Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/e9e094a2-adfc-3ce1-b208-ccdf9a603bd7.roa
File:                     e9e094a2-adfc-3ce1-b208-ccdf9a603bd7.roa (raw, json)
Hash identifier:          rFxs4ldvo5HmU9OsDv9fFDnbSw+H2dwU9da6738q07U=
Subject key identifier:   C4:A9:92:59:45:BC:60:93:96:3E:26:6B:1D:2C:81:B1:9E:72:32:A3
Certificate issuer:       /CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a
Certificate serial:       010D0C9F4328584AEC62AE6BD6FE584D8659B600
Authority key identifier: 49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/e9e094a2-adfc-3ce1-b208-ccdf9a603bd7.roa
Signing time:             Wed 20 Aug 2025 21:50:22 +0000
ROA not before:           Wed 20 Aug 2025 21:50:22 +0000
ROA not after:            Tue 18 Nov 2025 22:50:22 +0000
asID:                     23473
IP address blocks:        66.253.167.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:ec:62:ae:6b:d6:fe:58:4d:86:59:b6:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a
        Validity
            Not Before: Aug 20 21:50:22 2025 GMT
            Not After : Nov 18 22:50:22 2025 GMT
        Subject: CN=7bce9bdd-b0bd-4cd0-babc-a9e3c4e191ea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:58:22:f3:50:62:9f:23:c4:bb:39:c8:fa:30:
                    e8:e5:20:3c:77:bf:dd:06:66:3c:d6:fc:29:f5:27:
                    7c:f6:23:36:66:b4:a4:be:9c:90:ff:b0:51:35:5b:
                    f1:34:6a:62:15:e2:99:5b:af:a5:43:54:68:ea:ec:
                    70:2c:f0:05:df:a3:76:10:6c:d0:dd:a5:7c:cc:56:
                    a2:d8:53:ae:f8:49:2b:98:be:ae:08:13:53:93:70:
                    71:fd:09:1d:18:e8:29:ce:f2:a0:1b:54:b3:03:43:
                    62:3a:56:03:70:2b:fd:af:14:3a:2f:c2:d9:d3:f4:
                    51:0a:59:9a:08:31:fe:48:10:91:3e:b1:ea:3d:c6:
                    c2:b4:9d:50:c8:e1:39:2b:56:9b:98:f4:c9:e4:3d:
                    15:37:8b:33:5c:45:fe:53:c1:38:35:d0:02:7f:f5:
                    dd:43:34:0d:36:21:b8:d8:07:4f:74:b6:d6:f6:d6:
                    5b:84:cb:b0:21:e4:e9:76:2e:b6:eb:75:6b:be:98:
                    0a:36:6a:5b:87:7e:ab:18:36:bb:6d:47:5d:9d:da:
                    80:c6:49:07:71:86:49:f3:04:6a:8b:e8:2e:6e:9d:
                    55:bf:46:e3:4a:4f:07:0a:cc:5e:a1:5f:f1:52:39:
                    fc:e6:8c:fb:5a:87:ec:ff:f4:2d:4c:a7:47:de:fd:
                    f9:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:A9:92:59:45:BC:60:93:96:3E:26:6B:1D:2C:81:B1:9E:72:32:A3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/e9e094a2-adfc-3ce1-b208-ccdf9a603bd7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl

            X509v3 Authority Key Identifier:
                keyid:49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.253.167.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7b:db:b0:bb:31:bd:52:c5:ea:e3:01:5f:46:59:43:ff:61:71:
         48:96:11:1b:bc:f4:41:43:65:7d:02:2b:51:19:d4:65:d0:6f:
         a7:d3:41:4e:42:81:a7:ae:cf:7f:38:82:1e:71:af:9c:2d:39:
         21:83:cd:49:d3:46:2f:b3:7d:71:50:66:8c:d0:cf:e1:4d:9d:
         e9:bb:64:9a:57:45:1b:b5:61:d1:ae:bd:4b:b3:97:27:72:1f:
         09:02:99:13:7c:25:64:80:d1:cc:d6:81:e1:b3:93:b7:45:26:
         b4:b0:c6:1f:23:f4:76:70:9a:2f:2d:cd:c1:ef:40:bc:46:4d:
         98:3b:af:56:e1:72:72:b6:bb:f0:a2:60:02:21:15:3a:f4:d9:
         a6:6b:42:6d:3d:bd:ac:cd:1a:8c:69:69:b9:82:0a:6a:15:d9:
         d9:6f:ab:41:0e:0c:75:18:b6:a0:cb:d7:ec:4a:ca:04:97:25:
         1d:8e:7a:fd:f9:22:67:b4:25:18:dc:8b:30:16:1f:e2:38:cd:
         11:fe:6a:ec:20:25:f3:d5:8d:ae:78:90:9d:40:8f:e3:2f:7a:
         f3:b2:f7:0d:15:94:1d:5f:e5:89:37:cd:d7:f2:82:19:8a:78:
         c6:d0:44:07:b9:50:aa:66:5d:bf:d4:5d:ca:05:64:80:d4:03:
         ae:e3:56:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 21:57:47 2025 by rpki-client