f7:9f:46:68:09:e0:94:0b:97:20:
                    ba:70:88:84:5c:cb:25:4c:fe:6c:41:99:f9:d2:c4:
                    66:b5:d5:5d:ba:b0:3d:0b:6f:f5:28:d0:f5:03:3a:
                    e3:81:6b:42:30:6d:59:a9:a5:e3:15:a0:f1:96:66:
                    2a:6c:0c:10:75:af:31:82:80:eb:ff:24:b7:2e:b7:
                    2f:40:5b:3d:14:40:09:3b:ed:cd:d0:98:a7:4f:6b:
                    2a:c3:76:67:99:68:ab:16:63:9f:9f:f1:ee:9d:b3:
                    c1:03:c8:ae:8f:f6:06:78:4e:2a:e3:59:ef:5a:73:
                    df:68:45:1d:19:79:85:8d:c0:55:e7:2e:ba:21:ce:
                    d7:0a:5b:c1:a7:15:be:f5:4a:19:f4:63:d3:81:d9:
                    56:f4:87:ef:14:d5:92:e3:c2:7e:a3:a7:0d:a4:e9:
                    62:06:9c:ec:ec:85:a4:a2:2e:1d:c2:44:75:94:c8:
                    b3:9a:98:82:70:30:39:af:62:11:ed:8f:d5:79:0e:
                    71:f0:ff:21:56:5f:46:4f:06:9b:81:12:6e:41:c9:
                    8a:71:0b:8f:69:05:de:a7:cf:f1:48:b7:b0:94:32:
                    5a:c9:b8:6b:c3:ac:5c:17:0f:c3:06:92:32:04:ac:
                    aa:77:f8:79:6b:6a:b4:65:fb:c4:2d:66:85:85:9c:
                    2b:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:36:1D:30:E8:1A:DA:E3:D0:FD:32:65:1E:2B:04:37:31:C0:76:AA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/55ecb2e1-a9a6-31ad-a31c-ad8f69fb21fd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.0.38.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         78:e2:7d:c3:a0:bf:c1:6e:04:0a:da:55:bc:4e:12:7e:a2:dd:
         08:f5:ea:cd:f6:13:3c:bd:f9:82:3f:87:97:1e:af:f7:4d:c5:
         44:6e:cd:ef:d7:5e:28:e7:85:48:60:e0:c2:09:26:00:41:7b:
         17:df:f8:37:cf:65:0a:3f:cb:39:05:8c:52:c0:ec:1b:c3:c3:
         0f:64:fa:55:52:a0:3c:ea:a5:6f:5e:56:66:47:52:aa:44:9f:
         bc:50:79:ea:ba:f2:06:ad:49:80:28:15:67:3b:79:71:27:0a:
         43:bc:b5:f4:53:a3:13:f9:47:1c:99:96:11:68:36:67:87:2d:
         b3:9b:1f:ab:d5:22:66:f5:63:f6:76:88:7a:3c:e8:83:3a:f0:
         b9:dd:a8:4f:55:88:b5:2e:b1:0d:85:e9:c1:d5:55:a6:de:93:
         cb:95:88:d4:f1:f5:1c:84:c7:d1:b5:8e:4d:3e:37:ce:5c:0c:
         5d:75:a9:cd:78:2a:1a:5c:49:0f:47:cc:a2:95:24:98:2b:ee:
         3d:1a:23:38:a1:b4:4b:96:43:54:e7:ca:0c:01:fe:a3:ab:3b:
         a4:e4:99:0e:be:7a:ed:8f:6f:2c:39:f5:fd:74:b8:ab:cf:05:
         b6:35:79:4f:d4:96:5d:b6:bb:c7:b5:60:8f:e5:0b:4d:2f:0a:
         58:7a:bf:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 07:28:32 2025 by rpki-client