Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/866b2df4-0f0a-4b84-9eb7-c185258f5294/624ff661-6f73-31bb-813f-b64dbeff8dea.roa
File:                     624ff661-6f73-31bb-813f-b64dbeff8dea.roa (raw, json)
Hash identifier:          J7WneVWd42UjXX64CQuTcByZnQYG4d0/HQSPVoiI0SQ=
Subject key identifier:   82:4B:C9:27:51:D5:B8:9B:FF:D7:CF:0F:A8:FF:7B:AB:43:13:3D:CD
Certificate issuer:       /CN=866b2df4-0f0a-4b84-9eb7-c185258f5294
Certificate serial:       010D0C9F4328584B92DCF1B1D74DFC58D16501C0
Authority key identifier: 95:76:5B:F1:DC:12:D1:40:FA:AD:5B:D4:EB:65:17:42:16:BE:5A:7B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/866b2df4-0f0a-4b84-9eb7-c185258f5294.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/866b2df4-0f0a-4b84-9eb7-c185258f5294/624ff661-6f73-31bb-813f-b64dbeff8dea.roa
Signing time:             Sun 19 Oct 2025 13:00:39 +0000
ROA not before:           Sun 19 Oct 2025 13:00:39 +0000
ROA not after:            Sat 17 Jan 2026 14:00:39 +0000
asID:                     611
IP address blocks:        67.210.128.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/866b2df4-0f0a-4b84-9eb7-c185258f5294/866b2df4-0f0a-4b84-9eb7-c185258f5294.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/866b2df4-0f0a-4b84-9eb7-c185258f5294/866b2df4-0f0a-4b84-9eb7-c185258f5294.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/866b2df4-0f0a-4b84-9eb7-c185258f5294.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 Oct 2025 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:92:dc:f1:b1:d7:4d:fc:58:d1:65:01:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=866b2df4-0f0a-4b84-9eb7-c185258f5294
        Validity
            Not Before: Oct 19 13:00:39 2025 GMT
            Not After : Jan 17 14:00:39 2026 GMT
        Subject: CN=6418eb6a-0c73-465c-bc68-5697fa6061b2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:1a:f4:e7:75:67:e6:e7:61:18:1c:99:96:ae:
                    f4:52:d2:f5:66:bf:aa:69:87:58:34:0d:cb:cf:72:
                    88:a3:a4:c6:c8:93:7b:f2:65:08:f8:ef:a8:c9:59:
                    76:10:bf:f0:be:49:ee:7e:5b:8b:27:70:9d:48:00:
                    34:da:c8:e6:00:e4:c9:f8:9c:2a:16:25:b8:00:c9:
                    ed:44:3a:c6:31:e3:f2:96:20:c7:e2:4c:4b:cd:c7:
                    1e:c0:b5:1a:e1:33:fd:77:08:41:27:89:39:5b:86:
                    1d:a1:97:c8:5f:3d:cf:a8:3e:73:40:fa:9b:9f:90:
                    bc:e8:1f:b3:33:f6:6d:62:05:12:7d:9f:9e:96:9e:
                    e4:07:c4:bb:50:c0:96:75:c4:8a:5b:b1:10:65:a7:
                    a0:95:76:9d:6d:bd:69:51:37:4f:19:41:02:62:dd:
                    27:67:89:97:f8:7f:17:8b:c8:62:0f:63:17:49:3e:
                    4e:71:6c:6f:dc:00:3d:b3:5b:09:88:66:a5:af:22:
                    01:fa:79:a2:73:d8:3b:51:d3:26:ec:3f:52:ba:49:
                    25:9f:8f:93:c2:44:4e:db:75:37:3b:37:6e:69:9c:
                    6b:22:22:c1:1e:b3:e3:68:9b:a5:bb:a2:ac:0d:56:
                    76:26:75:48:14:63:a8:d5:18:a3:aa:5a:3d:61:24:
                    06:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:4B:C9:27:51:D5:B8:9B:FF:D7:CF:0F:A8:FF:7B:AB:43:13:3D:CD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/866b2df4-0f0a-4b84-9eb7-c185258f5294/624ff661-6f73-31bb-813f-b64dbeff8dea.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/866b2df4-0f0a-4b84-9eb7-c185258f5294/866b2df4-0f0a-4b84-9eb7-c185258f5294.crl

            X509v3 Authority Key Identifier:
                keyid:95:76:5B:F1:DC:12:D1:40:FA:AD:5B:D4:EB:65:17:42:16:BE:5A:7B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/866b2df4-0f0a-4b84-9eb7-c185258f5294.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.210.128.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5b:59:26:34:2b:a0:9c:20:24:d4:84:13:25:2f:58:ab:71:6f:
         c6:5d:0b:55:29:3b:4e:32:3c:e7:65:36:f4:ff:36:56:4a:b5:
         50:f7:75:28:57:3b:b8:cf:e7:66:1c:09:19:ee:37:fa:73:6f:
         8c:cc:12:e3:28:f5:7c:83:c6:1b:eb:4d:6e:35:74:50:51:c8:
         65:bf:2b:3a:81:99:8f:c9:1e:89:18:e7:8d:45:89:89:f4:a4:
         a2:4c:14:02:a1:f1:35:ee:7a:4e:e1:b0:7b:de:40:c7:03:33:
         1e:c0:7c:ca:96:75:ae:ab:81:34:9f:07:ff:7e:18:df:e9:86:
         37:9b:dd:1e:29:0e:5a:9d:f4:50:ea:ee:6d:ea:3b:94:ac:5a:
         d7:e4:87:d6:ab:eb:e2:81:b9:95:49:d9:02:8a:dd:5e:d6:53:
         6f:16:25:9f:d8:ad:4e:cc:dc:e9:e9:67:24:f3:b9:32:aa:84:
         fe:a7:0d:45:95:61:03:22:54:fb:ae:43:29:ee:75:b7:90:6e:
         8a:e0:da:a8:d3:63:bc:7c:22:cc:a9:35:57:3e:9b:28:9f:ea:
         8e:44:e0:49:9a:ba:6a:7c:98:69:a8:3d:79:25:04:4b:ef:2b:
         2f:ff:67:b0:a4:e8:15:d4:9e:3b:70:65:1f:db:8d:62:b6:21:
         ee:af:fe:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 21:19:53 2025 by rpki-client