Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/63797bee-c802-39a7-9de4-823f9e329acb.roa
File:                     63797bee-c802-39a7-9de4-823f9e329acb.roa (raw, json)
Hash identifier:          dRJ1MCAEcTb7XTo/n5edkiTu5B+z/hXVESRi1FMHh6A=
Subject key identifier:   85:C9:D2:5F:AD:60:CD:97:DF:D2:84:74:5B:5D:CE:8D:AA:13:F6:76
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F4328584B758C9FA854306063773F96C0
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/63797bee-c802-39a7-9de4-823f9e329acb.roa
Signing time:             Thu 09 Oct 2025 01:00:28 +0000
ROA not before:           Thu 09 Oct 2025 01:00:28 +0000
ROA not after:            Wed 07 Jan 2026 02:00:28 +0000
asID:                     58061
IP address blocks:        166.1.88.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 08:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:75:8c:9f:a8:54:30:60:63:77:3f:96:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Oct  9 01:00:28 2025 GMT
            Not After : Jan  7 02:00:28 2026 GMT
        Subject: CN=fe6d234c-338d-4e77-9c7e-3f88ee00dacd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:94:99:3d:45:39:07:8a:fe:ae:61:bb:a2:ea:
                    26:ed:79:66:66:b0:49:22:5a:1a:9b:26:f1:9b:ae:
                    ec:cb:59:93:da:80:3c:8c:a1:7e:64:f7:3b:97:20:
                    42:ac:fd:86:cc:06:a7:7e:e4:a3:e3:97:5d:83:16:
                    83:0e:fa:f7:3a:03:ce:99:ee:ec:3b:80:08:5e:86:
                    68:c3:24:7d:6e:39:6c:e8:bc:55:fd:b4:43:e7:b2:
                    c4:53:c9:1d:8a:ab:25:10:0a:cd:df:cc:8e:79:0f:
                    ca:5c:9c:ec:31:d1:4f:70:b4:a6:e2:71:4e:72:ba:
                    d4:ac:36:a1:5d:01:e9:98:68:65:5b:62:52:a0:32:
                    0c:dc:1b:bf:bd:36:06:9b:04:b2:19:d9:bd:41:2e:
                    29:08:7f:a2:e7:52:7a:cf:82:93:97:4a:e5:ce:83:
                    58:5b:4c:eb:02:48:cf:b8:1f:d6:3b:26:0b:7f:6a:
                    aa:dd:b9:fc:7b:8d:2b:f9:2f:38:2b:31:71:d3:60:
                    27:29:1b:71:08:1a:03:14:a4:c2:1c:93:ed:ad:e0:
                    56:f7:a9:64:e0:1b:55:ad:b8:ca:67:8b:af:00:e4:
                    10:0d:3d:fb:9b:59:32:15:d1:c9:8b:62:77:2d:78:
                    68:43:db:4b:a7:23:cc:77:da:df:49:6a:62:97:27:
                    56:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:C9:D2:5F:AD:60:CD:97:DF:D2:84:74:5B:5D:CE:8D:AA:13:F6:76
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/63797bee-c802-39a7-9de4-823f9e329acb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.1.88.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1e:7f:47:1d:2f:fa:2f:3e:99:a6:4c:c2:73:72:f2:08:23:ce:
         1c:66:53:f5:0e:72:59:09:00:18:95:e1:fa:b9:3f:96:e2:90:
         28:d1:cc:3e:85:88:c1:e0:47:fc:97:37:7d:65:2f:00:17:d2:
         8a:b7:25:f2:6f:57:3c:53:f4:34:91:22:7a:61:f7:1c:91:ad:
         96:14:db:35:33:c6:ed:7f:13:2f:85:f8:44:da:3e:29:cf:b0:
         e2:db:2c:77:3a:88:34:72:df:e0:f3:85:2f:d5:87:06:07:ca:
         fa:f1:66:e5:8b:6b:82:82:3d:75:12:dc:fc:62:12:ae:37:a1:
         bd:e1:4f:a2:e2:29:64:3d:74:21:ef:32:60:b3:f6:95:05:8d:
         b6:1a:e9:49:71:e2:e1:cb:92:31:21:f8:b2:98:78:a5:d8:6b:
         4b:84:08:cc:39:b7:74:12:18:4c:d8:92:b8:9e:7f:49:e8:21:
         15:0a:15:03:3f:89:18:81:e6:7d:12:4d:71:8a:49:3c:61:ea:
         50:96:51:70:e1:b8:c3:06:a9:44:b8:04:7f:46:a7:ec:aa:1a:
         ba:2e:33:9d:15:a7:d7:8c:21:a0:fa:54:37:b8:b3:c3:98:b4:
         95:10:5f:7e:5f:a9:78:ab:29:19:cd:1e:57:72:62:d6:e0:ff:
         1a:ce:4d:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 04:41:27 2025 by rpki-client