Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf/63617ee2-53df-32dc-a979-573d75fea872.roa
File:                     63617ee2-53df-32dc-a979-573d75fea872.roa (raw, json)
Hash identifier:          rUDOHd4C7rtmTOHQJFD4hnVZjbPAWFf8//2bU+REU40=
Subject key identifier:   C4:09:FA:DC:53:70:0B:82:2B:14:39:5B:07:6D:D0:8C:77:20:9F:78
Certificate issuer:       /CN=4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf
Certificate serial:       010D0C9F4328584B540C660FA6B4F215C0FCCCD0
Authority key identifier: D8:2B:96:CD:C2:38:E4:0E:17:FA:7A:F5:14:C2:56:60:9D:D2:71:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf/63617ee2-53df-32dc-a979-573d75fea872.roa
Signing time:             Sat 27 Sep 2025 01:00:33 +0000
ROA not before:           Sat 27 Sep 2025 01:00:33 +0000
ROA not after:            Fri 26 Dec 2025 02:00:33 +0000
asID:                     4213
IP address blocks:        66.180.192.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:54:0c:66:0f:a6:b4:f2:15:c0:fc:cc:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf
        Validity
            Not Before: Sep 27 01:00:33 2025 GMT
            Not After : Dec 26 02:00:33 2025 GMT
        Subject: CN=1098b745-b9a8-4858-aace-886e7bb05b5d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:20:04:b8:79:19:43:5b:6e:d7:0e:13:90:86:
                    6a:2c:73:cd:72:5a:3c:6f:83:83:3f:b5:c6:83:b4:
                    ab:88:8e:3d:8b:32:c6:2c:d6:79:97:20:5f:cf:59:
                    be:f4:a4:63:dd:d2:66:95:3f:c5:6f:62:66:5a:e8:
                    a9:cd:06:7b:af:8d:a4:9a:54:06:05:ab:93:6c:c2:
                    5c:b3:d3:ef:a8:d3:51:16:32:31:cf:5a:39:55:d0:
                    0b:3b:f8:a3:64:c2:63:c4:58:6c:b8:95:a2:f5:d9:
                    0f:a4:60:60:a1:e7:da:d4:50:db:e6:6f:4d:cc:a5:
                    82:7d:c6:21:1e:13:b9:92:8d:3b:1e:73:5d:77:fb:
                    82:06:5d:3c:fc:80:1b:9e:a3:ec:8a:a2:3f:a5:af:
                    e9:45:f1:3c:a3:4e:7c:64:f1:4c:07:33:d8:b9:4c:
                    31:3a:1a:3a:8f:3e:f3:5b:89:23:08:70:ae:8d:1d:
                    b3:61:8f:1d:40:eb:23:3c:98:33:20:25:0a:95:20:
                    6d:c0:b7:54:1f:a9:79:54:e4:61:0a:22:86:63:8c:
                    d2:c1:1e:96:66:bb:c3:50:7a:92:b5:94:50:d7:ee:
                    7f:85:41:7c:3a:77:ad:cf:09:1a:28:5a:31:0a:06:
                    75:58:8d:16:ff:40:38:96:2c:e3:f3:12:f2:5f:69:
                    90:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:09:FA:DC:53:70:0B:82:2B:14:39:5B:07:6D:D0:8C:77:20:9F:78
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf/63617ee2-53df-32dc-a979-573d75fea872.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf.crl

            X509v3 Authority Key Identifier:
                keyid:D8:2B:96:CD:C2:38:E4:0E:17:FA:7A:F5:14:C2:56:60:9D:D2:71:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.180.192.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0e:12:5d:0e:dc:68:f2:ec:f0:63:34:89:4a:7f:b5:7f:bf:9a:
         97:df:2c:51:35:85:5f:48:f7:f6:b5:ba:62:ee:d4:69:a3:ac:
         d3:d2:a5:71:85:62:1e:c3:db:4c:71:02:24:07:37:3b:1c:72:
         af:86:1e:ce:2a:34:36:5d:fc:78:1f:a2:63:62:5f:fc:a7:74:
         6c:22:7c:79:42:0e:56:a3:d6:19:c7:3f:df:a7:dd:ed:a3:d2:
         c3:64:d3:3e:d7:61:c6:46:0b:e1:77:ad:49:63:b9:87:af:86:
         2f:b3:59:11:ee:21:54:dc:ee:fc:76:d3:6a:e0:9e:43:44:49:
         dc:f0:3c:58:d6:57:29:9a:89:66:9e:cd:11:64:5c:45:1f:d1:
         b5:b3:04:4f:75:7c:f7:2a:b1:67:0a:49:0f:c5:8f:6a:bc:3a:
         b6:6c:de:75:1d:1d:8e:92:01:80:ef:ad:3f:05:1c:6e:d6:a0:
         11:f9:9e:a3:3f:79:aa:7e:b3:41:42:9c:1f:29:e2:11:79:69:
         16:6a:5e:8b:4d:0a:bd:d9:6a:78:ee:bf:d6:05:6e:26:e3:da:
         8b:a3:fc:76:e3:a8:b1:b5:84:eb:5a:46:aa:48:17:7e:65:17:
         74:42:dd:0c:6d:e1:64:db:c4:9e:ef:dd:97:f6:60:8a:b1:49:
         62:a8:e0:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 19:07:30 2025 by rpki-client