Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/59846566-d471-31fe-8678-764e0a12b553.roa
File:                     59846566-d471-31fe-8678-764e0a12b553.roa (raw, json)
Hash identifier:          80A292yLjZyFQN4/WoMElvLrEn7Gc9ya/Z+olzWzZNc=
Subject key identifier:   D0:D4:EC:CA:A5:29:B5:62:A4:BF:E2:A4:DF:60:EC:AE:D4:32:39:D3
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F4328584B4E774605749E91BF9AB0DC20
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/59846566-d471-31fe-8678-764e0a12b553.roa
Signing time:             Thu 25 Sep 2025 01:00:33 +0000
ROA not before:           Thu 25 Sep 2025 01:00:33 +0000
ROA not after:            Wed 24 Dec 2025 02:00:33 +0000
asID:                     199959
IP address blocks:        166.0.178.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:4e:77:46:05:74:9e:91:bf:9a:b0:dc:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Sep 25 01:00:33 2025 GMT
            Not After : Dec 24 02:00:33 2025 GMT
        Subject: CN=4f802e0c-c5df-44c9-a020-777bef581c59
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:39:5b:b4:56:34:d9:d6:83:ae:37:4c:f6:40:
                    8e:ce:e0:43:38:48:7e:1d:7c:bb:b0:f1:72:49:a9:
                    17:5f:63:d7:4c:8a:d7:6e:99:f7:85:78:ef:bf:8d:
                    91:d7:b8:76:d1:47:b9:8c:9e:85:b7:96:3d:c3:6c:
                    c0:c8:72:f3:9a:23:8b:a8:13:60:f9:ce:47:8e:b8:
                    0a:d5:c1:f4:0c:9e:c8:4c:e0:b0:3d:b9:cd:83:df:
                    80:4f:2e:7a:56:e0:5f:d2:69:3a:44:bd:57:28:dc:
                    45:ab:3d:62:2c:2a:62:fd:f8:4a:96:60:74:3a:2d:
                    77:d7:89:4b:57:4e:47:fb:e2:1b:99:71:23:1e:da:
                    3b:bd:7a:9b:9d:81:ca:d5:4c:c8:0c:ea:e9:4d:64:
                    1a:c4:63:6b:d7:c2:db:2c:f3:cc:78:0a:ac:dd:db:
                    63:17:62:ab:f9:73:e4:d4:ce:39:97:25:b4:29:c0:
                    28:d4:c7:be:71:fe:b5:d0:02:45:f2:b7:3a:74:32:
                    57:9d:51:2f:16:9a:c3:5b:db:f0:55:eb:58:eb:0d:
                    36:80:0c:f2:a6:03:a5:55:c8:59:62:54:5a:c5:d3:
                    c1:cc:bb:86:d9:25:1b:7c:05:c6:f6:54:9b:a7:fd:
                    1b:3c:be:6c:00:8a:a8:db:7a:e8:c2:d5:91:13:36:
                    95:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:D4:EC:CA:A5:29:B5:62:A4:BF:E2:A4:DF:60:EC:AE:D4:32:39:D3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/59846566-d471-31fe-8678-764e0a12b553.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.0.178.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         10:81:53:4d:1b:95:18:0c:af:f8:fc:79:9d:39:f7:14:4f:33:
         c1:32:39:36:4c:0a:45:73:93:09:db:27:25:d9:43:74:fb:90:
         e3:41:a7:94:66:f9:ff:31:98:03:aa:5d:b2:55:34:68:43:fd:
         7f:26:bf:66:70:e0:93:8f:f6:bb:7c:ae:f6:47:21:d2:59:1d:
         15:42:eb:da:e2:02:86:96:d9:e6:a9:e0:07:63:3d:c4:29:c8:
         cd:21:48:fc:f4:f7:88:3c:51:6d:32:5f:b2:e3:86:f8:09:d4:
         9d:c1:d6:6b:02:c8:b3:d5:a0:8d:10:25:82:35:2e:8b:79:5d:
         ef:0b:70:04:7e:a8:97:7e:96:15:3e:9b:9c:42:e1:e8:db:48:
         6e:3f:15:e1:8d:43:bb:9b:c6:ae:64:23:cc:ed:d9:47:55:12:
         a8:44:85:17:fe:cb:03:23:16:6a:c2:80:f6:63:ac:bb:45:37:
         05:8f:da:32:6d:42:ac:a8:20:b4:85:6d:52:6f:4b:0c:cc:34:
         f9:93:98:0f:dd:d7:7d:d5:6b:41:eb:33:e1:eb:90:78:5d:7c:
         cf:d5:d8:77:12:a9:72:20:05:75:f7:17:97:d4:ac:09:82:bf:
         17:69:b6:e2:83:f2:76:93:c1:06:d5:c5:c1:77:42:c6:a2:f6:
         54:3b:17:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 22:45:18 2025 by rpki-client