Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/ba1cd46f-7a0c-3847-8d33-d42821a7c2ed.roa
File:                     ba1cd46f-7a0c-3847-8d33-d42821a7c2ed.roa (raw, json)
Hash identifier:          dEMcfQODWjuWOAEUzg9lwB4pHukV3p8yA06qPw5yUfs=
Subject key identifier:   D7:B2:06:D6:2B:E5:30:F4:8E:B4:10:46:2F:2E:9D:2A:3F:B9:EF:BA
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F4328584B0FA6C13EA2B236703FE9B800
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/ba1cd46f-7a0c-3847-8d33-d42821a7c2ed.roa
Signing time:             Tue 02 Sep 2025 13:00:42 +0000
ROA not before:           Tue 02 Sep 2025 13:00:42 +0000
ROA not after:            Mon 01 Dec 2025 14:00:42 +0000
asID:                     8881
IP address blocks:        166.0.59.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:0f:a6:c1:3e:a2:b2:36:70:3f:e9:b8:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Sep  2 13:00:42 2025 GMT
            Not After : Dec  1 14:00:42 2025 GMT
        Subject: CN=a469ecfa-4fd3-4314-a012-101a545b291a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:df:da:90:54:d4:3f:6f:89:f7:95:71:1b:9e:
                    0e:99:77:0d:9d:63:0f:46:14:f9:12:ac:ab:44:41:
                    41:52:e8:c1:09:67:2a:51:6b:c9:86:17:f3:8b:b4:
                    ba:f4:6f:94:9b:b5:79:7d:c1:c5:19:be:82:79:63:
                    5a:72:47:39:8e:76:7c:a7:9d:72:4d:ae:00:0f:b4:
                    28:7e:ba:92:74:7e:6c:c1:29:46:74:e7:15:29:8d:
                    37:f6:90:d8:11:43:ca:b1:6b:df:4d:be:83:1d:41:
                    35:e6:77:aa:6a:d2:da:d2:a1:84:c9:43:ad:58:6c:
                    ae:2a:ab:e5:d6:c4:2d:e2:a6:0d:0c:5c:88:e0:49:
                    17:9f:87:1c:bb:8f:2d:0a:c7:31:9e:6b:53:ee:45:
                    e9:cc:ba:47:d4:fe:06:d2:b1:f1:46:d2:9f:8d:ea:
                    57:77:34:c8:36:aa:ca:c9:7f:2d:19:52:9a:64:1c:
                    c0:e4:94:df:98:8b:67:6c:f1:9f:fa:83:3c:27:0f:
                    b1:c1:8a:65:22:31:8d:db:3e:0b:73:c3:ba:bb:84:
                    25:71:1f:e3:6b:71:b8:c1:94:05:83:dd:ae:22:c1:
                    95:00:9a:4e:b4:aa:8e:2d:15:20:01:48:d8:14:44:
                    73:89:78:b2:64:c1:e4:b6:4b:5c:65:db:ef:f7:13:
                    04:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:B2:06:D6:2B:E5:30:F4:8E:B4:10:46:2F:2E:9D:2A:3F:B9:EF:BA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/ba1cd46f-7a0c-3847-8d33-d42821a7c2ed.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.0.59.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         92:84:69:83:25:b2:00:bb:8c:a0:82:49:8c:c1:f2:bb:6f:7f:
         c7:06:20:57:53:9a:ff:d2:46:bf:21:e3:e9:49:44:31:e3:aa:
         45:fc:91:e0:4f:55:20:01:36:cb:c6:1d:56:13:66:58:9b:9e:
         47:71:a6:6a:75:62:e3:f9:a4:a7:7a:47:89:be:9e:ba:0c:d8:
         a9:75:a4:0b:71:9b:b0:64:7e:25:1d:f7:4a:02:83:be:db:96:
         10:5b:22:77:fa:2e:79:81:34:e9:9e:10:21:bf:91:23:b3:db:
         c4:82:0a:4e:2d:26:2b:0a:f6:61:1b:09:17:e4:8a:a3:eb:8e:
         f7:ac:92:d8:06:cf:83:a3:05:f6:46:b5:e0:57:83:6d:64:60:
         16:c6:d1:92:4a:0e:22:45:17:79:01:cc:a7:66:ea:50:47:ec:
         5e:b5:4d:2e:e9:b0:c5:ed:09:1b:f3:be:5b:9f:ff:2a:ec:ce:
         e6:10:73:3d:1d:65:df:09:73:a1:0a:e2:f4:ee:63:48:dd:cb:
         93:e4:85:46:30:f3:9d:c1:b5:3a:da:f9:76:b0:47:0c:70:ca:
         9d:b0:37:bb:9e:f8:6a:74:3c:03:19:b1:b1:c4:0e:2e:d7:cd:
         0c:7c:4f:ac:04:ed:ad:bf:70:3b:a5:3b:e7:f5:a4:ff:6a:81:
         b8:5e:cc:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 01:14:23 2025 by rpki-client