Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/ef6f7ed6-f61c-38c9-b510-f4c647c5b871.roa
File:                     ef6f7ed6-f61c-38c9-b510-f4c647c5b871.roa (raw, json)
Hash identifier:          DZscrCC+V/DkHuhT7Y1LEefSFbKwEXjrJPPk9PrK9kg=
Subject key identifier:   12:50:B9:BF:E5:00:0C:FD:1A:E1:0D:FA:E5:A5:09:66:B8:4C:4D:36
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F4328584B7DECD1B3EE76BE12807A2CA0
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/ef6f7ed6-f61c-38c9-b510-f4c647c5b871.roa
Signing time:             Sun 12 Oct 2025 01:00:30 +0000
ROA not before:           Sun 12 Oct 2025 01:00:30 +0000
ROA not after:            Sat 10 Jan 2026 02:00:30 +0000
asID:                     7385
IP address blocks:        166.0.169.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:7d:ec:d1:b3:ee:76:be:12:80:7a:2c:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Oct 12 01:00:30 2025 GMT
            Not After : Jan 10 02:00:30 2026 GMT
        Subject: CN=cafa795d-a400-4cf8-a1c9-08c4a34e97ea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:53:16:16:33:6d:61:3a:1f:52:9e:0e:d0:0b:
                    b3:e2:59:9a:e2:22:c8:6b:a0:c1:1b:f4:31:4b:c3:
                    ea:6e:bb:df:22:47:73:4a:cf:81:d8:15:cb:46:98:
                    46:22:58:64:87:25:8e:26:cb:fd:5d:f6:81:1b:ea:
                    3e:30:a3:6b:53:29:0e:df:e9:06:1f:bc:16:9c:74:
                    58:c5:ba:7c:ca:d1:7b:9d:4a:05:0c:18:b0:73:45:
                    83:95:cb:5c:36:48:3d:f7:86:74:bf:6b:32:dc:32:
                    9b:09:be:37:b3:d8:0b:bf:e3:a5:3a:7d:04:6b:3c:
                    15:90:b3:1a:7c:c8:8b:98:19:00:aa:00:e4:a5:3d:
                    02:a2:6c:a4:31:ce:cf:24:2a:4f:b9:33:98:fd:2d:
                    74:a5:10:0b:1c:22:66:79:af:a7:09:55:42:c8:dc:
                    96:40:9d:2c:1f:41:8b:55:61:21:7a:bb:68:47:76:
                    13:90:af:bc:76:35:29:c0:d1:b9:49:ed:d8:46:da:
                    3a:a9:a5:83:b8:74:80:3d:dd:df:31:b0:80:d1:d7:
                    c2:75:67:1d:a9:3c:0d:07:72:ea:0a:94:29:6b:d6:
                    8b:03:0c:f0:fe:45:57:d5:3a:b4:70:dc:5e:c2:cd:
                    a4:97:7b:f7:fe:89:90:ec:7a:ce:78:8e:f8:e5:77:
                    f1:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:50:B9:BF:E5:00:0C:FD:1A:E1:0D:FA:E5:A5:09:66:B8:4C:4D:36
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/ef6f7ed6-f61c-38c9-b510-f4c647c5b871.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.0.169.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         87:83:e1:08:6f:a6:90:39:2a:e6:e0:72:fa:f2:e6:02:f2:a6:
         9a:26:66:40:fe:a3:e9:dc:64:03:46:10:cf:18:f3:50:23:c5:
         e5:55:05:89:f5:c0:0d:27:0f:94:5f:0f:45:0b:f1:c1:e2:5f:
         1a:df:55:3a:2a:00:80:4d:8c:af:d7:b6:69:f2:84:ec:04:d3:
         c6:2d:4a:2f:5a:4b:b5:30:62:61:4a:a3:9f:46:3d:be:d5:4b:
         75:05:c3:dd:4a:40:c3:e2:07:40:cc:0b:9d:1b:c7:c7:77:a2:
         36:20:38:58:33:86:53:1e:07:44:c7:c4:2d:24:14:80:39:7b:
         0b:a1:ee:28:09:09:01:b7:6f:5b:d7:23:a6:52:6b:df:e1:40:
         ee:22:80:aa:d1:e1:74:20:0c:fe:2e:82:59:0e:9c:55:d8:6e:
         03:95:84:f6:e2:b7:ab:52:da:6e:ff:ee:32:d7:94:64:3b:bc:
         d5:13:e2:d6:01:51:51:cb:05:78:f5:4b:d3:87:f5:95:24:00:
         d8:97:e5:93:90:ba:72:ac:69:25:98:33:85:e2:31:51:2b:50:
         d6:77:33:95:6a:20:5d:d5:3b:59:ce:70:d3:ac:ae:62:ad:29:
         00:99:85:cb:ca:70:9e:4a:56:df:04:ed:e9:c3:e9:6c:e7:35:
         a5:ff:00:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:10:34 2025 by rpki-client