Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/9c3d11c0-0670-3c72-a69d-a24294f9fdb6.roa
File:                     9c3d11c0-0670-3c72-a69d-a24294f9fdb6.roa (raw, json)
Hash identifier:          Sdv3U/QYcbY18qYceNOKi/+B0il4Q0tR6sA+48Pd6js=
Subject key identifier:   B2:F1:DC:EA:2D:18:D9:09:73:6A:90:1B:C4:A2:92:47:72:A1:5B:BE
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F4328584ADD669A64DEFD99318993CF60
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/9c3d11c0-0670-3c72-a69d-a24294f9fdb6.roa
Signing time:             Fri 15 Aug 2025 13:00:41 +0000
ROA not before:           Fri 15 Aug 2025 13:00:41 +0000
ROA not after:            Thu 13 Nov 2025 14:00:41 +0000
asID:                     7979
IP address blocks:        166.0.71.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:dd:66:9a:64:de:fd:99:31:89:93:cf:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Aug 15 13:00:41 2025 GMT
            Not After : Nov 13 14:00:41 2025 GMT
        Subject: CN=9e6c4ba8-995a-4357-b2e8-6c668301939f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:bf:3c:e0:a0:1f:6a:49:a3:ce:02:67:11:4f:
                    16:1b:3a:de:83:02:85:1f:a3:e2:a3:fa:b2:13:48:
                    2a:3f:07:3e:24:c6:5c:cf:05:30:c2:c0:9d:16:7d:
                    81:31:3a:05:ef:1a:30:c4:56:4c:67:33:86:57:c2:
                    ad:e2:80:00:1d:a2:1e:d1:10:45:34:48:f1:6b:b5:
                    07:5e:52:76:9c:d1:32:ea:69:6b:0e:15:23:dd:74:
                    79:6d:8e:81:45:5b:86:b7:37:a6:bc:59:6c:c2:be:
                    9c:37:3f:2c:2d:8a:7e:29:bf:dd:18:19:af:cb:c8:
                    c0:3b:da:07:43:4a:2c:da:bb:39:35:0c:cc:23:12:
                    3d:7a:e0:d9:90:54:58:4e:58:8a:99:45:e5:d1:09:
                    d9:8d:25:7f:02:2d:9a:ec:69:53:2a:88:af:cd:d4:
                    88:7c:2c:89:9c:d3:ef:f6:5d:4c:59:01:f8:29:bc:
                    41:90:c0:1b:c3:d6:5d:60:b4:ab:b4:41:82:8e:73:
                    69:d4:aa:e4:da:70:63:75:20:90:e2:88:aa:a7:53:
                    5f:3a:83:df:bb:a4:44:1b:e3:34:4a:87:40:0e:20:
                    45:e2:cc:ae:06:ea:d5:92:14:ad:cc:20:d6:62:ee:
                    82:b5:75:b1:8e:0e:97:97:13:ce:cc:44:be:b6:75:
                    cd:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:F1:DC:EA:2D:18:D9:09:73:6A:90:1B:C4:A2:92:47:72:A1:5B:BE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/9c3d11c0-0670-3c72-a69d-a24294f9fdb6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.0.71.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         06:97:bf:4b:a9:07:a5:84:b6:a5:7c:ea:35:cf:46:f0:3c:a6:
         0b:60:30:60:b6:f7:3a:e9:04:b0:ba:4b:10:94:6c:29:7c:ce:
         46:5d:31:bf:60:62:e5:84:43:7b:1e:77:a4:0d:99:c8:75:18:
         12:3c:80:41:55:66:6a:22:b7:12:06:02:97:90:86:e3:5b:6b:
         d5:0d:b9:ab:9b:15:50:7b:b5:68:e0:e2:82:5f:45:de:4f:d0:
         71:55:14:d4:04:c2:5d:fe:d0:7a:3a:ec:0a:34:cb:8a:8f:b0:
         fb:81:23:4c:ce:ae:a5:e0:0a:83:47:22:c6:ab:95:19:1f:63:
         79:f9:42:fc:7c:af:2f:73:5d:4a:69:78:11:53:e8:4d:47:ce:
         ab:ec:8b:51:66:96:f6:57:07:19:77:af:9d:e4:09:37:90:91:
         de:7d:26:b5:c5:50:5c:86:62:f0:3b:3f:61:84:af:be:57:ac:
         7f:56:5b:56:49:30:c8:df:f1:03:24:8b:c9:d3:61:17:c3:4f:
         71:3c:ee:75:99:b9:53:6e:90:32:b6:12:45:b1:76:8b:5b:6b:
         f5:85:f5:cb:78:a9:77:b9:1f:d0:1b:6f:be:d2:14:6c:aa:ee:
         1d:8b:9f:d1:b5:d0:cd:dc:ac:e1:e2:7f:43:4f:e8:c6:f1:72:
         90:46:54:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 13:07:25 2025 by rpki-client