Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/b5697b12-2940-38e3-96b1-04483061b883.roa
File:                     b5697b12-2940-38e3-96b1-04483061b883.roa (raw, json)
Hash identifier:          HoEghNz0jw9SJ3mgDUDRM9yt2uSU981pLRfGZCaOnzo=
Subject key identifier:   BA:07:28:29:11:DF:72:69:1C:C2:42:7B:7C:46:48:F7:10:F9:DE:64
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F4328584B91777013B707ACFE2C854B80
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/b5697b12-2940-38e3-96b1-04483061b883.roa
Signing time:             Sun 19 Oct 2025 01:00:30 +0000
ROA not before:           Sun 19 Oct 2025 01:00:30 +0000
ROA not after:            Sat 17 Jan 2026 02:00:30 +0000
asID:                     62240
IP address blocks:        166.1.132.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:91:77:70:13:b7:07:ac:fe:2c:85:4b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Oct 19 01:00:30 2025 GMT
            Not After : Jan 17 02:00:30 2026 GMT
        Subject: CN=194e6214-f12a-45e5-892b-6accac326b28
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:f4:91:1b:61:40:5b:ec:2e:ec:85:cc:3d:1b:
                    85:ef:84:93:5e:ca:61:9c:f2:8a:3a:56:02:95:bb:
                    f5:3e:53:f2:eb:bb:28:8c:3a:9e:a1:62:2a:dd:97:
                    dd:fc:e8:59:c7:34:f2:fe:43:a5:5d:03:33:e8:a2:
                    0d:08:be:18:4f:fb:a3:aa:1b:c9:bf:59:83:16:ad:
                    df:59:6d:8b:02:8a:23:16:78:66:9c:78:ac:bb:88:
                    9b:a2:70:9a:2b:ac:cf:bb:86:73:94:ac:34:8c:8e:
                    65:01:68:84:06:0a:91:03:3e:81:ee:28:9e:a6:78:
                    aa:93:8b:47:e5:ac:f6:01:93:ae:8f:6f:73:56:ec:
                    0d:55:ef:79:a7:ad:de:42:1d:35:6e:0f:d9:36:39:
                    35:37:0e:08:01:15:17:3d:58:0c:c2:81:2e:9d:9d:
                    eb:54:70:c5:c7:a0:0b:de:3a:64:68:b5:00:38:e7:
                    8b:c5:34:39:08:5d:d6:6e:0c:ab:2d:25:f3:57:5d:
                    11:aa:ac:8a:59:61:62:29:8c:b1:4b:0b:f0:46:df:
                    bc:7c:89:52:b6:e9:6c:84:e0:d6:f4:4b:75:de:2d:
                    2f:15:92:6a:a0:3d:c6:cf:b8:15:08:03:14:da:f9:
                    b0:ab:5f:df:0f:ba:38:a6:6e:b5:05:d8:66:5e:95:
                    bf:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:07:28:29:11:DF:72:69:1C:C2:42:7B:7C:46:48:F7:10:F9:DE:64
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/b5697b12-2940-38e3-96b1-04483061b883.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.1.132.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         71:e2:d9:68:97:74:3d:8a:bb:7d:d5:18:9f:91:95:d0:59:45:
         ca:90:73:12:93:27:df:55:0c:85:cd:74:97:61:2b:7f:67:c8:
         4f:ab:20:ca:07:d1:b5:8f:e2:a7:de:ce:99:e2:6b:4e:86:91:
         54:ff:f8:42:2f:d6:9a:9d:96:f7:37:8f:54:5e:c0:3c:a9:1d:
         96:28:d1:07:59:0b:4e:2f:5c:ef:fe:96:a0:e9:76:33:46:1a:
         6b:f6:db:eb:5e:e2:4a:d9:28:dd:ef:a7:5f:6b:da:ae:69:4c:
         b1:ec:77:a4:7d:fe:a6:02:de:e6:f1:e9:2a:60:b8:47:95:b9:
         af:48:ed:db:0e:8f:12:89:01:69:4a:90:3f:ea:5d:3f:6c:b2:
         28:bd:37:9c:d8:2e:9f:5a:a3:45:7a:0e:f1:dc:98:dd:5a:b2:
         7d:59:cd:d6:55:16:fb:95:65:59:59:df:a4:ba:e0:5c:32:86:
         75:86:95:23:1e:a8:b0:85:a5:92:fa:28:eb:ca:8b:3a:fc:8b:
         91:31:90:78:8a:33:ac:51:10:55:7a:3e:7c:e0:e3:1b:b9:14:
         bb:56:64:3b:d3:02:18:34:03:e3:44:a5:c5:1d:60:4f:da:5f:
         46:3e:0e:42:c3:54:88:8b:48:be:1e:2e:0f:57:84:ae:6f:ef:
         a7:70:c0:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:18:18 2025 by rpki-client