Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/c0a7e8a4-eaa5-3136-a7dc-4fa9e85fb38f.roa
File:                     c0a7e8a4-eaa5-3136-a7dc-4fa9e85fb38f.roa (raw, json)
Hash identifier:          TUzdjFPYhVCPPHV5jSyrxFPdoyAFkrAiuz5Q+EKUdQc=
Subject key identifier:   D4:24:77:CC:AC:8C:1D:EF:6B:46:20:29:A2:A1:DB:50:91:DB:B2:B6
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F4328584B21CC26D20346A3E12AD93600
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/c0a7e8a4-eaa5-3136-a7dc-4fa9e85fb38f.roa
Signing time:             Tue 09 Sep 2025 01:00:33 +0000
ROA not before:           Tue 09 Sep 2025 01:00:33 +0000
ROA not after:            Mon 08 Dec 2025 02:00:33 +0000
asID:                     61112
IP address blocks:        166.0.198.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:21:cc:26:d2:03:46:a3:e1:2a:d9:36:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Sep  9 01:00:33 2025 GMT
            Not After : Dec  8 02:00:33 2025 GMT
        Subject: CN=5b23df5f-de94-446c-8353-503d85c7a4f8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:c0:08:09:50:95:eb:d0:7d:60:18:c3:37:24:
                    bf:3e:f2:e3:b3:44:e4:bd:4e:55:10:41:85:29:10:
                    b7:43:3a:9c:1c:81:5f:a5:7b:ef:8d:7c:f6:e5:49:
                    da:f3:85:40:4a:3a:e6:88:f9:eb:34:87:fe:db:cd:
                    c8:3f:fb:24:75:35:4f:6a:34:36:31:3e:58:dd:70:
                    73:35:2a:83:87:ad:8d:ee:27:42:db:46:de:67:0a:
                    58:1f:bf:48:e0:83:03:f0:77:ed:e0:63:91:da:95:
                    11:4f:fd:d4:e0:83:b0:70:af:de:c8:7c:9a:c9:7b:
                    2c:da:fb:0e:5a:0b:f8:78:dc:05:7a:67:25:b2:94:
                    81:17:c4:75:8a:9f:f6:d7:e6:a2:83:f4:ae:bc:b4:
                    80:61:c0:86:8a:61:26:f9:dd:71:47:fe:89:69:7a:
                    66:88:a3:16:92:03:0d:94:f4:05:55:b2:0b:be:cf:
                    4d:9f:dc:19:b9:d0:ed:92:c1:1f:8d:6d:69:92:15:
                    e6:ff:50:af:86:08:e1:75:a2:d6:3e:5e:fd:66:ab:
                    c1:78:00:49:00:82:51:81:5a:28:64:b5:a1:be:fc:
                    ed:23:51:1d:a6:33:93:40:af:08:f2:d7:4f:26:55:
                    88:f1:85:4a:ec:22:85:ec:2c:ab:d3:74:84:b1:e6:
                    02:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:24:77:CC:AC:8C:1D:EF:6B:46:20:29:A2:A1:DB:50:91:DB:B2:B6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/c0a7e8a4-eaa5-3136-a7dc-4fa9e85fb38f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.0.198.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8a:ee:ab:3a:41:70:39:de:00:d8:c5:16:47:5e:9c:73:ac:16:
         ad:92:d5:c9:37:ba:7d:c0:33:8b:38:e9:8c:44:fd:0a:39:7d:
         4f:fd:fe:b7:5e:fe:63:20:bd:81:27:e9:d7:ef:ce:70:c4:6a:
         a0:b5:3f:66:93:b1:8d:fe:3f:0b:a2:9e:5e:13:73:9f:11:60:
         36:9b:f2:05:23:31:f6:31:d6:25:be:f5:11:47:8f:5f:c4:12:
         9d:51:0b:0c:54:42:00:f8:4e:39:59:3d:8d:f6:ba:32:20:45:
         19:6d:5b:dc:75:13:c5:70:29:d4:d8:ab:65:f4:fb:31:63:32:
         06:a4:05:39:0a:79:db:cd:18:27:28:b1:a7:ac:71:f8:d0:5f:
         ac:5b:d6:5c:13:66:c1:2a:42:ca:1f:31:82:e3:bb:2d:9d:29:
         41:74:68:7e:3d:c5:c1:d6:49:ad:2f:8c:46:e8:7c:2a:a7:00:
         4d:b6:0a:77:29:72:94:10:5b:c1:a4:e8:2b:55:30:f5:11:7c:
         ae:60:55:ba:7a:bb:3b:36:69:11:8b:e4:1a:5c:8a:c9:e8:68:
         ca:7a:fa:e7:e8:86:4b:a6:3c:f6:6e:47:50:92:b5:bc:8a:7e:
         44:38:4e:4e:c8:48:93:fa:43:15:d2:79:f6:52:2b:26:27:d6:
         a3:6a:ef:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 22:29:54 2025 by rpki-client