Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/44aef50d-cbb0-3981-9715-aa08ada43fe2.roa
File:                     44aef50d-cbb0-3981-9715-aa08ada43fe2.roa (raw, json)
Hash identifier:          TaoBokr7/iuJfN86b1xsm6zqapG4+RArHZWthuno09Q=
Subject key identifier:   37:F6:71:E4:F2:C4:AF:62:E6:7B:9A:3E:1A:DA:9B:75:A1:33:F5:CE
Certificate issuer:       /CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a
Certificate serial:       010D0C9F4328584AEC9AF020EAAE69814579B6E0
Authority key identifier: 49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/44aef50d-cbb0-3981-9715-aa08ada43fe2.roa
Signing time:             Wed 20 Aug 2025 23:43:43 +0000
ROA not before:           Wed 20 Aug 2025 23:43:43 +0000
ROA not after:            Wed 19 Nov 2025 00:43:43 +0000
asID:                     23473
IP address blocks:        66.253.190.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:ec:9a:f0:20:ea:ae:69:81:45:79:b6:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a
        Validity
            Not Before: Aug 20 23:43:43 2025 GMT
            Not After : Nov 19 00:43:43 2025 GMT
        Subject: CN=ecbfd668-1b5c-4427-a80b-81a16a80f8bb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:45:08:a3:ff:6d:f7:3d:1a:9b:cd:cf:17:eb:
                    6d:c8:16:e9:d8:fe:36:af:29:0c:5f:d5:90:c3:8f:
                    28:7b:72:d5:4d:f3:c4:01:22:cc:c3:48:78:35:34:
                    a5:04:57:c5:7d:80:f5:14:e2:55:73:88:be:3c:0d:
                    ab:31:a6:b0:d9:75:25:c3:51:57:7d:4f:e7:3d:91:
                    ed:6e:4f:5e:3e:c0:37:d9:8d:96:e7:6d:d5:f9:d0:
                    8b:0d:0b:81:65:79:ab:bb:0c:1d:82:c9:24:f7:76:
                    79:c1:30:c6:04:f6:b2:c8:2e:4c:4e:99:73:16:64:
                    bd:0c:88:3e:a9:f6:d7:a1:98:35:c1:66:07:33:d3:
                    a9:ac:2c:79:05:ae:87:0a:cb:e4:d7:59:1a:ee:38:
                    2b:c3:8b:01:50:b4:97:9f:11:10:57:f1:b2:c2:ad:
                    4a:2f:26:85:c9:7a:fc:59:e2:f1:1b:d6:64:e8:58:
                    79:e8:7c:11:8e:01:f2:9e:8f:2e:cd:96:8d:ea:0c:
                    aa:d8:15:51:fa:f9:34:83:0e:75:e2:b8:74:80:c6:
                    5c:91:c3:ed:d1:a6:d2:e3:eb:d0:f6:fa:e1:ea:e3:
                    44:cd:92:aa:12:a0:05:f6:26:61:3d:80:39:23:d6:
                    0e:a4:8a:33:4b:3d:2e:c8:8b:b3:c2:63:ed:b9:18:
                    ae:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:F6:71:E4:F2:C4:AF:62:E6:7B:9A:3E:1A:DA:9B:75:A1:33:F5:CE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/44aef50d-cbb0-3981-9715-aa08ada43fe2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl

            X509v3 Authority Key Identifier:
                keyid:49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.253.190.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         21:2d:2d:19:40:a3:fa:42:99:6f:09:43:80:d3:e3:b4:aa:e0:
         c8:75:5b:1b:be:d3:0e:de:17:a1:30:6e:8f:35:2a:69:c7:ab:
         4c:91:cc:63:1d:02:8f:35:1e:d7:91:3f:99:ce:b2:ed:50:de:
         59:4d:7f:83:6c:2d:60:de:e1:d4:dc:81:12:8f:8d:c0:08:5b:
         7d:5c:bb:4a:3e:d2:1d:14:32:06:8c:e1:be:43:57:b2:37:4b:
         7c:0b:d2:38:17:e9:f2:1f:6f:64:41:1a:04:ea:5d:0c:e5:ac:
         3a:45:38:b6:42:42:be:a2:55:f5:9f:ce:ac:4f:8c:24:d4:40:
         81:85:15:20:4f:9e:7b:b8:55:07:3d:76:0b:2c:a3:fe:b8:ca:
         34:f6:0f:7d:d2:2a:9b:af:82:1d:38:ca:18:1a:ad:34:cb:d6:
         4e:ed:f6:25:d5:2e:09:80:7a:84:7e:88:c1:88:9e:6e:0f:cc:
         bb:05:1f:a6:26:41:85:cf:fc:e6:71:04:a9:ba:b7:94:bd:8a:
         cb:25:89:16:c7:33:25:3e:73:1c:05:3e:7c:80:3a:69:85:8b:
         f5:47:b6:e8:7f:63:53:2a:c1:2f:6e:ff:a3:1d:c8:74:79:bc:
         f2:5a:ac:44:14:b6:5a:91:66:30:c2:10:22:27:78:e7:85:46:
         b2:80:ba:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 22:10:11 2025 by rpki-client