Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37/f4d33456-a8fc-3c40-8217-77838ab3fb5b.roa
File:                     f4d33456-a8fc-3c40-8217-77838ab3fb5b.roa (raw, json)
Hash identifier:          FD0V4T49D03Uijfah8YDWajuva9030BUGCb58hPY0UA=
Subject key identifier:   36:3B:B3:0F:8A:93:FD:09:77:46:78:13:1A:3D:AC:04:31:72:98:B8
Certificate issuer:       /CN=f240d902-7ba3-4aec-b663-471f0fabfe37
Certificate serial:       010D0C9F4328584B80B7582DCFC6613441891A80
Authority key identifier: E4:57:D5:28:0C:09:9C:2A:7E:A8:A5:80:B1:6F:F6:B0:BA:4C:F1:1E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37/f4d33456-a8fc-3c40-8217-77838ab3fb5b.roa
Signing time:             Mon 13 Oct 2025 01:00:29 +0000
ROA not before:           Mon 13 Oct 2025 01:00:29 +0000
ROA not after:            Sun 11 Jan 2026 02:00:29 +0000
asID:                     51964
IP address blocks:        66.96.32.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37/f240d902-7ba3-4aec-b663-471f0fabfe37.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37/f240d902-7ba3-4aec-b663-471f0fabfe37.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:80:b7:58:2d:cf:c6:61:34:41:89:1a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f240d902-7ba3-4aec-b663-471f0fabfe37
        Validity
            Not Before: Oct 13 01:00:29 2025 GMT
            Not After : Jan 11 02:00:29 2026 GMT
        Subject: CN=4e584e4a-b84d-4e76-9767-8d63316d3288
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:36:0c:b8:2f:46:59:8f:34:23:0b:b9:ba:fa:
                    43:74:cc:cf:2b:18:9f:76:69:7f:db:86:05:b9:de:
                    73:a4:eb:7f:68:94:e4:eb:32:7b:47:0c:e2:78:59:
                    3d:22:36:c2:25:52:d5:58:b2:ad:97:6a:71:ad:5d:
                    f0:3f:91:91:e0:02:1d:37:7d:dd:5c:3d:80:02:bd:
                    17:a0:6c:87:10:fb:c4:c3:48:d6:06:f2:f4:3b:6a:
                    03:7c:22:f5:17:37:1b:14:60:3b:59:39:52:b5:7b:
                    09:35:09:2d:92:76:2f:68:b2:42:9f:f4:82:c4:89:
                    35:a4:9a:83:73:c8:db:40:69:ca:2d:2b:c9:14:2a:
                    14:d0:77:2c:f2:f7:f3:ec:f5:bb:67:c9:f2:93:f4:
                    2e:08:a9:72:ca:6e:06:e7:e7:91:39:5c:cc:b5:cf:
                    bd:97:e1:f9:78:89:bf:e9:d6:90:64:2f:dc:28:81:
                    58:8d:7d:47:f4:8f:5c:b1:17:9b:8e:b0:43:e3:32:
                    6a:6d:4c:08:31:20:fe:97:c0:62:9a:0d:51:89:49:
                    34:9c:6e:51:0c:a7:08:e5:04:56:58:00:0f:cc:ab:
                    a3:08:3c:00:e1:10:fa:cc:63:4e:74:f3:91:03:40:
                    79:4a:88:ca:35:7f:bc:b7:43:5f:92:42:de:1e:d9:
                    32:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:3B:B3:0F:8A:93:FD:09:77:46:78:13:1A:3D:AC:04:31:72:98:B8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37/f4d33456-a8fc-3c40-8217-77838ab3fb5b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37/f240d902-7ba3-4aec-b663-471f0fabfe37.crl

            X509v3 Authority Key Identifier:
                keyid:E4:57:D5:28:0C:09:9C:2A:7E:A8:A5:80:B1:6F:F6:B0:BA:4C:F1:1E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.96.32.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a1:ae:4d:94:b1:a5:9a:b6:61:c2:bf:01:67:3f:97:f3:37:a2:
         67:2c:ae:43:c5:78:a1:78:a9:27:3a:77:08:5f:e2:1b:3c:7a:
         ee:4f:d4:0a:3e:e6:65:7f:2b:ed:3e:5d:39:dc:ec:2f:59:a4:
         17:66:c9:25:d6:7e:a0:42:b5:d9:4c:f8:4e:c3:2c:cf:9d:7c:
         b7:37:56:22:dc:21:27:e1:63:06:f6:86:6a:9e:58:1a:40:fe:
         7d:c8:d1:fa:04:a1:e9:20:66:c5:c9:81:ed:53:91:7a:db:48:
         fd:e1:0c:70:f3:cd:03:00:0c:c3:c9:f9:de:05:42:b5:d6:f6:
         6c:ea:00:83:eb:04:3f:90:f6:89:4f:f8:2c:0c:2f:28:1f:d4:
         54:9e:b6:8d:d0:83:be:85:bb:0d:e3:bb:21:07:4f:40:03:30:
         4c:bb:09:60:e2:97:a9:b9:8e:2f:ee:1f:4c:3e:85:38:0b:9e:
         8f:63:46:85:c8:f4:75:23:2b:ca:e5:d3:f3:d4:7b:6e:98:2b:
         79:82:31:d8:21:5b:f6:cf:b6:05:95:46:86:ff:4c:22:ad:ac:
         cd:01:1f:54:22:21:dd:66:0e:8b:16:06:51:31:b4:b9:10:4d:
         6c:cb:6f:2c:b4:52:a6:48:85:7f:5a:ca:b3:cd:87:44:08:fe:
         0c:e9:7f:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 05:30:16 2025 by rpki-client