Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/e490c157-7668-37e4-8bb5-f656ce640471.roa
File:                     e490c157-7668-37e4-8bb5-f656ce640471.roa (raw, json)
Hash identifier:          DISHYRBcJy2EuG68jhmwMLP/QEL7hWjHirGPDhkXxKs=
Subject key identifier:   3D:27:7F:F9:B9:24:9D:F2:65:1B:C2:FF:54:32:30:34:A5:E6:78:42
Certificate issuer:       /CN=b433f23f-334b-4db9-9fe1-bef76714d97f
Certificate serial:       010D0C9F4328584B6BC760ABCE55C98BD69B2380
Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/e490c157-7668-37e4-8bb5-f656ce640471.roa
Signing time:             Sun 05 Oct 2025 13:00:40 +0000
ROA not before:           Sun 05 Oct 2025 13:00:40 +0000
ROA not after:            Sat 03 Jan 2026 14:00:40 +0000
asID:                     3257
IP address blocks:        198.66.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:6b:c7:60:ab:ce:55:c9:8b:d6:9b:23:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f
        Validity
            Not Before: Oct  5 13:00:40 2025 GMT
            Not After : Jan  3 14:00:40 2026 GMT
        Subject: CN=b050cadf-9cdc-48f5-be04-fc6314e08046
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:7a:85:22:86:1a:0a:a9:ce:f4:c6:c3:a5:8b:
                    86:7f:e9:4d:e3:7f:df:b6:dd:88:55:cd:99:f6:a2:
                    69:92:ed:62:3b:d7:90:e8:cf:c1:09:e2:9e:5c:cf:
                    46:0d:fb:3f:0a:e8:9b:29:e3:90:e2:43:d4:f0:76:
                    35:41:c9:d7:7e:7f:19:56:96:21:22:3d:46:af:f6:
                    dc:08:e4:8c:78:4e:20:c5:4d:13:06:c4:e8:2c:d1:
                    04:00:6c:f7:dd:32:17:f4:71:a7:ba:89:a5:c7:80:
                    b5:28:65:d4:51:c6:ea:fa:2c:2e:c8:9d:30:84:2c:
                    29:02:f1:5c:38:a5:cf:24:3e:2e:de:22:e3:f1:cc:
                    c6:fa:c5:a5:81:4f:f4:cd:dd:3a:68:bc:78:08:d2:
                    aa:99:50:7b:dd:17:00:f2:bb:5a:6e:41:09:7f:71:
                    8d:b6:9d:37:bf:08:4b:26:86:89:e9:54:a9:fa:2e:
                    27:bb:01:1c:d7:cc:34:b7:17:97:7e:37:c7:b4:80:
                    0b:70:c0:e5:a0:df:1a:37:88:07:48:c1:9b:95:c0:
                    1d:bd:3f:4b:bc:1c:52:a1:3a:cd:2f:40:6b:4d:16:
                    d8:c6:ee:e4:2d:19:51:8a:0c:74:f0:72:fc:1a:54:
                    7d:d3:9b:eb:8e:18:70:22:19:8f:5d:7d:c3:16:25:
                    df:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:27:7F:F9:B9:24:9D:F2:65:1B:C2:FF:54:32:30:34:A5:E6:78:42
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/e490c157-7668-37e4-8bb5-f656ce640471.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl

            X509v3 Authority Key Identifier:
                keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.66.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7c:e0:61:6c:4f:a1:48:5d:2d:02:f2:31:dc:17:f3:18:66:85:
         ad:ff:26:fa:48:02:30:a5:fd:51:45:46:89:8a:d9:c0:47:ac:
         58:6d:34:f2:2b:1c:c2:b5:3c:4a:f3:28:ae:9c:93:37:ba:70:
         b5:e8:58:a0:75:4c:07:89:ec:91:91:12:ec:5d:2c:84:08:c7:
         9b:db:56:d8:71:7a:68:97:1c:4a:e4:fe:45:4c:95:a4:78:af:
         84:1f:7e:a4:a8:92:81:f3:02:39:75:6b:c6:a6:3c:18:64:8c:
         7e:df:db:92:8b:f5:50:21:56:8d:06:24:95:4d:89:ad:1b:dd:
         62:60:a8:fd:f8:c1:b9:91:2c:b6:5e:f9:8d:7a:c7:29:70:9f:
         c1:ef:e5:c3:97:6e:55:42:f0:18:ec:ee:da:6b:f5:12:90:e4:
         54:0a:46:62:f4:86:ac:32:d8:bf:f8:53:21:df:fa:6c:5e:15:
         99:b6:d1:6a:5b:0d:5d:82:48:11:9f:77:ce:a9:90:b8:b3:71:
         5b:84:ff:02:8c:9c:63:c0:83:e8:5c:30:f0:fa:87:41:3a:0b:
         cb:4c:d3:07:8c:0a:9c:a7:88:24:24:6d:7e:4e:67:60:1b:96:
         2c:5b:18:86:53:d6:5e:94:c5:54:3f:9e:9d:55:09:45:75:55:
         2c:22:aa:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 05:24:06 2025 by rpki-client