Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/95437874-24a3-4971-a87b-95b645e257bb/a896ecf3-3dc7-3c62-be80-f59bd439d4a9.roa
File:                     a896ecf3-3dc7-3c62-be80-f59bd439d4a9.roa (raw, json)
Hash identifier:          a0737nG45QZYn7hcSb4pTUc73MW4nS0CiYgM13RZYJQ=
Subject key identifier:   03:CB:6E:47:DA:CB:73:65:02:FA:F7:BC:CB:C2:D0:BC:14:16:8D:51
Certificate issuer:       /CN=95437874-24a3-4971-a87b-95b645e257bb
Certificate serial:       010D0C9F4328584B2496D50A06937E69AB010C00
Authority key identifier: 0D:9A:58:69:BC:33:C0:D1:95:9C:3D:00:B9:00:3B:B9:43:8A:4E:69
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/95437874-24a3-4971-a87b-95b645e257bb.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/95437874-24a3-4971-a87b-95b645e257bb/a896ecf3-3dc7-3c62-be80-f59bd439d4a9.roa
Signing time:             Wed 10 Sep 2025 01:00:33 +0000
ROA not before:           Wed 10 Sep 2025 01:00:33 +0000
ROA not after:            Tue 09 Dec 2025 02:00:33 +0000
asID:                     36556
IP address blocks:        66.148.32.0/19 maxlen: 19
                          98.96.128.0/19 maxlen: 19
                          104.151.192.0/19 maxlen: 19
                          170.176.224.0/20 maxlen: 20
                          204.144.160.0/20 maxlen: 20
                          2602:fdfc::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/95437874-24a3-4971-a87b-95b645e257bb/95437874-24a3-4971-a87b-95b645e257bb.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/95437874-24a3-4971-a87b-95b645e257bb/95437874-24a3-4971-a87b-95b645e257bb.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/95437874-24a3-4971-a87b-95b645e257bb.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Oct 2025 04:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:24:96:d5:0a:06:93:7e:69:ab:01:0c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=95437874-24a3-4971-a87b-95b645e257bb
        Validity
            Not Before: Sep 10 01:00:33 2025 GMT
            Not After : Dec  9 02:00:33 2025 GMT
        Subject: CN=b72cf755-66d6-4789-a090-82a8310c2e99
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:7c:52:bd:ab:6b:9b:a9:04:cf:bc:9f:cb:1c:
                    e2:0d:f8:86:ec:2d:5b:36:bc:89:2a:26:b6:c2:1d:
                    91:ea:da:7c:77:7b:fc:8f:e8:c1:32:9c:07:e1:84:
                    ae:38:25:0e:97:e1:d9:9c:bd:80:e8:80:84:5f:43:
                    56:3d:05:18:68:ea:82:5b:89:ac:d9:f6:57:ae:db:
                    08:d4:b5:72:8f:7a:84:8c:ff:9f:ba:e6:44:0b:2f:
                    29:74:ed:10:81:81:2e:61:02:16:9b:64:d0:30:00:
                    c8:da:14:39:c0:4b:7e:0c:94:5b:e6:40:5b:eb:8d:
                    ca:c6:fe:89:61:89:13:4f:99:71:5e:af:29:a5:5f:
                    49:c6:70:16:3c:58:68:30:69:56:47:4a:c3:fb:05:
                    f8:d9:46:ae:89:38:a1:9f:9b:94:68:72:00:52:47:
                    df:46:64:ef:85:31:29:19:60:2f:90:b6:95:e0:f0:
                    3e:3c:ed:1f:ea:ff:9a:fd:40:95:b9:9e:32:77:de:
                    c5:bb:eb:04:ec:5a:fd:82:1c:35:04:62:b9:6f:1e:
                    e6:41:bf:64:26:22:90:a4:1d:1e:2a:e9:1d:fe:2f:
                    5f:37:53:8d:a8:03:a3:10:75:5d:54:4c:df:b2:d2:
                    d4:2f:57:0a:86:69:08:42:28:c8:c6:c3:15:b3:58:
                    46:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:CB:6E:47:DA:CB:73:65:02:FA:F7:BC:CB:C2:D0:BC:14:16:8D:51
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/95437874-24a3-4971-a87b-95b645e257bb/a896ecf3-3dc7-3c62-be80-f59bd439d4a9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/95437874-24a3-4971-a87b-95b645e257bb/95437874-24a3-4971-a87b-95b645e257bb.crl

            X509v3 Authority Key Identifier:
                keyid:0D:9A:58:69:BC:33:C0:D1:95:9C:3D:00:B9:00:3B:B9:43:8A:4E:69

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/95437874-24a3-4971-a87b-95b645e257bb.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.148.32.0/19
                  98.96.128.0/19
                  104.151.192.0/19
                  170.176.224.0/20
                  204.144.160.0/20
                IPv6:
                  2602:fdfc::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         30:32:b9:05:d3:b0:54:38:65:18:4d:e4:3d:5e:00:ea:aa:d6:
         a9:ba:b9:a2:d5:d2:1c:46:f5:d5:98:1e:7b:bf:77:39:8e:c3:
         4c:22:12:ee:d7:13:8d:d7:45:4c:f5:db:c5:ac:d4:a1:8d:2a:
         b2:15:75:65:8c:ff:00:c0:e5:7e:94:ab:8a:b9:a0:07:ff:16:
         ae:ee:92:79:fb:ad:28:92:b0:f9:97:d0:68:b9:a6:2e:66:f2:
         65:25:6d:b9:da:7b:c2:5f:b3:cd:62:c9:5d:c6:8c:e1:f2:2c:
         ee:32:d6:1f:6b:35:e3:56:09:ce:79:6c:9b:37:67:f0:a9:a8:
         ca:85:13:83:d4:0f:bc:91:c3:1e:62:44:47:b4:48:88:d1:a8:
         d4:41:d6:68:f6:f6:44:73:90:48:f5:3e:39:b4:5c:19:e7:5d:
         0e:ea:7d:4f:87:93:35:12:28:ca:c9:de:e0:30:a5:22:5d:84:
         8b:78:dd:6e:c5:39:08:a4:2c:e9:c0:75:b2:dc:81:55:b8:ce:
         13:3f:22:98:f0:88:a9:37:b2:c5:1a:f6:bf:7f:c6:a9:d4:8b:
         5d:12:1a:80:ff:b1:f5:1e:93:02:3f:00:4e:eb:79:61:bc:a7:
         88:e1:fb:05:90:bb:ac:37:7e:ea:e9:f3:40:62:4b:11:69:14:
         16:ba:1b:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 09:54:15 2025 by rpki-client