Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/925b5922-3a29-318f-af33-4db7832a14f5.roa
File:                     925b5922-3a29-318f-af33-4db7832a14f5.roa (raw, json)
Hash identifier:          quQIg3E7PfUEn3nfnfKz8tRLZ94mZtdUBJ1KiYgYu+g=
Subject key identifier:   F8:42:93:25:6C:3B:05:69:56:B7:75:9A:5B:3C:C5:28:60:D5:52:29
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F4328584B7DECD16BDC9C46A7A1450B80
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/925b5922-3a29-318f-af33-4db7832a14f5.roa
Signing time:             Sun 12 Oct 2025 01:00:30 +0000
ROA not before:           Sun 12 Oct 2025 01:00:30 +0000
ROA not after:            Sat 10 Jan 2026 02:00:30 +0000
asID:                     7385
IP address blocks:        166.0.70.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:7d:ec:d1:6b:dc:9c:46:a7:a1:45:0b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Oct 12 01:00:30 2025 GMT
            Not After : Jan 10 02:00:30 2026 GMT
        Subject: CN=6fc63c47-16f1-4e45-8880-0eb20bf0402d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:a7:b5:01:60:ef:86:24:10:0b:a3:a5:d6:e7:
                    7a:71:6d:71:45:95:63:2e:d1:c2:39:fc:78:c9:2c:
                    cf:92:6b:0c:89:cc:d1:b2:ec:08:7d:7c:31:19:1f:
                    8d:c5:4e:01:80:ae:93:8c:02:7e:82:d4:87:59:76:
                    bd:69:20:0b:89:bc:8f:1e:12:bb:1d:c8:bb:6e:74:
                    a0:3f:66:2a:d2:8e:44:d5:c9:63:fe:21:9d:b3:d3:
                    1b:08:b1:d2:46:ce:43:18:af:32:af:f1:88:22:96:
                    bb:08:4d:55:28:e9:2e:d3:e0:fc:c3:a5:08:d1:31:
                    69:20:66:0c:7f:3a:e7:23:fc:b1:1a:f6:b8:3b:2e:
                    8c:23:8b:68:81:e4:45:f9:30:40:2e:4a:c0:ad:14:
                    f0:69:b7:fb:dc:83:39:ca:fb:16:98:60:55:ed:f6:
                    57:e3:92:f4:a4:a9:a0:c2:93:ef:50:d0:ea:77:6b:
                    9a:94:e1:7a:0c:9c:3e:30:90:f3:84:56:39:a6:57:
                    51:58:fa:8f:08:7a:d7:48:c4:7f:a3:59:d9:7b:51:
                    d9:2b:bf:bb:66:94:1d:82:4c:14:bf:b1:3d:fe:10:
                    5b:fe:67:69:a4:71:18:50:23:31:0a:c3:bf:39:60:
                    cd:47:6e:ed:ad:ae:85:d6:fd:9c:fb:f2:1a:64:3b:
                    ba:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:42:93:25:6C:3B:05:69:56:B7:75:9A:5B:3C:C5:28:60:D5:52:29
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/925b5922-3a29-318f-af33-4db7832a14f5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.0.70.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         81:88:76:83:81:65:ce:7c:f6:18:dd:97:8a:0c:79:d4:2b:cf:
         d4:03:24:a3:c6:c0:f5:e9:b0:ca:88:2d:8d:d4:69:2b:1f:59:
         b4:f3:25:07:c7:cf:8e:e6:62:f4:25:3f:c7:c9:b9:3a:f4:f7:
         d8:2f:31:e9:9e:9f:e7:d2:64:d4:8d:2c:54:7f:c6:ea:c4:05:
         01:a0:9d:04:df:b5:53:60:b5:30:95:64:c0:58:08:3e:3f:6d:
         60:a5:8d:77:f9:40:61:44:9a:93:20:df:a5:7c:4c:54:f2:4a:
         e0:97:e7:88:2a:86:c5:0f:9f:23:59:07:7f:59:6f:79:e4:43:
         55:cc:4b:34:fe:43:64:49:f9:fe:21:6c:ec:fb:0d:38:b3:b0:
         d6:73:fc:b1:b7:53:23:44:5e:c1:32:4d:db:8a:bd:76:52:c9:
         4b:e7:71:b3:1b:a9:c5:17:de:82:e3:2f:b4:3f:2f:4b:ef:00:
         47:01:f2:a9:cf:b9:9b:3e:40:3c:2b:39:c6:5d:5d:3f:1a:e2:
         23:45:d8:d4:a2:06:8d:7b:f9:ea:ee:cb:f1:14:88:71:19:05:
         ad:81:eb:44:0e:fc:5b:21:fb:44:5d:ea:3a:6a:bf:ea:bc:b5:
         51:51:81:b1:e6:b9:32:ba:73:12:8a:e9:d8:b6:4c:54:be:42:
         2f:a7:18:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:17:56 2025 by rpki-client