Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/7b725459-a11c-3dfd-940c-542571f90c45.roa
File:                     7b725459-a11c-3dfd-940c-542571f90c45.roa (raw, json)
Hash identifier:          V8pGMygSlIc5oYuIHZIT9VHTKjKSxOFRquKaPyOiO5Q=
Subject key identifier:   BF:AB:A9:30:D1:34:ED:2C:C1:5C:E1:5D:FF:C9:64:4B:36:BA:38:DB
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F4328584B76F27DC8B54ADA7246692B00
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/7b725459-a11c-3dfd-940c-542571f90c45.roa
Signing time:             Thu 09 Oct 2025 13:00:38 +0000
ROA not before:           Thu 09 Oct 2025 13:00:38 +0000
ROA not after:            Wed 07 Jan 2026 14:00:38 +0000
asID:                     401152
IP address blocks:        166.1.247.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 08:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:76:f2:7d:c8:b5:4a:da:72:46:69:2b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Oct  9 13:00:38 2025 GMT
            Not After : Jan  7 14:00:38 2026 GMT
        Subject: CN=84a6953d-5feb-476a-b1da-480bf00c20a4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:76:49:2f:fd:79:0e:92:2d:06:d6:87:14:6f:
                    b7:ad:b6:d4:e1:59:25:69:59:37:ee:a0:ab:b6:06:
                    33:2c:cc:51:81:09:e0:25:60:5f:fe:e5:f2:e1:7f:
                    b0:74:51:b3:df:f7:3b:87:4a:f3:5c:e8:b2:25:07:
                    4e:67:0a:5c:49:71:6d:0b:ae:8f:8c:e2:8b:ce:90:
                    3f:55:38:06:76:8d:fd:92:c9:82:1a:64:5e:fe:62:
                    c0:32:a3:25:d5:0f:dd:b7:ff:fb:74:69:15:bc:c0:
                    35:f5:6e:6d:3c:c1:0c:72:3e:27:b5:f3:8e:6e:8e:
                    57:63:a1:9b:8e:09:dd:0a:6a:44:9c:5f:5e:64:ee:
                    41:70:4a:3f:af:f5:a0:11:b8:45:6c:80:61:03:72:
                    7e:40:d2:e6:ee:c1:b1:c8:8c:52:c6:cc:28:fc:0d:
                    ae:3e:67:f2:53:21:b6:c6:3d:e4:00:cc:1a:8b:2d:
                    77:78:46:a6:d3:a6:da:b7:1c:13:40:ca:10:87:aa:
                    71:d5:a7:90:a6:cc:1b:9a:ce:45:83:77:f2:a8:5b:
                    2b:85:93:7d:e0:f6:e3:2d:6a:78:89:30:10:52:7d:
                    7c:de:62:87:43:fb:a7:5c:24:76:00:db:a3:92:67:
                    8a:50:ed:25:00:fb:90:af:66:5f:e4:a5:81:51:13:
                    85:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:AB:A9:30:D1:34:ED:2C:C1:5C:E1:5D:FF:C9:64:4B:36:BA:38:DB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/7b725459-a11c-3dfd-940c-542571f90c45.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.1.247.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         11:62:c6:71:48:17:d9:cd:e2:fa:bd:35:a7:a4:65:a7:8b:ff:
         1d:08:92:98:d7:ed:7d:53:e4:9f:70:c2:93:27:8f:50:77:5e:
         c3:4f:47:6a:c1:fc:7f:f3:50:30:2e:12:f0:f4:c6:e9:e0:6f:
         75:a2:6a:33:c4:cb:8c:a8:3f:58:1d:9d:d8:5a:7f:2a:0d:f9:
         54:80:b1:80:7b:6e:44:ca:02:fc:54:ee:f4:bb:7b:95:87:3e:
         19:5c:fa:93:b5:eb:92:fb:54:f5:13:3a:73:30:e6:3d:60:a4:
         36:a1:18:05:cd:7b:ac:29:4c:c5:5a:88:05:a6:b2:a2:ee:33:
         70:25:6c:9a:6c:b8:c8:cc:dc:65:4d:2e:34:8f:20:c6:a1:aa:
         99:7a:aa:d2:2b:b0:f5:11:ea:ed:24:5c:ea:0c:65:ef:7a:f6:
         e9:15:0c:e3:4d:53:20:7b:52:a5:f9:3f:49:89:1c:a1:6c:9c:
         81:7f:c4:8c:6e:25:00:41:9e:95:74:d1:a0:a6:9f:85:79:ad:
         d7:1f:bc:8b:ed:17:ff:fd:96:88:de:54:5f:6a:c8:5e:f4:cf:
         ab:fe:12:4a:a8:1e:fc:7c:7f:1e:2c:00:d9:0f:b6:3d:db:08:
         95:b1:2e:65:e0:a1:b9:2c:04:38:12:8d:ef:b3:55:bf:a1:41:
         d6:2e:aa:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 03:42:14 2025 by rpki-client