Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/f75014e5-d911-341d-ab48-896cb339ae5b.roa
File:                     f75014e5-d911-341d-ab48-896cb339ae5b.roa (raw, json)
Hash identifier:          or//gNVKUXg+dvuJsQnOD2iVBAbM6Q6dDMbY6dtz7xg=
Subject key identifier:   27:FB:B0:A0:B3:EE:11:06:79:01:EB:DD:A0:77:E5:DE:DC:62:D4:FC
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F4328584B91777AE89548AA6025E06E80
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/f75014e5-d911-341d-ab48-896cb339ae5b.roa
Signing time:             Sun 19 Oct 2025 01:00:30 +0000
ROA not before:           Sun 19 Oct 2025 01:00:30 +0000
ROA not after:            Sat 17 Jan 2026 02:00:30 +0000
asID:                     62240
IP address blocks:        166.1.189.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:91:77:7a:e8:95:48:aa:60:25:e0:6e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Oct 19 01:00:30 2025 GMT
            Not After : Jan 17 02:00:30 2026 GMT
        Subject: CN=4fd559e6-7446-4c5d-a497-4f55483e198a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:6f:25:56:fb:55:c3:e1:6c:19:54:4e:f2:0d:
                    71:f1:b8:9e:18:70:03:5b:be:28:91:e8:4c:b5:44:
                    27:c9:e2:ec:d3:3d:da:1c:28:2f:14:b3:9b:72:54:
                    13:36:02:e0:16:ee:a5:a8:c4:db:37:ea:1a:be:cb:
                    1a:04:c3:d9:b4:0f:57:0b:4e:e9:80:70:cc:c9:16:
                    c2:21:f6:19:44:f4:05:96:57:27:09:01:77:f4:89:
                    57:94:2e:96:88:86:e6:cb:6a:1d:e8:58:79:84:35:
                    19:c9:c6:6d:92:81:08:25:74:a1:5b:20:43:0c:cf:
                    02:dd:72:ef:6d:1b:2e:fa:2d:7e:af:ed:30:f1:79:
                    58:83:b1:4b:bf:69:4b:d0:41:75:b0:92:f6:6c:45:
                    bc:94:5e:dd:f9:ff:e0:41:26:30:2b:bc:07:8a:e5:
                    91:5e:59:03:f5:17:19:44:04:37:fc:87:e9:2b:bb:
                    81:e2:9b:fa:f2:5e:5c:ce:4c:09:c9:06:76:b7:b2:
                    7c:a2:b0:9f:c8:ce:20:82:ef:d8:28:85:7c:9a:3c:
                    b1:e6:db:c7:59:12:b4:4c:bb:fb:f6:31:a9:d0:9f:
                    e0:71:a2:b1:d9:38:a5:c9:08:98:35:55:ac:93:06:
                    cb:1a:e7:2e:c3:21:30:07:ae:19:09:7b:ca:ea:9a:
                    f5:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:FB:B0:A0:B3:EE:11:06:79:01:EB:DD:A0:77:E5:DE:DC:62:D4:FC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/f75014e5-d911-341d-ab48-896cb339ae5b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.1.189.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5b:da:e8:7d:87:d3:df:aa:05:82:a8:1c:51:11:6d:ac:2f:94:
         31:83:b4:0f:e4:2f:a8:31:88:07:36:82:aa:3c:10:75:2d:54:
         48:6a:cd:71:1e:91:34:97:95:e0:f7:c9:87:6e:f8:51:3a:f0:
         3c:e4:cb:c9:cc:7f:db:e5:6a:d8:69:cb:f2:bd:40:bc:55:a9:
         01:b0:23:35:15:c7:a0:91:63:72:ac:49:9f:aa:72:7b:1e:0a:
         bd:63:14:b8:e7:2a:43:a6:a1:69:30:1d:f4:15:d1:f2:de:4f:
         a6:dc:a7:f6:e3:15:d5:cc:da:25:c9:e1:f5:ba:8e:df:26:8b:
         e8:eb:6b:04:fa:4b:95:92:19:a7:14:e6:e4:08:7d:19:c1:80:
         bb:42:92:c4:d5:fc:1a:bb:dc:70:30:d0:f8:9b:98:58:c0:d2:
         16:35:9e:76:b7:16:72:f6:dd:e9:27:9a:66:db:80:1c:ba:a2:
         97:a0:94:cb:85:2e:3a:99:d1:1f:9a:57:bc:e4:1c:49:fa:3d:
         d5:d5:3f:75:60:a6:91:06:28:c5:a9:a7:c8:06:cb:44:c4:48:
         5b:a6:a8:fc:d5:62:9f:e6:ce:e6:1d:b5:54:38:56:14:91:5b:
         5b:86:d9:f8:51:9c:0b:a2:38:14:13:47:01:8a:75:7d:c0:ad:
         c0:02:22:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:09:51 2025 by rpki-client