Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/f36f7462-c7a9-4aa8-af42-792dae19380f/95845579-28a3-3cf9-b882-148be38f716c.roa
File:                     95845579-28a3-3cf9-b882-148be38f716c.roa (raw, json)
Hash identifier:          ZE+29FsgV298BQQ3IFFtDH6w+lToOKh/qsVOedmgC0w=
Subject key identifier:   7B:A0:EE:CF:3D:69:2E:27:8D:2C:7E:D6:7D:6F:A0:75:88:25:76:02
Certificate issuer:       /CN=f36f7462-c7a9-4aa8-af42-792dae19380f
Certificate serial:       010D0C9F4328584B95A7989EDB48C6CC1BBAD100
Authority key identifier: 3A:27:A1:D0:28:2E:FC:FB:82:DB:21:5F:1B:F2:3A:CC:FC:E7:2E:5E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/f36f7462-c7a9-4aa8-af42-792dae19380f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/f36f7462-c7a9-4aa8-af42-792dae19380f/95845579-28a3-3cf9-b882-148be38f716c.roa
Signing time:             Mon 20 Oct 2025 13:00:38 +0000
ROA not before:           Mon 20 Oct 2025 13:00:38 +0000
ROA not after:            Sun 18 Jan 2026 14:00:38 +0000
asID:                     394564
IP address blocks:        66.112.192.0/24 maxlen: 24
                          66.112.193.0/24 maxlen: 24
                          66.112.194.0/24 maxlen: 24
                          66.112.195.0/24 maxlen: 24
                          66.112.196.0/24 maxlen: 24
                          66.112.197.0/24 maxlen: 24
                          66.112.198.0/24 maxlen: 24
                          66.112.199.0/24 maxlen: 24
                          66.112.200.0/24 maxlen: 24
                          66.112.203.0/24 maxlen: 24
                          66.112.204.0/24 maxlen: 24
                          66.112.205.0/24 maxlen: 24
                          66.112.206.0/24 maxlen: 24
                          66.112.207.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/f36f7462-c7a9-4aa8-af42-792dae19380f/f36f7462-c7a9-4aa8-af42-792dae19380f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/f36f7462-c7a9-4aa8-af42-792dae19380f/f36f7462-c7a9-4aa8-af42-792dae19380f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/f36f7462-c7a9-4aa8-af42-792dae19380f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 23:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:95:a7:98:9e:db:48:c6:cc:1b:ba:d1:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f36f7462-c7a9-4aa8-af42-792dae19380f
        Validity
            Not Before: Oct 20 13:00:38 2025 GMT
            Not After : Jan 18 14:00:38 2026 GMT
        Subject: CN=6447be02-4c13-4ef9-aa2a-3f0f720e21ed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:b6:24:a4:67:5a:5e:30:6f:43:23:f0:8e:5a:
                    c3:96:04:6c:d1:80:b0:02:72:9e:3c:08:78:2b:cb:
                    59:76:b4:56:c5:e9:b5:64:b6:6a:d6:6a:f5:75:e2:
                    d6:e0:44:29:83:14:b6:93:63:4b:47:ad:f0:d0:20:
                    ec:57:7c:d3:be:6f:0f:91:86:f4:e2:1f:e4:88:ce:
                    94:16:9c:03:2c:b1:a6:7d:06:6f:dc:6b:7e:3d:90:
                    88:a2:8e:02:de:d7:7b:73:b7:5a:f5:1a:81:39:eb:
                    18:d0:a9:77:86:66:fb:7f:f5:a4:9e:fd:64:d9:c0:
                    49:eb:26:69:78:55:69:f2:70:a1:42:0a:4f:8e:14:
                    99:6b:41:e1:f4:26:6b:49:ed:dc:41:bb:bf:83:bd:
                    07:29:64:5d:cc:e3:fd:c7:f2:d9:fb:44:9e:cb:e4:
                    ba:e5:62:d2:cc:7b:16:d3:a2:00:e4:47:4e:99:5b:
                    4c:b9:f9:0f:c1:db:a5:bb:35:1b:c5:6b:f7:ab:ca:
                    eb:4b:30:bd:e0:03:44:2c:1a:2e:1d:a4:5d:8c:48:
                    66:34:d9:d8:e8:4b:76:7d:35:81:65:3d:17:a5:3f:
                    0a:62:39:0c:fd:58:0d:54:00:c3:df:9a:e6:1f:fd:
                    a3:5d:6e:14:ea:e9:be:b5:85:33:3b:03:a7:4c:a4:
                    19:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:A0:EE:CF:3D:69:2E:27:8D:2C:7E:D6:7D:6F:A0:75:88:25:76:02
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/f36f7462-c7a9-4aa8-af42-792dae19380f/95845579-28a3-3cf9-b882-148be38f716c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/f36f7462-c7a9-4aa8-af42-792dae19380f/f36f7462-c7a9-4aa8-af42-792dae19380f.crl

            X509v3 Authority Key Identifier:
                keyid:3A:27:A1:D0:28:2E:FC:FB:82:DB:21:5F:1B:F2:3A:CC:FC:E7:2E:5E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/f36f7462-c7a9-4aa8-af42-792dae19380f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.112.192.0-66.112.200.255
                  66.112.203.0-66.112.207.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         de:b5:7f:f8:8c:07:01:0f:7c:47:35:57:77:aa:d0:63:91:1a:
         18:af:86:d5:4a:2f:c3:e5:22:b8:77:3a:a9:c9:f8:2c:3c:26:
         12:19:b1:91:f1:dc:ce:b7:a8:65:c0:f5:b7:ba:fc:ee:26:e7:
         99:c6:55:76:f2:6d:47:d1:b3:d4:61:7e:ed:46:ce:81:ae:45:
         89:92:06:ee:65:41:77:49:b2:f0:33:e1:fe:3f:7e:68:55:e3:
         61:f5:e1:28:de:12:f8:24:90:6d:00:39:90:30:e9:a4:ba:1e:
         44:54:34:3f:90:5f:f8:e0:6c:2b:61:41:51:72:5c:a6:be:26:
         c4:c8:3f:8c:b2:4a:6b:f0:b0:93:83:18:82:b1:71:74:d0:fc:
         e8:fc:26:02:e2:d4:e6:39:69:55:a0:9c:05:cd:f5:9d:9f:62:
         68:a9:fe:6d:c2:79:d3:fc:18:1b:d2:50:95:d4:6c:f2:ee:27:
         82:38:4c:05:cf:43:07:db:12:a0:63:fd:8e:48:c7:1e:5d:6f:
         b7:1e:cf:93:5a:d3:6b:84:2a:8a:fb:f1:9e:04:54:4e:cf:89:
         ec:2c:80:47:b1:ae:8b:39:f7:0b:1b:ec:e8:3d:ce:21:ed:1a:
         cf:fa:f0:0e:2e:ca:12:1b:e6:71:f1:52:cb:af:3f:cd:bb:7f:
         13:85:7a:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 23:32:58 2025 by rpki-client