Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/cb63cbae-e2e0-3be3-81d9-614ddec12712.roa
File:                     cb63cbae-e2e0-3be3-81d9-614ddec12712.roa (raw, json)
Hash identifier:          UhO6iqsVX4n55b0G3u+g5JuCRZvfmIqmamXfWyHd+cI=
Subject key identifier:   77:86:32:ED:7C:2D:B2:4B:F6:6D:05:6A:05:B7:83:D2:F4:49:30:34
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F4328584A4AD58E0F05954126074D7D00
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/cb63cbae-e2e0-3be3-81d9-614ddec12712.roa
Signing time:             Tue 24 Jun 2025 01:00:50 +0000
ROA not before:           Tue 24 Jun 2025 01:00:50 +0000
ROA not after:            Mon 22 Sep 2025 01:00:50 +0000
asID:                     401152
IP address blocks:        166.0.138.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 03 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:4a:d5:8e:0f:05:95:41:26:07:4d:7d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Jun 24 01:00:50 2025 GMT
            Not After : Sep 22 01:00:50 2025 GMT
        Subject: CN=15512626-9339-4b48-b6e3-b723bac0572d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:3d:02:2e:24:58:8e:ca:b2:56:0c:ff:51:fe:
                    28:9f:70:1b:e3:f2:2d:41:14:da:f8:f1:33:a8:64:
                    db:b8:73:81:af:c2:2d:ae:09:47:12:96:e4:47:17:
                    3c:f4:4d:8e:c5:2a:76:5a:8b:29:83:06:d7:ae:a0:
                    32:86:d6:a6:d9:05:a6:2a:60:bc:ec:2c:dc:5d:b3:
                    87:5b:15:c0:79:04:96:54:8b:3e:5a:4a:2f:b5:a2:
                    14:75:04:fb:a3:8b:e9:24:ac:70:63:35:c7:19:14:
                    f3:ed:e3:52:03:08:42:f6:3d:21:f6:29:0e:d9:2a:
                    34:19:09:2d:8f:dc:06:1b:73:8b:7b:41:2d:d0:2d:
                    51:95:e2:d9:54:a2:0b:04:96:c7:be:9a:8f:d8:37:
                    04:56:b7:71:a9:92:ae:f8:7c:1d:3d:8f:17:18:aa:
                    c7:81:72:e5:37:d8:ad:48:02:43:80:ba:e0:7c:03:
                    c4:f2:e7:b6:c1:58:9a:8a:64:8a:05:56:f5:ce:e0:
                    06:6b:c4:85:28:39:16:0a:33:bf:3a:27:22:24:06:
                    36:87:31:55:1c:35:13:e9:0a:d3:bb:60:cc:f3:cf:
                    68:1c:7a:26:db:be:a7:d8:5a:30:61:65:4f:da:c9:
                    38:de:c1:23:a6:f7:52:67:85:c9:94:d9:15:6e:9a:
                    e0:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:86:32:ED:7C:2D:B2:4B:F6:6D:05:6A:05:B7:83:D2:F4:49:30:34
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/cb63cbae-e2e0-3be3-81d9-614ddec12712.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.0.138.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         13:97:9f:1d:54:c1:a6:36:d5:db:06:e1:3d:8a:8f:43:a8:3f:
         4f:d3:3b:25:26:4d:9e:a4:bf:03:7c:2b:82:fc:64:78:ff:63:
         b2:59:5a:5b:b5:29:4c:7e:79:15:64:02:29:c6:43:db:46:e3:
         79:b1:48:58:1d:66:af:e8:f7:9b:e1:71:af:51:e4:ad:b8:ca:
         ae:d2:b7:25:9a:00:e6:7c:9c:cf:a6:a5:60:b1:c9:e5:75:41:
         d7:44:b8:54:f5:b8:d4:01:23:dd:05:a0:52:7c:21:f6:43:3c:
         12:7f:1a:be:f2:a5:01:72:93:81:e4:d9:b6:43:4b:d9:59:3a:
         6f:61:3e:e8:5f:de:2a:bd:d7:90:1b:b5:4a:b4:91:a7:40:69:
         c6:eb:67:b8:3a:99:45:32:56:12:c1:96:6b:0f:f9:7c:41:2a:
         b3:81:69:e9:17:8e:73:27:a5:cc:7a:20:5c:28:95:ca:63:a5:
         7f:f5:96:b5:42:85:fe:8e:3f:58:0f:e6:b7:1a:fa:1b:26:8d:
         4e:cc:44:3c:34:38:b4:fd:5a:39:6b:f1:b6:00:f1:b2:5e:13:
         40:39:ca:37:df:64:83:e3:b5:ce:24:3c:95:99:21:62:6d:d8:
         0f:5f:ce:a0:27:76:d2:0d:bc:65:d3:c7:5c:a5:77:78:86:b1:
         5c:a4:35:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 13:11:23 2025 by rpki-client