Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1d639366-c044-456e-b8c8-0de04a543a0c/d13f9f99-e597-3904-ba20-da0c91f2c353.roa
File:                     d13f9f99-e597-3904-ba20-da0c91f2c353.roa (raw, json)
Hash identifier:          cJ7Q4HjNiTjcoawPc6wlJb8a39zJMLXngMFj/R+CFb4=
Subject key identifier:   3D:EA:CD:0D:EE:90:77:40:2B:4E:02:E5:F3:88:50:55:A4:F5:35:BE
Certificate issuer:       /CN=1d639366-c044-456e-b8c8-0de04a543a0c
Certificate serial:       010D0C9F4328584AE19686CCE3975EA27A082EC0
Authority key identifier: FC:35:57:C9:0E:3D:B5:19:05:85:A4:A7:E7:10:E9:65:6A:04:67:87
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1d639366-c044-456e-b8c8-0de04a543a0c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1d639366-c044-456e-b8c8-0de04a543a0c/d13f9f99-e597-3904-ba20-da0c91f2c353.roa
Signing time:             Sun 17 Aug 2025 01:00:32 +0000
ROA not before:           Sun 17 Aug 2025 01:00:32 +0000
ROA not after:            Sat 15 Nov 2025 02:00:32 +0000
asID:                     27608
IP address blocks:        66.161.237.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1d639366-c044-456e-b8c8-0de04a543a0c/1d639366-c044-456e-b8c8-0de04a543a0c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1d639366-c044-456e-b8c8-0de04a543a0c/1d639366-c044-456e-b8c8-0de04a543a0c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1d639366-c044-456e-b8c8-0de04a543a0c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:e1:96:86:cc:e3:97:5e:a2:7a:08:2e:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1d639366-c044-456e-b8c8-0de04a543a0c
        Validity
            Not Before: Aug 17 01:00:32 2025 GMT
            Not After : Nov 15 02:00:32 2025 GMT
        Subject: CN=f48dfe2e-9f2c-46cd-a43b-9429b441e592
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:73:69:de:49:d5:24:fd:fc:e3:05:18:58:f0:
                    e6:fd:43:de:17:46:73:f1:78:e1:dc:27:73:6f:21:
                    e0:e8:30:b7:e3:92:8c:b2:fc:e2:6d:db:ed:79:a8:
                    c1:43:19:54:60:c9:82:94:35:1f:a4:7f:9b:b9:8d:
                    83:a3:c4:43:db:f7:b8:a5:3b:c5:4b:a4:a5:43:7d:
                    26:99:06:e0:72:22:99:1d:60:bb:a1:e7:2b:0c:bd:
                    0f:eb:ef:25:78:b6:6f:42:ff:6a:5d:d0:04:9e:bc:
                    6c:7e:d2:6a:7e:cf:af:44:27:66:6c:51:d1:e9:4e:
                    52:7a:18:71:59:f1:ad:e7:a8:89:b1:85:24:1c:a1:
                    8a:f1:47:38:f1:f4:1c:0b:39:04:35:4a:f7:4b:c1:
                    22:6d:ed:73:0b:0b:5d:c6:e9:8c:32:c6:11:18:8e:
                    07:3e:c6:bc:2a:ae:79:cf:a9:a1:97:db:8c:78:df:
                    e4:ad:b5:82:d4:0c:72:7f:d1:58:ec:a8:6b:a3:9e:
                    f3:07:d7:6d:37:4a:ec:28:41:97:64:68:d4:0c:ad:
                    44:88:c9:67:97:a8:36:db:8f:4d:ac:e3:61:3f:08:
                    66:b2:b1:e6:3a:5e:47:c1:ee:cf:06:61:45:c1:4b:
                    fa:19:5c:91:b0:49:50:b0:51:90:18:5c:37:43:6b:
                    86:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:EA:CD:0D:EE:90:77:40:2B:4E:02:E5:F3:88:50:55:A4:F5:35:BE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1d639366-c044-456e-b8c8-0de04a543a0c/d13f9f99-e597-3904-ba20-da0c91f2c353.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1d639366-c044-456e-b8c8-0de04a543a0c/1d639366-c044-456e-b8c8-0de04a543a0c.crl

            X509v3 Authority Key Identifier:
                keyid:FC:35:57:C9:0E:3D:B5:19:05:85:A4:A7:E7:10:E9:65:6A:04:67:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1d639366-c044-456e-b8c8-0de04a543a0c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.161.237.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4c:87:98:29:8d:35:cb:d8:c6:39:f4:c3:26:41:3c:56:a5:47:
         2c:ad:db:a1:2b:fe:a3:ad:48:04:6d:7d:b1:43:17:ad:a8:d4:
         0a:aa:ae:72:90:66:83:23:de:e7:38:63:4a:3f:75:76:ad:83:
         a5:d7:35:c7:ca:5b:19:58:dc:2a:cc:5c:9c:ba:33:88:07:89:
         3e:93:de:b4:74:53:37:38:01:24:0d:c1:c2:1c:68:b3:df:73:
         e3:60:82:8a:5e:d1:43:09:b3:62:36:7e:c9:d2:09:8c:0e:07:
         83:ff:12:87:96:0a:11:a1:0f:11:0b:0b:11:70:35:e9:99:59:
         f5:9d:fc:88:14:89:d7:2b:16:61:b6:a1:7c:66:2e:26:2f:7e:
         44:f7:91:2e:ed:61:a3:63:62:c5:54:ea:97:ca:b9:07:0c:51:
         b2:7a:1c:21:a8:41:fd:e4:68:2c:54:34:87:d1:22:74:54:fc:
         18:4f:89:5a:9c:7c:35:a1:50:f7:15:6f:de:b2:64:62:17:49:
         ba:92:f9:6a:5f:d0:53:31:60:1a:37:22:2b:49:f2:f3:2e:47:
         25:0a:cd:e2:47:73:49:cf:91:05:e8:5f:db:d7:65:1f:68:d4:
         38:af:b6:8d:c0:16:f1:a7:53:00:75:6d:5a:3e:98:4e:1d:f3:
         cd:67:24:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 04:40:26 2025 by rpki-client