Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/87f6be65-bf3b-3a6e-9f85-5142b76d22a1.roa
File:                     87f6be65-bf3b-3a6e-9f85-5142b76d22a1.roa (raw, json)
Hash identifier:          YQf8oyFAcx4OYIpRwEZK4FqZPKNew8Jl9INmGDfRtX0=
Subject key identifier:   37:44:48:34:50:46:5A:3F:79:0C:D5:FB:7E:B0:4B:13:03:DA:C4:7E
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F4328584AE19709F4729772C6CD46F520
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/87f6be65-bf3b-3a6e-9f85-5142b76d22a1.roa
Signing time:             Sun 17 Aug 2025 01:00:32 +0000
ROA not before:           Sun 17 Aug 2025 01:00:32 +0000
ROA not after:            Sat 15 Nov 2025 02:00:32 +0000
asID:                     15321
IP address blocks:        216.208.66.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Aug 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:e1:97:09:f4:72:97:72:c6:cd:46:f5:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Aug 17 01:00:32 2025 GMT
            Not After : Nov 15 02:00:32 2025 GMT
        Subject: CN=b5ab64a9-4c1a-4de9-b80c-b9030aae3612
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:dd:e7:ba:7d:2b:21:1a:33:1f:fa:4e:a4:be:
                    f7:5a:a1:fc:6d:06:37:8c:0e:8b:14:c0:1c:0a:01:
                    0a:ff:8b:3a:4f:fa:8d:51:25:2b:ff:52:53:f6:5d:
                    5a:30:70:a0:82:d6:be:81:2b:28:9f:dd:bf:ac:7b:
                    f3:33:bb:6b:12:12:17:8a:b1:24:1b:50:8a:54:91:
                    f6:1d:82:9b:52:fa:a4:eb:b2:e5:bc:85:d1:35:7c:
                    b8:74:db:80:58:d6:e1:e4:29:d4:ff:63:04:ff:96:
                    a7:de:6b:81:0d:76:8f:69:95:63:9b:90:fd:4d:1b:
                    35:ac:b3:5f:ed:e2:09:84:30:0e:cb:4b:90:78:91:
                    16:97:23:2b:f5:8c:ba:b4:f2:a2:ec:75:a4:13:33:
                    14:22:09:03:ef:7e:57:13:2a:dc:f7:97:95:be:99:
                    d5:65:83:5b:93:46:03:f8:ff:26:45:bd:5c:21:dc:
                    5b:9a:fa:c7:c2:7a:19:b0:dd:8f:3e:08:da:48:3b:
                    fd:ee:41:16:26:cc:cc:04:69:d1:56:a9:e6:39:3d:
                    c6:f8:36:8c:3e:fd:0c:0c:1a:98:ae:f1:46:0c:ad:
                    61:de:9d:81:83:a1:6f:0a:7a:ff:83:2f:f5:93:ac:
                    8d:e2:1b:af:e1:cf:cd:4e:54:f0:bc:6c:40:aa:cf:
                    58:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:44:48:34:50:46:5A:3F:79:0C:D5:FB:7E:B0:4B:13:03:DA:C4:7E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/87f6be65-bf3b-3a6e-9f85-5142b76d22a1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.208.66.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5c:e8:05:f0:76:80:fa:34:11:9d:cc:a8:15:98:a4:6a:f5:81:
         97:b1:e0:2a:f7:00:36:67:7a:b6:2e:f8:c0:81:93:bf:3d:a7:
         d9:92:80:0f:7f:46:df:7a:5e:78:2f:34:5a:ae:55:1b:ce:8f:
         b8:75:2a:24:26:be:68:bb:dc:b2:21:14:53:ed:12:8c:83:d5:
         af:43:9e:ca:0a:68:43:83:1b:c0:be:55:4f:b7:be:ba:09:36:
         c6:e2:68:34:10:b6:4e:20:29:6e:7c:98:ea:bd:b3:79:27:96:
         03:aa:90:69:7a:d3:ab:9c:0a:49:6b:73:e3:ce:ba:cb:5d:52:
         47:8d:b2:b6:a7:ad:f1:87:72:0d:f5:5a:60:36:d7:4c:98:32:
         6b:25:ec:73:fb:98:b3:bf:fd:cc:59:34:33:11:e1:df:f7:bd:
         f4:d2:53:a0:eb:75:af:6f:a2:a8:7b:24:d3:89:8e:02:1c:99:
         12:f6:1f:d1:7a:f4:f6:4f:05:05:2e:ac:7f:8f:f5:60:80:ce:
         82:1c:13:16:5f:b4:ba:a7:9f:45:cf:30:91:97:ec:f2:dd:07:
         8c:db:ef:61:19:36:dc:17:c9:b0:d7:e6:a4:f6:a5:fb:5b:1e:
         58:be:38:b7:05:0b:2a:0d:00:3e:7c:5a:b2:90:c1:87:27:3e:
         8b:1b:67:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 08:58:14 2025 by rpki-client