Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/70676c8a-3fb7-332e-9c6a-b3585418813a.roa
File:                     70676c8a-3fb7-332e-9c6a-b3585418813a.roa (raw, json)
Hash identifier:          /U9vq/OokXdXO13q4WcCp7K920X0Yz32IRbz6e72mxU=
Subject key identifier:   59:84:D6:6F:6E:A4:D8:2B:3F:9C:CC:11:D9:02:92:40:92:E0:BE:11
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F4328584B52A76A2DE89A87A924485FE0
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/70676c8a-3fb7-332e-9c6a-b3585418813a.roa
Signing time:             Fri 26 Sep 2025 13:00:42 +0000
ROA not before:           Fri 26 Sep 2025 13:00:42 +0000
ROA not after:            Thu 25 Dec 2025 14:00:42 +0000
asID:                     5511
IP address blocks:        166.0.77.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:52:a7:6a:2d:e8:9a:87:a9:24:48:5f:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Sep 26 13:00:42 2025 GMT
            Not After : Dec 25 14:00:42 2025 GMT
        Subject: CN=c16670ef-6da0-476e-8173-cd924079bf5d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:50:42:4b:4d:e7:09:1d:08:ed:5a:c1:33:0f:
                    73:1a:24:ad:68:25:61:cc:1a:6d:25:c4:19:b7:ee:
                    f0:52:a3:d8:37:88:c9:ba:a3:19:23:04:cf:a7:71:
                    00:f3:06:c2:3b:dd:5b:2f:45:9b:11:65:2a:08:0e:
                    ce:68:01:d5:9c:5e:bf:b2:c0:bb:7f:02:e0:f4:66:
                    db:0e:57:35:91:1d:24:c3:bc:5d:16:b7:84:c1:52:
                    84:c5:a0:5c:f8:53:b5:23:be:02:15:2a:47:c4:0d:
                    03:10:45:9f:7e:5e:b4:aa:c7:63:e8:72:b5:0a:d9:
                    2a:7f:36:74:0b:84:b0:58:a8:61:f5:37:70:38:7d:
                    49:4a:b3:47:33:b6:c1:3c:4e:01:12:d5:01:4d:9e:
                    0e:18:2d:fe:48:ce:3f:e6:e5:4e:6f:a0:e9:18:6b:
                    ba:81:ca:3f:3b:04:72:e0:9b:f6:78:54:10:2e:7c:
                    d7:b4:fd:e0:65:c9:33:90:40:36:63:fb:13:d5:6b:
                    91:55:a3:44:b3:47:e9:01:a9:91:1a:f2:9b:a6:36:
                    9b:b3:ff:3d:b7:4e:ff:b3:e6:e3:54:af:aa:3f:c7:
                    86:93:1e:3b:66:07:7e:55:37:62:e0:e1:97:a5:75:
                    be:68:80:3f:f4:60:f2:01:e1:28:9e:5e:f5:6a:6e:
                    70:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:84:D6:6F:6E:A4:D8:2B:3F:9C:CC:11:D9:02:92:40:92:E0:BE:11
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/70676c8a-3fb7-332e-9c6a-b3585418813a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.0.77.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3b:45:50:1e:10:b7:a9:1a:39:e4:7c:78:71:bb:ae:0f:de:63:
         4d:a9:54:d5:4b:19:41:19:7c:cd:ed:63:95:38:c4:4a:e1:51:
         b5:4a:aa:0b:bc:2c:15:38:8a:61:c4:98:06:7e:ae:b4:d8:11:
         fb:f9:f2:33:01:48:86:c0:f6:cc:bd:98:bd:4b:d5:c7:7a:5c:
         f2:f0:a5:ae:55:fd:e1:8a:36:56:ce:58:6a:a5:b5:49:d4:88:
         27:08:83:93:25:91:41:a7:f1:e8:9e:11:f7:70:1c:58:a4:a0:
         b7:ca:8a:9c:2a:b2:d7:6d:9b:72:33:35:22:4e:e8:3c:74:1e:
         b3:df:fa:1a:99:36:22:7d:3b:1b:f8:73:55:d6:98:d6:85:4c:
         7a:64:58:6c:10:99:b7:dd:a6:80:55:79:17:82:da:05:b6:b9:
         d3:ca:0b:1e:d5:c3:f7:e2:6f:50:15:79:15:23:8a:29:66:37:
         ee:8f:2e:0f:cc:ce:d6:13:b6:d5:0f:d2:41:4a:0f:59:a5:d1:
         6a:12:cb:83:da:54:97:90:3b:ee:63:eb:79:21:47:1f:c1:3a:
         89:5c:3a:fe:c8:4d:b7:1e:27:a8:c8:05:fb:20:9e:6d:0b:bb:
         ab:ca:b2:c5:f7:14:20:8e:7d:3e:b7:b9:ca:f4:53:d2:a8:8a:
         ec:28:92:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:16:09 2025 by rpki-client