Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/83d44fb3-310b-32e9-ab0e-83348af29824.roa
File:                     83d44fb3-310b-32e9-ab0e-83348af29824.roa (raw, json)
Hash identifier:          HZ4RAoAQyGKFrIx2/Uw4P3lBARGQF4Shnp6XWHwSIO8=
Subject key identifier:   B1:70:E3:50:1F:39:68:91:5C:45:1F:5E:AD:27:51:D9:C2:68:D3:BD
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F4328584B7DECC10BC676D510C65ACF60
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/83d44fb3-310b-32e9-ab0e-83348af29824.roa
Signing time:             Sun 12 Oct 2025 01:00:30 +0000
ROA not before:           Sun 12 Oct 2025 01:00:30 +0000
ROA not after:            Sat 10 Jan 2026 02:00:30 +0000
asID:                     7224
IP address blocks:        166.0.174.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:7d:ec:c1:0b:c6:76:d5:10:c6:5a:cf:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Oct 12 01:00:30 2025 GMT
            Not After : Jan 10 02:00:30 2026 GMT
        Subject: CN=8a132bdd-c935-40a0-a549-83b1aae71b45
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:7e:79:7b:92:3b:6d:50:4a:6b:8f:ab:fd:13:
                    73:cc:7d:db:1f:4f:df:a5:19:c8:ab:f4:3f:aa:1f:
                    65:67:d1:e2:c6:96:34:a6:c7:c1:de:22:9c:30:aa:
                    47:dc:2f:bb:e6:04:75:ea:20:aa:57:fe:bc:88:e2:
                    a7:79:40:7c:7a:aa:d9:5b:20:e0:bc:bd:26:6b:69:
                    e2:94:ef:df:bf:41:21:21:ac:c3:9d:65:3e:09:ff:
                    23:c3:58:30:6a:ae:37:e0:94:a7:aa:59:86:e2:2e:
                    49:07:5f:5c:96:29:2d:e3:09:13:77:c4:a2:37:c6:
                    4a:7a:7c:bd:8a:8e:53:00:b6:b6:10:46:90:c2:d7:
                    de:cc:af:ff:0c:fb:30:8f:f6:6a:a5:98:36:04:7e:
                    f6:37:34:21:35:c4:ee:9d:d9:54:53:08:63:b8:ed:
                    02:c5:8a:ca:cf:88:b4:0f:7b:32:5e:d0:6f:8c:99:
                    ff:53:9e:3f:06:b9:da:81:2f:29:55:28:97:88:88:
                    d4:04:f9:c7:61:01:98:f4:3b:3e:f1:00:b2:f2:19:
                    0c:19:f0:ab:bf:88:a3:3c:d5:1d:01:ac:a7:1e:de:
                    83:12:23:64:13:1e:9c:67:5a:8e:f2:b2:4d:34:5f:
                    68:79:49:6a:be:7a:1e:85:7a:28:16:04:d7:b0:7f:
                    24:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:70:E3:50:1F:39:68:91:5C:45:1F:5E:AD:27:51:D9:C2:68:D3:BD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/83d44fb3-310b-32e9-ab0e-83348af29824.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.0.174.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         68:ff:c1:0b:4a:d4:04:d4:11:7e:aa:9d:f7:a7:7e:e3:05:e7:
         af:dc:76:b0:d0:7e:01:ba:9f:e0:65:53:3a:16:92:59:de:86:
         22:16:ec:2d:5a:97:40:55:c7:82:0e:3e:f6:78:57:22:9b:f9:
         f5:d1:a2:89:23:6f:d3:d7:45:e6:d9:05:e4:13:f0:c6:6a:88:
         e2:cf:3b:5d:7a:84:39:97:df:fb:e9:da:42:67:d0:25:9d:3b:
         ed:6c:30:d4:f9:bf:9f:14:fa:40:4f:20:74:81:61:a6:1f:0b:
         59:d5:09:f7:86:b8:cd:a1:90:c5:99:23:50:ef:28:0c:71:f3:
         98:74:c4:46:e6:8b:7c:68:6d:ab:a2:a2:88:69:83:48:7f:0a:
         e8:3f:bc:20:e8:e2:8a:a8:58:04:f7:00:ed:f3:d2:10:06:5d:
         51:52:8f:b4:37:bc:62:dc:03:e4:b8:84:da:27:88:bc:18:a5:
         86:dc:8a:23:0c:a6:57:e3:b3:a1:09:4e:49:f6:d0:dd:1b:f7:
         f4:33:cb:2f:08:7c:fc:2b:12:58:b8:87:1a:cb:11:17:8a:06:
         31:30:e8:16:2b:83:04:62:b6:2f:24:ce:e7:f3:8c:df:8d:d2:
         42:d4:fc:04:49:64:e3:85:3f:d9:44:80:38:64:df:9a:d2:e6:
         73:0e:c0:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:19:26 2025 by rpki-client