Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/c4739ddb-3936-37e3-bf1a-66107f30e5b6.roa
File:                     c4739ddb-3936-37e3-bf1a-66107f30e5b6.roa (raw, json)
Hash identifier:          4iK3SAhIqcSkMYXSJBTdrkjzhbLzuOh7g/jI3g+3cYw=
Subject key identifier:   CC:9B:C2:8F:63:4C:29:17:83:6C:47:8E:1C:CE:9C:49:62:E7:4C:29
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F4328584B7B22091C1697849E1F3CD240
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/c4739ddb-3936-37e3-bf1a-66107f30e5b6.roa
Signing time:             Sat 11 Oct 2025 01:00:30 +0000
ROA not before:           Sat 11 Oct 2025 01:00:30 +0000
ROA not after:            Fri 09 Jan 2026 02:00:30 +0000
asID:                     7385
IP address blocks:        166.0.105.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:7b:22:09:1c:16:97:84:9e:1f:3c:d2:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Oct 11 01:00:30 2025 GMT
            Not After : Jan  9 02:00:30 2026 GMT
        Subject: CN=25bc224c-d959-4e15-9a56-b4fa960283c2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:1f:40:ad:5c:49:23:70:5b:1b:41:aa:ea:b9:
                    ca:61:7c:84:0d:5f:74:2e:79:b6:b6:ee:24:d1:00:
                    fc:1f:3b:90:e3:c4:e7:1d:92:41:3f:ba:52:28:09:
                    e9:f5:af:29:98:91:6c:ac:31:4e:ff:35:2f:59:7b:
                    05:d2:e5:60:5e:a2:48:0f:f8:62:ba:5a:e7:d6:11:
                    5c:77:c2:55:aa:58:ea:31:02:a1:47:ec:91:a3:87:
                    8d:f3:0f:ac:f5:1e:a5:dc:15:70:b0:b6:4c:31:db:
                    16:2e:58:0f:b1:fa:47:a1:8a:74:fe:70:a5:c9:fc:
                    b8:78:4b:51:2d:bd:93:00:1a:c2:a4:29:7c:c0:ad:
                    1b:04:bb:1c:8b:ef:9e:09:e6:d3:1e:11:71:50:de:
                    da:e9:33:a2:3f:9c:d3:ed:cd:ce:57:7f:11:7d:4c:
                    b0:c5:fe:34:e1:85:9b:15:fe:fb:8b:d2:48:ff:d3:
                    10:51:7f:e1:0a:31:d5:8d:9f:67:79:e0:cd:a3:84:
                    66:ab:65:2b:28:79:53:5f:87:d1:e8:9f:e2:d9:82:
                    49:78:d1:d7:b6:a3:85:2c:49:d9:ed:cd:fc:4e:e6:
                    87:fa:6a:d1:e8:d2:3f:c6:82:3e:ad:c6:d1:13:0b:
                    f0:f0:cf:56:88:21:72:cd:d9:6d:34:b8:bc:80:ba:
                    11:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:9B:C2:8F:63:4C:29:17:83:6C:47:8E:1C:CE:9C:49:62:E7:4C:29
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/c4739ddb-3936-37e3-bf1a-66107f30e5b6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.0.105.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         48:96:0a:3d:d9:70:d2:f2:22:74:ef:22:e0:92:e3:ef:4d:2f:
         1b:34:35:e6:2f:b2:1f:7d:d0:d7:4f:fd:90:a6:47:c4:89:1d:
         08:e9:2c:9a:35:95:06:e4:6c:80:68:d3:be:ca:7d:1a:9e:72:
         6c:33:1d:fc:4a:b1:97:ad:dd:4d:83:f3:92:78:96:4b:c5:91:
         95:73:be:86:f3:83:6d:72:89:59:a0:94:5f:3e:b4:e0:b1:34:
         92:fc:4e:1a:a0:d5:3d:d9:14:4c:70:af:1f:06:3a:84:29:41:
         5a:a7:fb:31:13:2a:cd:c9:c2:d2:b3:d4:28:e8:6c:56:7f:6e:
         35:da:ce:f2:66:65:ce:85:79:25:8f:cc:e8:0f:e1:29:44:71:
         9c:05:32:f9:58:6c:5d:36:f4:eb:07:7c:88:c2:77:19:ca:72:
         71:e7:06:75:b3:6d:9d:61:dc:d2:df:07:e4:39:82:6e:c2:0c:
         7a:b8:77:0d:9e:00:47:ad:ba:fb:4c:5f:9d:af:95:ad:d0:50:
         8f:df:03:33:59:33:4d:8d:29:e8:e0:d1:7e:36:a0:ef:f7:ce:
         38:77:80:02:7e:d0:ac:51:39:b4:61:ae:51:ce:7e:52:8b:6e:
         a5:be:28:10:d0:67:f9:06:f5:04:64:18:9a:1a:75:74:28:6b:
         c5:8f:71:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 22:29:20 2025 by rpki-client