Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/607fb4c7-9b54-4d7e-9099-986be3553d20/5887cfae-8c62-3084-8853-2e533a04a923.roa
File:                     5887cfae-8c62-3084-8853-2e533a04a923.roa (raw, json)
Hash identifier:          okBK1NmC2MYaXlp+F/mAT5Tm2pQgFIq28oIlRzUKoBk=
Subject key identifier:   3B:59:79:D1:5C:DF:68:9C:59:32:B8:42:16:2C:53:14:95:B2:F1:CF
Certificate issuer:       /CN=607fb4c7-9b54-4d7e-9099-986be3553d20
Certificate serial:       010D0C9F4328584B80B7714A0E0D95C682C0FB80
Authority key identifier: 67:05:BE:41:56:11:B2:6C:50:E2:36:B0:F1:A2:97:38:EB:52:E4:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/607fb4c7-9b54-4d7e-9099-986be3553d20.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/607fb4c7-9b54-4d7e-9099-986be3553d20/5887cfae-8c62-3084-8853-2e533a04a923.roa
Signing time:             Mon 13 Oct 2025 01:00:29 +0000
ROA not before:           Mon 13 Oct 2025 01:00:29 +0000
ROA not after:            Sun 11 Jan 2026 02:00:29 +0000
asID:                     32579
IP address blocks:        66.223.107.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/607fb4c7-9b54-4d7e-9099-986be3553d20/607fb4c7-9b54-4d7e-9099-986be3553d20.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/607fb4c7-9b54-4d7e-9099-986be3553d20/607fb4c7-9b54-4d7e-9099-986be3553d20.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/607fb4c7-9b54-4d7e-9099-986be3553d20.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:80:b7:71:4a:0e:0d:95:c6:82:c0:fb:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=607fb4c7-9b54-4d7e-9099-986be3553d20
        Validity
            Not Before: Oct 13 01:00:29 2025 GMT
            Not After : Jan 11 02:00:29 2026 GMT
        Subject: CN=2b3db72a-2492-4fed-9ede-f30a68bea0bb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:74:00:47:79:c4:fa:5c:33:72:ce:7e:98:52:
                    02:a6:21:a8:c8:3b:ff:e2:69:d2:b2:ba:82:10:c9:
                    89:a9:22:3c:19:b3:b9:19:a7:86:1b:12:22:d0:d8:
                    e2:d0:e0:3c:aa:8b:e0:ac:35:6f:e8:90:61:7d:b0:
                    82:be:35:d6:dd:8f:6c:34:0d:1d:bd:5c:4e:74:b0:
                    6c:ca:1c:fc:17:45:6a:9f:c2:d1:6c:75:35:1a:e0:
                    67:ed:84:69:d3:26:d9:fb:f6:f4:2d:51:6b:0c:85:
                    18:be:00:94:5f:06:2c:dd:f3:81:8c:7a:8d:27:2c:
                    7d:12:2c:1b:d2:99:1a:ac:21:cf:3e:20:02:75:cc:
                    1b:3f:f4:84:66:af:b7:f9:cd:86:d0:f0:26:86:44:
                    6f:7c:77:16:c9:15:08:ba:78:64:96:df:e1:64:0b:
                    1f:99:28:04:41:91:d4:10:f7:93:19:6e:2e:ae:39:
                    1a:61:52:ed:53:57:d2:5f:dc:47:47:2e:9f:78:e9:
                    af:e0:a3:41:b3:34:da:89:b3:71:fb:4a:04:9d:cc:
                    d5:aa:f0:51:76:33:48:01:88:65:8f:de:ac:2d:79:
                    ec:64:a4:86:c1:86:3a:ff:0b:cd:cb:f9:8d:35:70:
                    37:81:b4:f1:e3:ef:f1:cc:c4:41:3f:3a:3c:5e:ce:
                    f4:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:59:79:D1:5C:DF:68:9C:59:32:B8:42:16:2C:53:14:95:B2:F1:CF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/607fb4c7-9b54-4d7e-9099-986be3553d20/5887cfae-8c62-3084-8853-2e533a04a923.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/607fb4c7-9b54-4d7e-9099-986be3553d20/607fb4c7-9b54-4d7e-9099-986be3553d20.crl

            X509v3 Authority Key Identifier:
                keyid:67:05:BE:41:56:11:B2:6C:50:E2:36:B0:F1:A2:97:38:EB:52:E4:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/607fb4c7-9b54-4d7e-9099-986be3553d20.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.223.107.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ca:73:f1:c7:90:46:b0:e3:cb:22:c9:75:7d:10:e7:45:54:1f:
         a3:6e:2b:00:32:bf:6b:82:5e:02:be:45:69:11:91:96:2e:d6:
         a2:30:6e:2a:8c:2f:38:ae:a8:a0:af:a8:ce:94:5e:bc:02:db:
         17:e8:4d:5d:d6:fc:85:d1:fc:ae:df:78:5d:1d:ad:10:e2:fb:
         20:6e:6e:15:66:9d:38:02:0a:e6:f2:bd:78:bb:21:55:1e:6c:
         3e:1d:24:1f:81:20:75:15:b5:ce:be:21:69:7d:ea:4c:3e:58:
         f9:9f:b3:85:5a:15:11:38:16:c5:c4:aa:80:c1:e4:81:cb:cf:
         22:08:3a:03:2c:62:5e:13:a8:1d:e5:bb:57:40:1c:1e:21:74:
         e0:48:b5:8d:d0:41:74:69:68:ad:e2:ca:c6:f1:d8:2d:12:bc:
         c5:0b:ee:79:2f:75:de:18:fa:78:a1:f6:7a:dd:62:47:64:ea:
         10:4e:78:b9:87:21:f7:e3:14:6a:e2:a0:8c:c6:78:84:cf:76:
         c0:f0:be:85:fe:04:ef:4e:dc:d9:70:c8:38:00:3e:0f:d3:81:
         4a:f1:6a:97:80:ca:f2:2a:fa:ea:4c:97:ff:c5:d2:79:58:4f:
         95:12:a8:c0:01:fe:4f:8c:a9:57:1a:91:5b:5d:cb:17:b5:39:
         7d:3f:d7:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 10:32:06 2025 by rpki-client