Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/06943d43-3db5-40ee-918a-d8b100ebbcdd/30fd87d5-5001-352f-b63a-f3eff8ff3a06.roa
File:                     30fd87d5-5001-352f-b63a-f3eff8ff3a06.roa (raw, json)
Hash identifier:          cnmEDX9lti39XkbCFJdU93VCKPSxD5d0byJMgkREnrM=
Subject key identifier:   97:A0:78:F9:15:45:4E:DA:4E:23:D3:90:D4:6F:00:CD:D4:7E:2D:BB
Certificate issuer:       /CN=06943d43-3db5-40ee-918a-d8b100ebbcdd
Certificate serial:       010D0C9F4328584B84E77DB7B137EA665073F300
Authority key identifier: 01:41:7D:32:F2:ED:85:78:CD:E1:52:0E:AD:6A:0E:13:DE:CE:02:AC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/06943d43-3db5-40ee-918a-d8b100ebbcdd.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/06943d43-3db5-40ee-918a-d8b100ebbcdd/30fd87d5-5001-352f-b63a-f3eff8ff3a06.roa
Signing time:             Tue 14 Oct 2025 13:00:37 +0000
ROA not before:           Tue 14 Oct 2025 13:00:37 +0000
ROA not after:            Mon 12 Jan 2026 14:00:37 +0000
asID:                     16636
IP address blocks:        66.45.9.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/06943d43-3db5-40ee-918a-d8b100ebbcdd/06943d43-3db5-40ee-918a-d8b100ebbcdd.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/06943d43-3db5-40ee-918a-d8b100ebbcdd/06943d43-3db5-40ee-918a-d8b100ebbcdd.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/06943d43-3db5-40ee-918a-d8b100ebbcdd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Oct 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:84:e7:7d:b7:b1:37:ea:66:50:73:f3:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=06943d43-3db5-40ee-918a-d8b100ebbcdd
        Validity
            Not Before: Oct 14 13:00:37 2025 GMT
            Not After : Jan 12 14:00:37 2026 GMT
        Subject: CN=6d012ff4-a53e-4230-ad67-26f04579ae48
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:90:4a:3a:60:37:66:0f:db:bc:a8:1d:c1:c4:
                    67:75:eb:e0:c7:1f:38:6f:bb:36:32:f4:54:80:e8:
                    4e:79:0c:41:e2:7f:21:79:0d:ca:7f:6e:43:b2:0a:
                    ae:4f:0c:e9:b4:b5:19:29:5c:4f:16:9d:3d:de:4b:
                    4c:7c:94:0a:34:42:7e:24:21:40:28:0e:e2:60:62:
                    3f:2d:11:b7:94:67:27:75:87:6c:14:cd:ab:00:c3:
                    bb:ac:76:0d:cd:fa:9e:31:90:e7:21:8a:65:fb:42:
                    ae:a6:dc:1e:3b:d7:ba:40:89:c7:b7:8d:0d:d0:1c:
                    8d:04:55:63:36:45:82:f8:a8:31:e3:05:a4:79:17:
                    ac:bb:be:e4:8c:cb:90:c7:e0:7c:e3:ce:0f:75:f2:
                    5c:2e:9b:10:19:3c:0e:f9:5d:ab:42:82:91:2c:12:
                    9d:a7:4d:27:d1:a3:57:77:40:2a:b2:cb:29:60:d6:
                    9b:d3:2b:bb:b9:d7:14:db:90:3a:6a:9a:85:78:6c:
                    42:7f:c7:67:30:af:cb:b9:fa:ad:11:76:f1:a1:15:
                    ae:82:03:80:c3:bc:1f:d4:39:91:29:2b:77:63:ee:
                    22:93:6c:a3:98:68:b3:cd:a9:25:60:e0:77:8d:24:
                    ff:24:a3:3c:14:6d:7f:41:1c:40:aa:35:12:8c:16:
                    ba:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:A0:78:F9:15:45:4E:DA:4E:23:D3:90:D4:6F:00:CD:D4:7E:2D:BB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/06943d43-3db5-40ee-918a-d8b100ebbcdd/30fd87d5-5001-352f-b63a-f3eff8ff3a06.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/06943d43-3db5-40ee-918a-d8b100ebbcdd/06943d43-3db5-40ee-918a-d8b100ebbcdd.crl

            X509v3 Authority Key Identifier:
                keyid:01:41:7D:32:F2:ED:85:78:CD:E1:52:0E:AD:6A:0E:13:DE:CE:02:AC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/06943d43-3db5-40ee-918a-d8b100ebbcdd.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.45.9.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         63:3b:fd:73:a7:57:d6:58:00:20:db:26:d0:e0:bb:db:8a:4d:
         82:b9:4f:2f:e2:0b:da:d2:4d:d8:64:a6:f7:b7:13:03:e8:05:
         82:99:8b:bc:b3:ec:d0:02:96:f4:b0:3a:d5:f9:03:fa:57:0f:
         b1:74:a6:65:c3:37:b7:65:85:61:14:df:18:cc:54:80:26:a3:
         36:58:ff:72:a6:c6:b0:66:f6:91:f2:f2:85:b4:d4:e0:41:40:
         be:25:73:65:7a:c2:1a:b8:1c:36:8e:5d:12:55:8c:3a:72:65:
         ef:11:05:27:14:d8:cc:ab:0e:49:e9:d0:16:b6:27:45:30:db:
         54:fa:02:9f:ba:3d:9e:58:be:c3:2b:bb:02:99:c8:15:1d:c6:
         b1:d9:cd:ca:d2:4e:f1:8e:91:25:d2:c6:0f:b0:dc:d6:ea:68:
         73:d5:a1:f4:5b:61:a0:9f:cc:cb:c0:b7:1d:af:c5:e3:3d:b8:
         ad:11:20:7e:ee:65:79:2d:de:65:0b:c0:c5:83:72:e6:2d:e7:
         38:65:64:c1:cc:bb:8c:87:9f:1d:e1:11:86:09:73:7a:dd:f0:
         f4:de:36:3d:78:b1:d1:db:35:d5:b4:cc:9c:86:18:8a:18:ae:
         58:a3:e4:96:09:7f:bf:0d:96:57:f1:bd:2b:bb:b4:b7:ee:e0:
         1a:72:09:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 22 04:35:06 2025 by rpki-client