Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77c4c62a-3f6d-4c1c-8bdb-3706246cbfd6/b02d7254-2264-3097-86e7-bab31bccdf77.roa
File:                     b02d7254-2264-3097-86e7-bab31bccdf77.roa (raw, json)
Hash identifier:          HVMee3nY5aKVxn7elYDkslA/OqtwRp1yHV78W8TxmVY=
Subject key identifier:   B6:5C:43:F4:18:09:16:7E:33:DF:9B:E1:7F:AC:A1:DF:49:EE:87:1B
Certificate issuer:       /CN=77c4c62a-3f6d-4c1c-8bdb-3706246cbfd6
Certificate serial:       010D0C9F4328584B821CCACCC4A17097148E4400
Authority key identifier: E2:9D:E8:0D:86:E0:8B:FD:22:CF:FE:65:78:94:20:F0:BD:72:DF:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77c4c62a-3f6d-4c1c-8bdb-3706246cbfd6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77c4c62a-3f6d-4c1c-8bdb-3706246cbfd6/b02d7254-2264-3097-86e7-bab31bccdf77.roa
Signing time:             Mon 13 Oct 2025 13:00:36 +0000
ROA not before:           Mon 13 Oct 2025 13:00:36 +0000
ROA not after:            Sun 11 Jan 2026 14:00:36 +0000
asID:                     33717
IP address blocks:        66.171.120.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77c4c62a-3f6d-4c1c-8bdb-3706246cbfd6/77c4c62a-3f6d-4c1c-8bdb-3706246cbfd6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77c4c62a-3f6d-4c1c-8bdb-3706246cbfd6/77c4c62a-3f6d-4c1c-8bdb-3706246cbfd6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77c4c62a-3f6d-4c1c-8bdb-3706246cbfd6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 Oct 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:82:1c:ca:cc:c4:a1:70:97:14:8e:44:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77c4c62a-3f6d-4c1c-8bdb-3706246cbfd6
        Validity
            Not Before: Oct 13 13:00:36 2025 GMT
            Not After : Jan 11 14:00:36 2026 GMT
        Subject: CN=67099a18-0361-4235-bbac-78ecc7f4716f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:05:0c:e0:3b:f2:73:5b:11:0e:25:c6:2b:7b:
                    1f:0d:f6:0c:aa:66:14:78:2e:9e:b5:fa:d7:67:94:
                    15:fc:61:63:34:26:24:44:30:15:62:ce:de:7a:76:
                    a5:d0:51:14:52:a2:20:c8:3e:ab:2e:e1:4e:07:89:
                    39:87:6d:9f:27:e8:df:5f:52:55:8a:de:91:b8:37:
                    57:f3:49:a0:ce:b7:2a:fc:9b:02:84:62:ee:f0:54:
                    a3:e8:7e:51:6f:24:62:4b:4d:7c:d0:ea:5b:ff:12:
                    87:2f:d5:c9:ec:55:ea:f9:14:ff:02:2e:33:26:e7:
                    ca:08:d9:93:a1:db:0d:13:f7:9d:d4:97:c4:a3:46:
                    fd:5f:28:80:33:9e:0f:ae:08:69:6d:e2:58:0b:2f:
                    39:7f:df:b4:84:78:9d:38:10:8c:c8:c8:a8:c1:37:
                    14:04:1d:39:7b:ef:cb:ba:66:e8:1c:86:f6:94:64:
                    eb:2b:01:76:f5:98:c6:09:1b:9a:dd:0c:5b:77:1c:
                    d7:05:e6:62:bc:18:46:ed:9f:8f:0c:72:af:0e:f1:
                    31:60:3d:ff:ed:2d:fa:08:b4:15:e2:5c:47:04:80:
                    63:c0:23:95:eb:af:51:43:07:04:95:8b:d3:64:2b:
                    24:c9:9d:0f:cd:f8:bb:13:5e:58:0f:15:0c:3c:2b:
                    61:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:5C:43:F4:18:09:16:7E:33:DF:9B:E1:7F:AC:A1:DF:49:EE:87:1B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77c4c62a-3f6d-4c1c-8bdb-3706246cbfd6/b02d7254-2264-3097-86e7-bab31bccdf77.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77c4c62a-3f6d-4c1c-8bdb-3706246cbfd6/77c4c62a-3f6d-4c1c-8bdb-3706246cbfd6.crl

            X509v3 Authority Key Identifier:
                keyid:E2:9D:E8:0D:86:E0:8B:FD:22:CF:FE:65:78:94:20:F0:BD:72:DF:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77c4c62a-3f6d-4c1c-8bdb-3706246cbfd6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.171.120.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7f:17:25:b0:46:14:1e:36:a4:fc:a9:52:39:6b:fe:a2:46:9a:
         65:40:2e:28:68:fb:6e:d0:ca:be:7d:08:ca:3d:12:7a:e1:24:
         61:23:b1:6b:83:67:81:2d:ab:e6:cd:86:1e:b6:10:18:c2:8d:
         07:31:5f:1a:ea:0e:a7:ad:92:c1:d6:1d:b5:60:bb:ed:1e:c8:
         d0:93:cd:a4:3c:be:f4:65:66:82:b6:88:36:b4:68:d8:63:f9:
         1c:f4:3e:ac:24:4f:83:5b:68:05:b1:49:dc:12:1a:90:29:19:
         af:ac:e9:99:90:2b:5b:67:b8:23:bf:28:22:24:db:a1:0d:cc:
         97:34:2f:fa:c5:7a:f5:71:36:dd:66:25:21:eb:c9:6f:6b:74:
         b9:41:94:0b:18:75:b0:17:0a:32:1a:52:f1:6b:b3:f5:4a:47:
         ba:f9:6f:67:e2:d3:cd:06:1e:44:7e:38:1a:7f:dc:81:7b:57:
         b6:1f:7b:6c:7b:87:7f:51:5b:21:86:98:f5:e2:c8:60:9a:59:
         f5:84:f2:9d:b2:50:82:c3:2b:ff:af:31:b8:1a:fa:9e:f4:47:
         7c:e0:21:25:b5:4d:f6:9e:dc:f9:cf:35:1c:6f:db:52:c6:50:
         a1:ec:20:3e:d7:28:81:79:61:dc:83:12:75:f1:f2:33:d9:d7:
         ee:8d:f6:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 01:42:11 2025 by rpki-client