Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/9cbd6446-87bb-3cf9-be6c-39aa409839f3.roa
File:                     9cbd6446-87bb-3cf9-be6c-39aa409839f3.roa (raw, json)
Hash identifier:          MGXFYWgd2664jXv/6lA3gRN/oNrka5eZ07bq2K+A3RI=
Subject key identifier:   FB:59:E2:34:68:E7:68:D4:62:EE:34:71:AD:51:FA:F1:96:EB:3E:5F
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F4328584ADD669A30D1333DEBD70A587C
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/9cbd6446-87bb-3cf9-be6c-39aa409839f3.roa
Signing time:             Fri 15 Aug 2025 13:00:41 +0000
ROA not before:           Fri 15 Aug 2025 13:00:41 +0000
ROA not after:            Thu 13 Nov 2025 14:00:41 +0000
asID:                     7979
IP address blocks:        166.0.4.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:dd:66:9a:30:d1:33:3d:eb:d7:0a:58:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Aug 15 13:00:41 2025 GMT
            Not After : Nov 13 14:00:41 2025 GMT
        Subject: CN=70c61823-5469-4a21-a454-8d0ecbb6a199
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:99:38:77:e2:46:26:df:b3:a8:7d:51:8f:7f:
                    e2:a0:ed:cc:ed:69:a1:ab:3e:4b:1b:99:f9:9c:65:
                    b3:b5:58:55:7e:65:30:83:32:4d:f4:fb:fe:05:b1:
                    ad:92:28:e8:bc:ed:2f:6d:eb:0f:a6:e7:c4:6b:53:
                    ad:bf:a7:b1:ad:d0:c8:fc:3d:32:ce:92:6e:82:12:
                    9e:b2:89:e9:5e:da:9c:0d:d8:6d:93:20:8b:ae:90:
                    d6:2a:65:73:ed:da:33:a1:19:96:c9:52:1c:50:aa:
                    07:a0:aa:0c:76:ce:b3:9d:ec:84:89:3d:99:eb:5d:
                    bf:5f:50:46:c5:1f:c6:34:06:c3:05:88:10:c8:6c:
                    ea:85:a8:3b:7b:45:c1:33:57:8f:b6:eb:77:35:ef:
                    de:d9:78:02:8f:85:dd:43:5a:b0:da:3a:cd:94:7b:
                    34:0f:3e:93:79:93:a3:76:01:e1:25:5f:b5:f2:e6:
                    dd:f5:01:3c:2c:64:8d:7a:5b:18:7f:59:d8:85:b9:
                    c9:5c:8b:f2:cb:cd:50:d7:31:16:80:94:cb:aa:de:
                    a1:fb:ac:77:72:55:23:10:9a:b7:e4:39:5a:89:6d:
                    9d:98:f8:fa:4b:db:0a:e9:3b:13:67:b6:fe:0a:0e:
                    92:55:7e:42:1f:1a:ee:83:4f:94:bc:cc:4d:3b:59:
                    e9:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:59:E2:34:68:E7:68:D4:62:EE:34:71:AD:51:FA:F1:96:EB:3E:5F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/9cbd6446-87bb-3cf9-be6c-39aa409839f3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.0.4.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         40:22:0a:ee:36:a8:67:f4:dc:1e:6b:53:1d:5f:b6:b3:96:e7:
         3f:71:27:a2:c8:de:0f:56:82:9e:5b:bf:88:7f:9e:38:fd:e3:
         1b:8c:cd:ee:ac:25:85:bc:25:fa:4a:00:f5:88:a4:5e:ac:8f:
         98:6f:0d:45:7b:dc:1c:71:65:59:7c:b3:72:c5:e0:10:bb:4b:
         03:e8:f1:32:68:9f:e0:e3:00:dc:45:37:da:ec:e0:06:40:04:
         e5:80:c2:9a:b9:17:41:f4:f3:6d:90:02:56:07:96:98:c3:98:
         9e:88:ee:87:25:87:64:76:5c:ea:73:f2:21:cd:8d:ee:ee:97:
         ec:7b:ac:73:7d:f3:22:56:35:e3:15:31:64:e9:7c:f0:65:92:
         57:be:8b:35:82:f2:2b:32:1a:2c:80:25:7e:74:3f:68:49:b6:
         f8:6d:10:ff:43:d9:32:4f:26:05:e4:22:51:bb:e6:93:96:8f:
         bb:49:ec:c2:8c:df:e3:63:71:02:01:97:fa:a1:97:08:04:4e:
         63:7e:b6:f7:78:55:69:80:5d:a5:40:67:c8:a1:76:2f:f6:23:
         d0:ce:f1:80:80:0f:32:34:c4:64:33:eb:7d:88:47:a7:46:70:
         4a:a1:55:00:16:bf:06:ac:ca:99:1f:cf:4a:be:f8:b5:49:41:
         3e:c0:7d:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:18:01 2025 by rpki-client