Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/a71a6b1c-dd84-33b2-898c-4f69915afa83.roa
File:                     a71a6b1c-dd84-33b2-898c-4f69915afa83.roa (raw, json)
Hash identifier:          Q3ian38alQLGZOcxodIFafX5iPdLAd6/unarWSaFJ/o=
Subject key identifier:   B8:DA:0A:CB:7A:4D:CD:E1:02:ED:7E:97:DB:24:A9:09:CD:7A:E0:A4
Certificate issuer:       /CN=cb444bd8-be6d-4853-a460-b577b6f84b65
Certificate serial:       010D0C9F4328584B62020E69096F3A102ED56F68
Authority key identifier: 2D:A1:B0:8C:36:6A:A7:0F:6E:A9:91:B2:BB:47:5E:CD:7E:D7:58:09
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/a71a6b1c-dd84-33b2-898c-4f69915afa83.roa
Signing time:             Thu 02 Oct 2025 01:00:31 +0000
ROA not before:           Thu 02 Oct 2025 01:00:31 +0000
ROA not after:            Wed 31 Dec 2025 02:00:31 +0000
asID:                     399114
IP address blocks:        66.118.236.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/cb444bd8-be6d-4853-a460-b577b6f84b65.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/cb444bd8-be6d-4853-a460-b577b6f84b65.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:62:02:0e:69:09:6f:3a:10:2e:d5:6f:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cb444bd8-be6d-4853-a460-b577b6f84b65
        Validity
            Not Before: Oct  2 01:00:31 2025 GMT
            Not After : Dec 31 02:00:31 2025 GMT
        Subject: CN=3d3b9e69-6d74-432a-9c0c-1c12b3106dfc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:1a:d1:da:9b:5a:44:07:0d:6e:f6:0f:3e:75:
                    7d:f2:80:ae:8a:56:bc:4b:85:04:a2:79:8b:30:17:
                    b5:b0:fb:05:cf:56:3b:5d:a4:35:15:07:6b:22:22:
                    38:4f:cb:8c:fb:86:4f:24:e2:34:a4:9e:2f:18:09:
                    1d:d3:e2:5e:61:42:45:aa:31:72:cc:72:04:89:03:
                    ea:cb:bd:1c:7b:a1:c3:0f:79:7f:3d:db:29:4d:0a:
                    39:aa:55:c7:10:7a:ae:18:36:e8:6e:8b:63:27:92:
                    4b:c9:26:58:f7:d4:4e:8c:d4:9e:49:6d:0d:d5:74:
                    87:e8:1b:ae:f7:a7:02:3c:79:1e:48:2e:92:a0:c5:
                    c0:f9:fe:d4:5e:ac:79:56:75:a9:29:4a:e1:0c:31:
                    50:a1:a7:ad:d4:47:5f:bb:28:29:b4:c3:0f:6e:52:
                    3b:45:34:50:b7:0e:ff:d7:9a:6b:d0:da:8e:b9:fc:
                    cb:63:c1:63:e6:2f:ca:36:50:69:cb:4c:65:43:a1:
                    14:84:65:a8:d7:ee:a4:df:3a:73:4b:6e:ce:76:ea:
                    16:dd:53:73:1f:95:e3:78:46:fb:39:8b:d1:e0:d0:
                    1b:bc:3b:23:6e:b2:72:23:ec:e0:f2:fd:f6:8a:22:
                    36:85:06:b3:46:de:fc:17:51:20:5a:03:0c:2c:ff:
                    f4:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:DA:0A:CB:7A:4D:CD:E1:02:ED:7E:97:DB:24:A9:09:CD:7A:E0:A4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/a71a6b1c-dd84-33b2-898c-4f69915afa83.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/cb444bd8-be6d-4853-a460-b577b6f84b65.crl

            X509v3 Authority Key Identifier:
                keyid:2D:A1:B0:8C:36:6A:A7:0F:6E:A9:91:B2:BB:47:5E:CD:7E:D7:58:09

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.118.236.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1f:30:70:78:d7:00:0d:aa:e0:81:27:17:9b:96:41:da:4d:41:
         64:61:cb:d9:36:35:ca:81:bb:60:af:fc:5b:db:b0:ab:cf:2f:
         5d:ee:3b:22:4c:48:d0:c7:0c:36:7c:49:70:ab:20:23:8a:10:
         77:67:58:2a:59:67:09:d5:f8:06:9e:bd:36:b7:91:dd:c7:19:
         c8:38:61:34:07:c0:ab:e1:3e:93:f3:68:d9:89:c3:a4:a4:d6:
         06:6d:d5:1a:44:62:ab:da:95:04:a5:32:a5:74:05:87:ee:3a:
         1e:27:ba:17:49:2a:9b:bb:2b:3b:41:3b:d5:33:f9:f8:3f:4e:
         6e:29:28:65:f1:82:56:4f:a1:27:79:1f:38:82:a9:2e:9f:c5:
         73:11:bc:8e:9f:96:b8:85:8a:f1:4b:85:31:4e:f8:6d:ed:87:
         7e:2b:67:dc:c8:fe:51:ba:c0:89:ea:24:94:bc:58:60:b2:90:
         86:2d:bf:16:70:ff:08:c2:21:2b:91:4b:70:98:67:b2:7d:14:
         10:00:7c:e7:a5:bb:6d:15:c9:80:6b:12:68:90:d0:b4:e0:a5:
         7f:67:66:58:cc:36:68:43:c5:9b:6a:ae:40:3a:c9:82:20:e1:
         84:7f:d0:92:86:20:4f:41:24:82:59:6e:8b:ce:c7:78:ad:e0:
         1a:b9:6b:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 02:14:44 2025 by rpki-client