Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6/81e90359-3107-3ba1-83b2-0e3e57acfa2e.roa
File:                     81e90359-3107-3ba1-83b2-0e3e57acfa2e.roa (raw, json)
Hash identifier:          /1qx1NsY9Wx7NrmFMYqTvfhrtZVZNTkQgkcryVmPRqs=
Subject key identifier:   12:44:C3:D1:9F:B9:76:50:06:BD:6F:D7:13:92:6D:A3:5A:D7:80:E1
Certificate issuer:       /CN=6e9c5894-f794-4209-a00d-cf232363d7c6
Certificate serial:       010D0C9F4328584AC9DB9C879DE347115CDE4080
Authority key identifier: EB:6D:3E:D4:C8:21:B9:96:11:9E:0C:09:FF:5D:B7:88:80:52:94:85
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6/81e90359-3107-3ba1-83b2-0e3e57acfa2e.roa
Signing time:             Fri 08 Aug 2025 13:00:40 +0000
ROA not before:           Fri 08 Aug 2025 13:00:40 +0000
ROA not after:            Thu 06 Nov 2025 14:00:40 +0000
asID:                     30627
IP address blocks:        66.159.224.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6/6e9c5894-f794-4209-a00d-cf232363d7c6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6/6e9c5894-f794-4209-a00d-cf232363d7c6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:c9:db:9c:87:9d:e3:47:11:5c:de:40:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6e9c5894-f794-4209-a00d-cf232363d7c6
        Validity
            Not Before: Aug  8 13:00:40 2025 GMT
            Not After : Nov  6 14:00:40 2025 GMT
        Subject: CN=c5eaedb6-aebf-40e7-847b-ab785a895537
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:21:0d:06:a0:36:d1:c2:a0:ff:31:02:09:07:
                    d4:76:51:75:36:13:a2:7a:77:5f:95:2b:3d:df:af:
                    cb:87:4b:46:64:cb:a6:ef:1c:da:ce:72:56:8b:a6:
                    66:89:10:ba:33:04:e7:f7:dd:fd:31:b8:ce:d9:c8:
                    65:0a:a9:21:5e:f0:76:c3:12:ca:26:5b:50:6b:8d:
                    40:b4:01:2c:a8:33:65:a6:19:af:64:94:86:af:22:
                    e3:86:14:6c:d0:db:56:b8:0c:96:a2:55:6d:b7:84:
                    09:92:f9:e6:c7:57:e5:65:e0:6d:7e:19:df:76:e4:
                    84:8c:6f:e2:42:a6:a0:9d:f6:e2:49:80:62:63:fb:
                    62:7a:56:e2:37:27:51:c9:25:57:d9:6c:aa:fc:8d:
                    aa:31:f9:69:97:eb:9f:e4:58:2e:f3:0b:55:59:56:
                    01:36:cb:f0:df:96:3f:97:02:ee:94:26:a4:65:98:
                    bf:00:79:73:6a:8b:b3:db:13:ee:5d:bd:3b:c2:46:
                    5c:1a:60:f3:9e:df:2d:80:f2:2e:3a:e1:81:62:df:
                    69:c2:03:f9:f5:d1:70:93:0b:84:e8:e8:96:01:34:
                    6d:58:22:c5:60:4b:5b:1f:44:c6:ed:61:c0:72:32:
                    fd:87:fd:64:bf:4d:5c:f2:1a:df:63:00:08:c4:c6:
                    85:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:44:C3:D1:9F:B9:76:50:06:BD:6F:D7:13:92:6D:A3:5A:D7:80:E1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6/81e90359-3107-3ba1-83b2-0e3e57acfa2e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6/6e9c5894-f794-4209-a00d-cf232363d7c6.crl

            X509v3 Authority Key Identifier:
                keyid:EB:6D:3E:D4:C8:21:B9:96:11:9E:0C:09:FF:5D:B7:88:80:52:94:85

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.159.224.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         43:8b:c9:bd:ec:e6:d0:67:23:86:37:67:34:82:4c:d0:51:7e:
         01:6b:ae:03:9d:3f:9c:e1:88:7f:44:45:bb:07:4f:6f:14:9d:
         cf:3a:11:ad:e0:a2:fb:cb:d8:e4:ec:6a:ef:a1:29:a6:c0:94:
         11:92:e4:79:3b:1d:3c:19:d5:9a:32:4d:16:25:f9:3d:11:8f:
         28:ab:8b:bd:a7:ba:ab:31:6d:27:42:15:72:25:c7:9a:01:19:
         cf:fd:75:cb:16:96:1d:7d:d3:8e:98:f2:78:8d:f0:3b:d0:2d:
         63:5f:02:50:e2:63:2d:36:12:b9:35:40:8f:ce:ff:b3:be:3c:
         2b:67:49:48:b6:dd:2a:c4:83:a0:f2:4d:eb:d9:26:86:10:0c:
         2b:56:dd:fb:8f:79:4f:0e:5e:13:92:58:04:2b:c0:cd:26:b3:
         b6:37:e0:32:ca:1e:d5:89:1f:13:85:30:e9:15:dd:e7:e8:e2:
         ef:4a:e5:d9:e1:c4:eb:e2:e5:95:26:ec:dd:64:41:0a:00:f5:
         96:a8:7f:67:d6:b7:16:fb:d4:25:58:2d:bb:fa:28:a9:9b:cd:
         17:40:8e:e6:81:ea:7b:cd:66:9a:6a:9c:f9:14:1e:82:92:3c:
         d0:09:2c:95:87:ee:3e:e0:f8:38:96:22:30:ea:e0:cc:ef:b0:
         d3:75:e5:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 17:32:46 2025 by rpki-client