Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0094aab-7ad1-4889-853f-ce946552206b/415667aa-fecc-38bc-97d1-49fe9ab77510.roa
File:                     415667aa-fecc-38bc-97d1-49fe9ab77510.roa (raw, json)
Hash identifier:          rqWmLwijdMcLxESCIkqklqoVoiN6wDkjB7mh23Cp3hI=
Subject key identifier:   E3:CE:8A:B7:72:5A:AA:66:8A:6C:85:93:42:11:34:0A:11:CF:FB:1C
Certificate issuer:       /CN=c0094aab-7ad1-4889-853f-ce946552206b
Certificate serial:       010D0C9F4328584B2A2C38285EA4A42554B16780
Authority key identifier: 8F:7B:E0:51:77:DA:9D:4E:21:90:35:D7:81:CD:ED:A1:00:C7:B9:BE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0094aab-7ad1-4889-853f-ce946552206b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0094aab-7ad1-4889-853f-ce946552206b/415667aa-fecc-38bc-97d1-49fe9ab77510.roa
Signing time:             Fri 12 Sep 2025 01:00:32 +0000
ROA not before:           Fri 12 Sep 2025 01:00:32 +0000
ROA not after:            Thu 11 Dec 2025 02:00:32 +0000
asID:                     109
IP address blocks:        66.187.208.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0094aab-7ad1-4889-853f-ce946552206b/c0094aab-7ad1-4889-853f-ce946552206b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0094aab-7ad1-4889-853f-ce946552206b/c0094aab-7ad1-4889-853f-ce946552206b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0094aab-7ad1-4889-853f-ce946552206b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:2a:2c:38:28:5e:a4:a4:25:54:b1:67:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c0094aab-7ad1-4889-853f-ce946552206b
        Validity
            Not Before: Sep 12 01:00:32 2025 GMT
            Not After : Dec 11 02:00:32 2025 GMT
        Subject: CN=e08bb4d0-5aa4-4055-9427-56195b72d257
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:a5:5c:ef:27:47:ce:d0:02:e2:f3:0a:64:ba:
                    f4:05:3c:c0:c8:cf:cd:4f:7e:dd:fb:66:3c:ce:1a:
                    f5:f3:69:5a:2e:c2:2e:5a:90:3b:bd:19:b9:e8:84:
                    ee:08:20:75:62:91:91:31:54:3c:60:f7:a4:91:77:
                    43:7d:49:35:40:f1:a8:bc:7c:70:4b:32:f2:a3:1a:
                    3f:42:3f:91:ed:1a:dd:fa:e3:22:be:66:19:7c:75:
                    bf:23:0e:79:96:8d:ea:54:b1:4d:ec:eb:29:0d:dc:
                    4a:f2:4c:fe:30:19:e7:aa:4f:fd:57:ae:6b:81:78:
                    99:2b:16:ac:8d:3e:7d:c3:d9:a0:8e:61:fa:81:13:
                    d6:2c:06:5c:a4:5b:2d:29:4a:02:10:80:7c:2e:87:
                    d2:2f:a2:c4:73:74:67:b6:4a:2c:94:bd:b5:6e:2c:
                    e6:43:55:c2:4a:03:a3:92:d2:88:7e:be:d0:66:f5:
                    f8:18:bb:72:eb:bd:24:53:66:ed:2e:ab:ce:e6:93:
                    4a:2d:92:fb:23:45:c7:a6:27:c1:b9:66:44:c3:1f:
                    cc:06:7f:98:ba:9a:62:b9:02:e5:bd:0d:90:07:00:
                    79:dd:13:ec:b5:0b:8c:6b:06:97:f1:b1:90:47:65:
                    8e:fd:9e:ee:91:77:69:0d:fe:71:57:df:56:1a:7e:
                    e6:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:CE:8A:B7:72:5A:AA:66:8A:6C:85:93:42:11:34:0A:11:CF:FB:1C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0094aab-7ad1-4889-853f-ce946552206b/415667aa-fecc-38bc-97d1-49fe9ab77510.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0094aab-7ad1-4889-853f-ce946552206b/c0094aab-7ad1-4889-853f-ce946552206b.crl

            X509v3 Authority Key Identifier:
                keyid:8F:7B:E0:51:77:DA:9D:4E:21:90:35:D7:81:CD:ED:A1:00:C7:B9:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0094aab-7ad1-4889-853f-ce946552206b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.187.208.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         37:4b:a6:fe:1c:39:ac:1c:47:f0:98:df:00:e1:ce:fa:c7:14:
         75:40:27:3c:38:eb:44:f9:79:ce:c3:41:96:de:19:5b:f2:e5:
         90:c5:b9:ce:97:e5:61:8d:34:44:68:e3:8e:20:94:d3:07:47:
         d1:5f:bf:b6:16:32:99:21:6e:fe:ad:96:ac:5f:80:f3:5d:f6:
         11:2d:03:c2:ed:c8:0a:7a:c3:bf:48:54:6a:fa:b3:88:f2:7c:
         ff:b9:b9:ee:b6:c4:03:df:41:f6:87:28:5b:96:90:59:e8:90:
         49:7f:24:8f:74:18:47:a8:c0:14:19:d3:ac:77:35:a0:89:00:
         1d:9e:66:1f:56:d5:9d:95:56:e5:39:db:f7:7e:06:e8:cc:1e:
         01:ab:c5:07:f2:87:16:29:66:15:ef:37:4e:1f:ab:9b:c5:ab:
         d7:af:cb:1a:b3:9d:de:9e:7c:73:86:31:9c:1f:86:76:41:91:
         5a:47:99:41:89:9e:f5:69:21:dc:95:03:9a:c7:66:4a:67:1b:
         5d:14:46:b0:5e:4f:5d:c3:8d:ff:38:3f:09:92:8c:2e:a2:19:
         e1:7f:0d:da:cb:6f:f9:d5:fd:c9:88:43:d5:0f:e1:b7:6d:21:
         2a:85:3a:c2:21:10:dd:19:4a:6b:62:4a:c6:7e:43:55:2e:57:
         8d:86:8f:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 16:14:54 2025 by rpki-client