Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/656bcbde-2636-38d4-8883-c44ad94a6ae6.roa
File:                     656bcbde-2636-38d4-8883-c44ad94a6ae6.roa (raw, json)
Hash identifier:          A94u+xUIipPu8kbK+P4Ad05UqZITreg3XeHCD3hT0Qg=
Subject key identifier:   38:12:0C:4A:C1:4C:A6:C3:17:29:62:FD:A2:E0:C3:A0:BF:D5:42:8D
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F4328584B0FA6C198A24359DDDC754680
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/656bcbde-2636-38d4-8883-c44ad94a6ae6.roa
Signing time:             Tue 02 Sep 2025 13:00:42 +0000
ROA not before:           Tue 02 Sep 2025 13:00:42 +0000
ROA not after:            Mon 01 Dec 2025 14:00:42 +0000
asID:                     8881
IP address blocks:        166.0.44.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:0f:a6:c1:98:a2:43:59:dd:dc:75:46:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Sep  2 13:00:42 2025 GMT
            Not After : Dec  1 14:00:42 2025 GMT
        Subject: CN=64246ded-94e0-4200-820a-dc22c329cae2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:9b:3c:ff:9c:4e:cb:cf:b1:7f:5d:35:df:45:
                    25:58:d1:8a:a7:58:b1:04:f8:96:3e:39:16:b4:28:
                    ad:c0:fc:5e:c2:aa:20:2f:3c:a1:c2:a2:17:35:a3:
                    8d:3f:61:a2:a1:36:c0:69:f7:9b:f8:0d:80:33:2b:
                    3e:5d:25:e4:b0:2e:55:7d:09:73:3d:cf:b2:d2:e2:
                    64:16:b8:1a:2c:50:9f:0c:bc:f3:05:49:f5:d5:fb:
                    8d:83:72:2c:b9:d0:49:0e:ca:46:43:9f:9b:29:b2:
                    08:1d:cf:55:e2:de:bf:be:cd:85:36:b0:3f:a3:b8:
                    25:77:35:9e:ff:8a:19:5a:5f:36:01:5d:d6:23:1a:
                    9d:bc:b0:11:65:f8:16:cb:69:ac:28:8e:1b:8c:f5:
                    2c:63:cb:a0:60:1e:ce:7d:7a:bc:a4:2b:50:c8:9d:
                    d5:84:4b:4b:c5:26:5a:25:9b:66:9a:05:f6:ec:17:
                    25:d8:7d:0c:c4:ce:46:78:32:fe:2f:6e:c2:81:a6:
                    6d:93:a5:41:2f:34:43:30:6f:3b:79:97:f0:51:b2:
                    ba:23:49:30:3d:a7:66:a7:e2:55:be:83:40:2e:4f:
                    3b:35:41:81:6e:7a:37:e1:3b:65:7b:38:93:6d:0b:
                    ff:8d:76:c1:fe:d9:49:08:7e:aa:ac:86:80:26:00:
                    74:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:12:0C:4A:C1:4C:A6:C3:17:29:62:FD:A2:E0:C3:A0:BF:D5:42:8D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/656bcbde-2636-38d4-8883-c44ad94a6ae6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.0.44.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5f:52:63:37:d1:c0:dc:e7:1e:58:6b:5b:9d:e0:c7:7d:91:37:
         8e:32:2e:b7:4e:2e:89:36:a5:db:4a:9f:38:a6:72:75:b8:2b:
         e4:d1:70:5f:08:bc:d4:38:13:08:21:1f:bb:1b:58:bb:36:a3:
         18:a1:d4:e7:ca:65:ba:41:81:88:60:02:2a:0d:87:66:2e:a5:
         4e:01:bd:fa:a1:95:68:3b:c9:fe:65:b6:6f:ba:26:d6:92:11:
         db:89:e7:d6:93:90:c1:ca:e4:68:55:25:41:a3:83:11:7f:aa:
         d1:79:44:57:3c:0b:b1:f3:81:2a:3b:e7:e4:4e:a8:f5:60:93:
         4f:5e:f4:74:78:f6:cc:5f:87:26:17:8f:56:57:15:19:55:2e:
         24:d5:10:76:7f:da:ff:08:99:3e:e6:a9:b8:f7:76:11:79:da:
         b4:60:6b:79:cf:28:18:70:9a:4b:3e:9e:07:01:57:e5:e6:ba:
         ec:ed:fb:72:da:f1:7b:0f:f5:5a:f9:8b:3f:3d:1b:c9:f3:de:
         28:df:a9:6a:24:f4:69:ae:66:c9:fa:d1:59:3c:6b:d1:05:4e:
         58:57:fc:71:fa:cf:be:ea:60:c5:a7:67:49:8e:85:4d:75:d4:
         40:3f:a6:1e:4b:8e:ed:80:2f:a5:b1:e3:fc:dd:94:59:8b:c2:
         62:8c:23:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 23:57:16 2025 by rpki-client