Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/e10e4aca-7748-3cf7-a235-ace455f718a7.roa
File:                     e10e4aca-7748-3cf7-a235-ace455f718a7.roa (raw, json)
Hash identifier:          nF2A9hp02s5EKNRVHKpV/tU0XcPLix+18emVb0k4Xt8=
Subject key identifier:   CE:2F:EC:86:9A:4B:DA:8C:FE:21:6E:9F:FD:57:9C:7F:2B:41:0B:BD
Certificate issuer:       /CN=dc455e58-6189-4f28-b803-61a965a21c65
Certificate serial:       010D0C9F4328584AD9365C2E683EBEFC250EBCE0
Authority key identifier: 66:46:BF:04:CF:10:3E:4C:AE:90:A0:E6:CD:25:36:50:B6:45:BC:3F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/e10e4aca-7748-3cf7-a235-ace455f718a7.roa
Signing time:             Thu 14 Aug 2025 01:00:33 +0000
ROA not before:           Thu 14 Aug 2025 01:00:33 +0000
ROA not after:            Wed 12 Nov 2025 02:00:33 +0000
asID:                     30103
IP address blocks:        166.108.64.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:d9:36:5c:2e:68:3e:be:fc:25:0e:bc:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dc455e58-6189-4f28-b803-61a965a21c65
        Validity
            Not Before: Aug 14 01:00:33 2025 GMT
            Not After : Nov 12 02:00:33 2025 GMT
        Subject: CN=16e8a51f-dec0-4377-a4f6-d8c7254ef9b5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:10:fb:c3:a7:12:40:ed:7e:8f:38:8e:6c:ed:
                    c4:2e:48:66:78:e9:97:5a:40:94:42:6f:10:63:ed:
                    d9:af:ec:81:65:81:b7:a5:8f:21:90:44:c9:7a:09:
                    5d:43:af:db:10:f2:ff:2c:b4:14:ff:7f:62:b6:f0:
                    35:63:83:14:0a:b6:05:0b:cf:5a:1e:ca:0c:16:b9:
                    fa:e6:4a:e9:1b:6c:60:3a:6f:39:2a:89:f1:36:ff:
                    38:ec:26:5b:be:bd:b2:39:1a:e6:dd:53:63:d2:ec:
                    df:47:3c:a1:dc:58:40:75:e2:68:bd:28:e9:5a:90:
                    a8:0b:09:c0:c5:eb:e1:66:5b:20:4c:a7:50:6b:b9:
                    2b:d6:a8:33:1e:b3:f2:fd:d9:70:4b:08:f4:9f:8e:
                    ed:2a:3e:fd:e2:07:fc:8e:da:45:ec:b0:d4:17:99:
                    c7:98:b9:84:af:bc:ff:95:d1:29:1a:ec:15:06:bc:
                    62:61:f2:b2:42:e1:dc:26:68:78:61:ad:04:e6:bf:
                    c9:71:2f:c3:c1:dd:72:0f:cd:8e:33:17:3e:44:d2:
                    e2:7d:b4:24:8b:04:3f:25:0a:be:d7:b5:cf:ea:5f:
                    9a:1d:9e:2f:30:9b:ef:10:e2:14:50:79:a9:1f:a5:
                    15:3b:4c:30:a1:74:a6:af:ea:86:1a:b7:9d:1e:97:
                    90:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:2F:EC:86:9A:4B:DA:8C:FE:21:6E:9F:FD:57:9C:7F:2B:41:0B:BD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/e10e4aca-7748-3cf7-a235-ace455f718a7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.crl

            X509v3 Authority Key Identifier:
                keyid:66:46:BF:04:CF:10:3E:4C:AE:90:A0:E6:CD:25:36:50:B6:45:BC:3F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.108.64.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3c:0e:17:f9:b5:0a:89:34:81:7d:3f:34:b1:06:68:80:4c:20:
         b4:e2:b7:21:4a:f7:29:68:3c:35:14:54:e5:ae:be:23:16:70:
         ea:3c:26:bc:78:bd:de:4e:03:d4:2b:88:62:17:09:f4:e4:2a:
         c1:ac:06:aa:09:d8:b5:66:d2:4d:00:c1:14:ac:f0:09:02:b7:
         f4:bd:4f:01:08:3f:34:ca:08:df:ec:ea:3c:f5:53:d1:74:30:
         5a:53:49:d8:59:27:05:87:8f:cc:80:5f:3d:21:a9:37:6e:16:
         07:0e:c1:40:9c:c0:d8:11:4d:3c:6e:89:0f:23:06:b9:7f:9c:
         37:da:d8:da:53:d7:97:f9:56:6d:07:68:36:15:75:ff:0e:f8:
         19:55:76:76:67:09:90:fe:66:5b:57:7e:a0:aa:de:76:cc:02:
         33:08:24:77:7a:1c:10:14:bd:89:bc:aa:07:6b:71:40:8b:26:
         24:24:1b:50:1c:a9:f5:9b:89:e4:52:37:59:6f:fd:d0:29:b1:
         e7:5f:40:3d:5b:97:65:5b:45:52:78:a4:93:0f:e7:38:f9:ba:
         7c:d1:fc:5a:21:01:79:3e:05:b8:91:2a:c4:2c:70:a1:ec:05:
         40:2e:a2:fe:ee:95:af:a3:e1:8f:8d:9f:2d:7a:bc:70:d1:bb:
         73:79:cc:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 13:18:43 2025 by rpki-client