Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/bd59b2bf-44ea-3d9c-940e-13c0fdab79ac.roa
File:                     bd59b2bf-44ea-3d9c-940e-13c0fdab79ac.roa (raw, json)
Hash identifier:          6RS0gyocOQtGDpaa4vKyKL858z/eSN8PF6scxTt4Vbc=
Subject key identifier:   7D:23:B4:60:84:F5:7B:09:EA:82:5B:02:F8:DF:6F:E7:F6:74:D9:95
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F4328584B679803564F95FA8C28432500
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/bd59b2bf-44ea-3d9c-940e-13c0fdab79ac.roa
Signing time:             Sat 04 Oct 2025 01:00:33 +0000
ROA not before:           Sat 04 Oct 2025 01:00:33 +0000
ROA not after:            Fri 02 Jan 2026 02:00:33 +0000
asID:                     44559
IP address blocks:        166.1.148.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:67:98:03:56:4f:95:fa:8c:28:43:25:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Oct  4 01:00:33 2025 GMT
            Not After : Jan  2 02:00:33 2026 GMT
        Subject: CN=1b809d40-21a8-4b4c-9982-540ab63113e8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:39:54:8f:41:29:b3:43:b2:03:72:f8:c2:fc:
                    bd:a8:d6:10:96:37:46:d6:c3:f5:72:9e:c3:07:c3:
                    b5:8b:ff:b7:cb:99:94:36:b4:fd:3e:80:05:b3:3b:
                    ef:d5:9f:3c:86:a5:80:cb:30:d7:08:d1:63:70:12:
                    07:a0:4d:7d:83:38:da:0d:91:47:fe:6d:2e:3a:e3:
                    42:d2:51:cf:61:68:f9:09:38:2d:70:4b:93:32:35:
                    c0:43:7b:3e:1f:8a:24:80:f9:02:9d:fe:9c:8b:90:
                    9e:37:a7:35:ba:65:b0:9f:03:d3:75:3a:e4:28:e8:
                    fc:19:bd:44:c4:33:14:66:96:40:2e:1c:b7:2f:5b:
                    7d:bf:29:2e:0e:ac:4d:32:0f:f0:cd:d6:1a:5f:2b:
                    5f:1f:78:52:19:e9:55:d3:ec:a1:44:f8:9f:95:c3:
                    05:31:4b:17:14:d3:87:9b:b8:d8:6b:f0:b4:48:71:
                    d2:8f:55:ad:9d:e4:59:46:e4:08:2d:90:79:92:cf:
                    25:31:b8:2e:a1:4e:62:fb:22:66:dd:48:27:69:14:
                    1d:69:b3:6b:36:e4:ae:c7:27:ec:d3:42:af:4d:60:
                    b3:ff:cc:ef:0c:0d:5f:c3:c0:dd:9b:45:fa:43:4d:
                    6d:0a:a7:f4:58:8f:61:6b:8f:1d:70:6a:d3:49:80:
                    eb:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:23:B4:60:84:F5:7B:09:EA:82:5B:02:F8:DF:6F:E7:F6:74:D9:95
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/bd59b2bf-44ea-3d9c-940e-13c0fdab79ac.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.1.148.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a0:d5:22:e2:34:05:8b:47:38:4e:64:12:58:f7:93:d5:59:47:
         29:72:fa:a1:22:2b:2f:f2:5c:90:5b:a8:7a:bb:51:c6:49:d8:
         f3:7a:c9:a9:56:47:0d:6f:9e:f7:33:cf:f2:c4:78:5a:28:6e:
         c8:0e:a0:a3:55:c3:34:e5:8e:0f:65:d1:e6:f6:cc:41:e8:1e:
         53:94:04:ac:1c:39:0d:f7:54:b3:42:57:9a:77:ad:ed:88:94:
         2d:1b:62:f6:1a:b9:59:b5:29:66:29:f9:46:ab:7e:c7:fb:85:
         26:2c:81:75:e3:20:be:7f:77:10:48:e3:f1:78:06:94:43:92:
         55:b6:1f:7b:fc:f9:00:81:97:60:5a:56:a4:23:79:74:fa:c2:
         00:1e:1b:c3:04:31:12:76:b1:f6:dd:fc:77:a1:d0:91:42:27:
         58:bb:d9:8e:75:14:3a:b9:3d:fc:4c:58:f4:40:ad:81:44:e0:
         6a:be:6d:a6:c0:87:3f:58:bb:94:75:b2:ab:69:59:7a:e5:2a:
         7c:29:f6:7d:88:46:d3:20:46:92:87:51:dd:2d:5b:70:c5:f8:
         2c:92:f3:6d:53:32:1c:e7:3a:1b:61:4e:ec:5d:4b:bd:9b:27:
         9f:c4:9c:bf:bb:78:ed:3e:90:cf:d1:e7:81:02:ba:53:7a:8d:
         d3:90:59:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 01:13:47 2025 by rpki-client