Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/bcaf1305-1e0f-38f7-a7c4-45b7820f4f19.roa
File:                     bcaf1305-1e0f-38f7-a7c4-45b7820f4f19.roa (raw, json)
Hash identifier:          kRaafr/bC0l2bQ49x6Ru29T9VAj7z0Yd7E+uX5R23ZI=
Subject key identifier:   1E:81:8F:D2:89:EA:63:33:83:44:8B:D2:51:E8:92:61:50:C6:17:56
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F4328584B7DECA4C0C58B97A5CCB785C0
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/bcaf1305-1e0f-38f7-a7c4-45b7820f4f19.roa
Signing time:             Sun 12 Oct 2025 01:00:30 +0000
ROA not before:           Sun 12 Oct 2025 01:00:30 +0000
ROA not after:            Sat 10 Jan 2026 02:00:30 +0000
asID:                     211440
IP address blocks:        108.165.66.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:7d:ec:a4:c0:c5:8b:97:a5:cc:b7:85:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Oct 12 01:00:30 2025 GMT
            Not After : Jan 10 02:00:30 2026 GMT
        Subject: CN=eb26c5ee-d3cf-4603-85c3-9526035d6a64
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:d7:8f:6c:40:6f:84:43:90:24:c4:9a:4a:1a:
                    99:55:65:ed:41:ab:f9:25:02:8d:84:71:91:05:d2:
                    69:79:49:9d:f9:8a:77:a3:e0:12:f2:d4:52:76:15:
                    40:b4:1a:7b:24:4c:46:6e:bb:b2:7a:ea:0e:27:d2:
                    ab:89:61:33:6d:40:ae:8a:5b:90:fe:93:10:e5:30:
                    54:ea:10:69:0e:3e:94:6f:26:64:22:59:1a:f8:fa:
                    79:cf:f3:f5:dd:bf:ce:e6:c8:80:a0:a2:62:a2:7b:
                    61:d1:de:dc:a6:6e:b9:4d:3e:17:8c:6b:f6:b2:84:
                    cb:60:9d:22:12:23:b5:3c:4a:5f:6c:07:ad:1e:51:
                    64:2b:2e:25:64:25:87:29:80:55:eb:12:af:bc:5b:
                    0e:5a:c0:6c:26:00:3c:41:80:68:c0:84:0a:b6:7a:
                    73:84:78:84:f8:30:98:42:95:32:bf:96:03:40:4f:
                    b7:54:b5:09:64:5e:cc:30:6a:c0:d8:3f:d8:c9:bb:
                    45:7f:f8:cf:64:fb:4e:cc:53:7b:aa:ea:7e:56:13:
                    a5:cc:3c:01:1f:0e:07:af:28:85:43:92:77:22:9d:
                    65:7d:db:66:db:e3:f8:93:06:6d:28:80:c0:7f:85:
                    7f:6a:3a:e4:e1:d2:91:5b:b7:f9:22:fe:46:f8:5d:
                    99:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:81:8F:D2:89:EA:63:33:83:44:8B:D2:51:E8:92:61:50:C6:17:56
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/bcaf1305-1e0f-38f7-a7c4-45b7820f4f19.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.165.66.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         09:b5:c2:a6:73:c0:9b:75:bf:42:37:48:97:b3:82:f6:1b:d9:
         25:af:90:fc:90:fe:79:81:d2:f9:92:b8:31:c3:ad:03:76:53:
         fc:25:93:aa:df:2c:c7:80:0f:6c:ee:6c:25:c3:0e:5f:9c:af:
         45:08:19:d4:35:66:02:23:7d:8a:48:81:1b:51:4b:2d:16:20:
         7a:3c:ff:e2:37:76:37:76:33:d7:7e:66:9b:9d:79:50:7b:6a:
         6a:08:27:3c:20:44:dd:6e:77:eb:03:de:61:02:4d:0b:2f:b8:
         fb:de:c7:bd:1b:36:ec:4e:50:e5:5e:6c:5f:df:59:ec:fc:8a:
         47:fd:21:23:07:a8:61:a6:d3:e2:3f:60:65:85:56:f0:6e:4f:
         10:7f:ec:3d:c9:ce:fe:8d:6f:07:8c:1f:96:28:37:46:5a:db:
         0f:a0:94:28:10:a6:58:8c:ab:46:cf:8f:8f:4e:85:c9:bd:8b:
         70:54:e1:eb:e7:81:c3:c0:7f:ed:65:dc:70:39:1a:47:73:15:
         fd:47:e3:50:45:fb:bd:df:5b:ef:e3:6a:06:d4:5e:e3:d0:54:
         b8:f4:61:7d:63:e6:ce:c9:d7:95:31:38:89:28:fd:65:27:a1:
         95:36:46:0a:d0:df:f2:40:4f:00:e5:e9:53:5d:7a:25:43:19:
         fa:94:30:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 23:24:02 2025 by rpki-client