Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37/315c3f15-ab55-3f8f-9301-9837e1593bf0.roa
File:                     315c3f15-ab55-3f8f-9301-9837e1593bf0.roa (raw, json)
Hash identifier:          MdejqqpRmSxHSgMBez6Ut6BmVZrCKWaSGOu2wh3LO3w=
Subject key identifier:   19:D9:30:9D:96:6F:03:DA:F6:7D:58:E2:38:5A:DE:C1:DA:37:AB:B1
Certificate issuer:       /CN=f240d902-7ba3-4aec-b663-471f0fabfe37
Certificate serial:       010D0C9F4328584B80B7581D833DBC95EEA14FE7
Authority key identifier: E4:57:D5:28:0C:09:9C:2A:7E:A8:A5:80:B1:6F:F6:B0:BA:4C:F1:1E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37/315c3f15-ab55-3f8f-9301-9837e1593bf0.roa
Signing time:             Mon 13 Oct 2025 01:00:29 +0000
ROA not before:           Mon 13 Oct 2025 01:00:29 +0000
ROA not after:            Sun 11 Jan 2026 02:00:29 +0000
asID:                     5511
IP address blocks:        66.96.32.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37/f240d902-7ba3-4aec-b663-471f0fabfe37.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37/f240d902-7ba3-4aec-b663-471f0fabfe37.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:80:b7:58:1d:83:3d:bc:95:ee:a1:4f:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f240d902-7ba3-4aec-b663-471f0fabfe37
        Validity
            Not Before: Oct 13 01:00:29 2025 GMT
            Not After : Jan 11 02:00:29 2026 GMT
        Subject: CN=5884c320-d6fb-495e-a5e3-d509913de374
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:da:6f:af:b1:7f:1a:b7:24:d0:25:b8:86:d0:
                    58:3f:02:a6:78:ce:ac:37:c5:98:5d:21:85:32:36:
                    ee:c3:0a:ba:21:c4:5d:04:6d:d0:98:f2:b9:9c:9e:
                    b4:00:53:fe:5b:fd:29:5f:13:1d:44:e9:cd:cb:c2:
                    fc:93:e6:43:81:73:0c:73:a4:2c:33:a9:4f:e9:08:
                    89:69:f7:d5:62:42:f9:ab:56:f6:13:98:ac:31:8c:
                    d7:16:4c:58:93:f6:4f:f9:47:37:b5:7c:bf:77:61:
                    95:c4:cf:1b:33:b9:f6:67:0f:02:df:75:41:f8:23:
                    3d:1f:31:93:6e:b7:fd:37:7f:41:0a:9c:e6:93:ac:
                    f9:8f:b5:af:69:35:49:dd:24:ea:68:90:af:86:9c:
                    cd:0c:78:fa:21:72:d1:da:34:ad:18:f5:aa:0a:5b:
                    e6:ef:cc:7e:30:db:0f:d0:c7:08:34:4d:a2:1a:da:
                    36:e1:bb:f3:06:b1:d3:ad:ee:82:49:7d:da:b9:87:
                    45:b8:8e:02:42:5a:0e:fa:6b:8d:39:af:ef:59:1b:
                    49:af:1a:f3:f2:24:fb:8b:55:87:0e:52:09:25:31:
                    0b:d2:ea:a1:78:c6:e1:fa:d5:5f:d5:b2:38:86:13:
                    78:43:a2:0d:44:ee:48:72:a9:b5:3a:d0:06:b7:90:
                    9f:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:D9:30:9D:96:6F:03:DA:F6:7D:58:E2:38:5A:DE:C1:DA:37:AB:B1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37/315c3f15-ab55-3f8f-9301-9837e1593bf0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37/f240d902-7ba3-4aec-b663-471f0fabfe37.crl

            X509v3 Authority Key Identifier:
                keyid:E4:57:D5:28:0C:09:9C:2A:7E:A8:A5:80:B1:6F:F6:B0:BA:4C:F1:1E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.96.32.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         36:87:65:45:08:83:51:bc:c9:04:87:50:2d:93:10:70:61:26:
         26:7d:7d:b6:b4:a6:7f:cb:e0:3f:80:62:7c:32:1a:7a:ef:2a:
         c6:50:f5:3f:e9:1c:ef:3e:6f:bc:e5:be:5c:18:6a:74:26:b0:
         3d:ce:be:e3:e1:8e:4d:ee:12:94:17:16:6e:48:b4:56:f0:44:
         39:58:b7:7b:7d:b4:ff:d8:dd:ff:80:10:ec:7c:94:2b:45:a1:
         eb:dd:cf:51:91:e6:6a:61:a1:64:61:74:aa:da:c7:8a:92:cd:
         c7:76:00:8a:21:48:f7:c5:0b:7c:1f:a7:da:cb:8c:6e:43:03:
         41:71:a6:e3:ae:e2:d7:cf:6b:50:08:a1:90:84:b4:3d:bd:67:
         0b:97:a7:14:08:ee:f8:e9:4e:2e:75:7d:da:2e:b8:14:56:4a:
         e8:58:1f:81:63:50:03:eb:85:a5:f7:90:0c:7d:2a:d5:c6:c3:
         c8:1c:07:94:92:0b:27:78:4d:c0:e3:b7:79:3d:da:f0:0e:7b:
         e9:50:04:7d:f4:8f:98:25:0f:d0:31:19:ca:56:06:7e:1f:e7:
         91:3d:63:64:ea:4b:12:51:93:26:eb:8b:f6:e6:30:b7:e6:6b:
         1a:ed:ba:fd:c2:f6:b3:f4:86:25:a9:b9:76:ca:eb:b8:a5:10:
         f2:d7:66:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 15:14:43 2025 by rpki-client