Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ee74c799-7d4c-4df3-b711-296c34338ef5/366b3e93-5fd9-3b62-ba63-4e8299afc23d.roa
File:                     366b3e93-5fd9-3b62-ba63-4e8299afc23d.roa (raw, json)
Hash identifier:          OH9XnWGZg3ziuLN47UJfn41bUtNyCC2Q5qcuJhtlYbY=
Subject key identifier:   8B:BC:32:7B:5F:47:DC:FF:E5:15:07:A3:C0:3C:56:3F:CD:53:81:92
Certificate issuer:       /CN=ee74c799-7d4c-4df3-b711-296c34338ef5
Certificate serial:       010D0C9F4328584B1AD175568DDC6BF754921440
Authority key identifier: 6C:D7:E0:0F:38:36:3A:E8:C9:32:0B:B7:C3:96:05:B7:19:AC:F7:C4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ee74c799-7d4c-4df3-b711-296c34338ef5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ee74c799-7d4c-4df3-b711-296c34338ef5/366b3e93-5fd9-3b62-ba63-4e8299afc23d.roa
Signing time:             Sat 06 Sep 2025 13:00:41 +0000
ROA not before:           Sat 06 Sep 2025 13:00:41 +0000
ROA not after:            Fri 05 Dec 2025 14:00:41 +0000
asID:                     19844
IP address blocks:        68.67.64.0/20 maxlen: 24
                          198.205.112.0/20 maxlen: 24
                          199.102.64.0/22 maxlen: 24
                          216.238.144.0/20 maxlen: 24
                          2605:d100::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ee74c799-7d4c-4df3-b711-296c34338ef5/ee74c799-7d4c-4df3-b711-296c34338ef5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ee74c799-7d4c-4df3-b711-296c34338ef5/ee74c799-7d4c-4df3-b711-296c34338ef5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ee74c799-7d4c-4df3-b711-296c34338ef5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:1a:d1:75:56:8d:dc:6b:f7:54:92:14:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ee74c799-7d4c-4df3-b711-296c34338ef5
        Validity
            Not Before: Sep  6 13:00:41 2025 GMT
            Not After : Dec  5 14:00:41 2025 GMT
        Subject: CN=34f4ac52-99c2-4faa-95bf-85e5ffeff080
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:e3:ac:3d:4e:ab:ac:76:4d:e3:8d:1b:ef:b8:
                    c4:0e:49:03:3c:d6:23:70:f1:72:5e:86:4b:28:e0:
                    14:df:58:ed:75:00:62:ff:a4:2c:31:b6:56:36:5b:
                    54:d4:3e:f8:db:80:e2:cb:cf:6d:c5:d4:f8:6c:f6:
                    88:0f:78:58:cb:46:b9:be:e2:dd:a1:75:df:4e:94:
                    47:fb:54:c4:23:db:12:e4:23:81:e4:4e:ae:f6:d5:
                    a1:b8:d6:97:b9:75:c4:48:9f:75:44:ff:d5:f0:55:
                    fa:0e:83:e5:33:00:f5:e4:f1:21:14:27:80:a3:b7:
                    f7:8c:62:57:64:df:f1:14:64:b5:38:d4:e6:dd:7f:
                    22:0d:20:21:75:23:73:83:96:19:9a:1e:12:96:42:
                    8f:f0:5b:b6:49:d7:d2:00:fa:08:e9:ca:36:1b:4c:
                    f7:65:cc:98:23:11:88:eb:34:06:20:e8:b2:d2:e7:
                    d0:b8:c2:5d:a6:1d:09:c5:12:2f:21:5c:81:a7:dd:
                    b7:c2:f8:e4:68:b4:49:61:75:4a:75:a3:dd:b4:b5:
                    b6:42:f7:10:cd:52:7d:37:58:35:b5:2f:d9:71:a1:
                    ac:06:1f:22:df:da:de:64:1a:47:2c:44:2b:df:0b:
                    fd:33:22:8a:fb:d9:bf:8e:07:22:a4:87:98:03:bb:
                    c9:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:BC:32:7B:5F:47:DC:FF:E5:15:07:A3:C0:3C:56:3F:CD:53:81:92
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ee74c799-7d4c-4df3-b711-296c34338ef5/366b3e93-5fd9-3b62-ba63-4e8299afc23d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ee74c799-7d4c-4df3-b711-296c34338ef5/ee74c799-7d4c-4df3-b711-296c34338ef5.crl

            X509v3 Authority Key Identifier:
                keyid:6C:D7:E0:0F:38:36:3A:E8:C9:32:0B:B7:C3:96:05:B7:19:AC:F7:C4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ee74c799-7d4c-4df3-b711-296c34338ef5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.67.64.0/20
                  198.205.112.0/20
                  199.102.64.0/22
                  216.238.144.0/20
                IPv6:
                  2605:d100::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         76:15:6d:92:17:de:ad:01:ba:3f:e7:80:07:06:f3:bc:0e:86:
         5d:0f:20:33:19:51:26:af:fd:f4:ae:6a:cc:74:a6:50:ec:ce:
         ce:46:24:cb:37:33:85:4a:cc:fa:2b:2a:1b:a2:7f:d1:f3:dd:
         a8:34:88:05:22:0f:77:53:80:51:3b:79:7a:ba:30:db:72:6d:
         e9:39:4a:c4:95:d3:9a:26:7e:72:05:bb:de:2d:05:f3:b9:2c:
         f2:2a:12:d7:66:fa:d1:41:b0:eb:2b:45:0f:7f:f9:66:d4:9f:
         53:28:76:23:f6:9f:43:71:f5:27:64:e6:ce:9d:c2:56:03:74:
         8a:95:3a:d9:d0:cb:31:cc:48:3b:32:30:bf:b3:12:8a:5f:82:
         34:dd:aa:d7:bc:af:ad:8d:99:79:1b:b6:95:78:e6:ba:ae:1d:
         80:8b:b6:4c:34:e3:be:e1:61:fc:88:dd:64:cb:90:c4:83:c5:
         1b:89:0d:6d:38:e6:f2:3c:21:99:1d:5c:3a:74:c6:f9:51:7d:
         f6:55:3b:7a:46:ea:9c:5c:b2:b0:72:cc:1c:4f:d6:ba:dc:44:
         d7:2f:b6:8d:11:e1:b6:d3:b3:95:b3:27:f6:f2:ba:c2:61:9e:
         29:fb:b4:b1:d4:53:7e:fa:e5:c5:c3:f1:b9:6e:dd:f8:cf:66:
         18:87:d3:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 08:49:31 2025 by rpki-client