Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/98804329-a40c-3c27-9b85-a5c0cfb9b275.roa
File:                     98804329-a40c-3c27-9b85-a5c0cfb9b275.roa (raw, json)
Hash identifier:          t+9toGcfsXoU1fjwLs0c/oGIMiqLBszYEn+g7rV4ipk=
Subject key identifier:   51:95:E3:61:4D:52:0F:80:22:76:B1:17:A7:98:19:CC:9A:D7:AF:88
Certificate issuer:       /CN=24fa05bf-5b46-4a55-bd55-4891d21cb24f
Certificate serial:       010D0C9F4328584ADE7FD6A47537AE0C6B431340
Authority key identifier: F7:6F:8C:D8:57:DC:73:3D:90:CF:C1:F9:F3:DF:C0:38:A5:E8:74:80
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/98804329-a40c-3c27-9b85-a5c0cfb9b275.roa
Signing time:             Fri 15 Aug 2025 22:27:48 +0000
ROA not before:           Fri 15 Aug 2025 22:27:48 +0000
ROA not after:            Thu 13 Nov 2025 23:27:48 +0000
asID:                     394437
IP address blocks:        66.249.100.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/24fa05bf-5b46-4a55-bd55-4891d21cb24f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/24fa05bf-5b46-4a55-bd55-4891d21cb24f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Aug 2025 05:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:de:7f:d6:a4:75:37:ae:0c:6b:43:13:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=24fa05bf-5b46-4a55-bd55-4891d21cb24f
        Validity
            Not Before: Aug 15 22:27:48 2025 GMT
            Not After : Nov 13 23:27:48 2025 GMT
        Subject: CN=940bc5ef-869a-438f-bb81-f38168ea6ae4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:cd:2b:2f:54:ef:54:53:b5:7a:31:c4:51:93:
                    b4:36:ee:bc:3d:bb:0c:04:ee:06:87:b4:ad:a9:b5:
                    91:aa:26:3d:f7:b7:e9:64:08:b4:c3:0d:3e:ba:3e:
                    cd:2e:bd:c2:e5:8f:bc:f2:08:7f:44:29:ad:4f:f6:
                    b7:b6:eb:d4:6c:d5:5c:58:2c:13:96:4b:1c:03:c7:
                    b8:f0:7c:19:68:f3:dd:a6:fe:75:6a:e0:d3:85:ea:
                    f2:fc:a6:a5:b1:b9:96:76:cb:ca:93:95:3a:27:c0:
                    da:a9:ae:ec:54:8f:94:42:13:6f:69:cb:f7:5c:94:
                    0b:f0:e8:ac:c4:89:7c:a8:e6:5d:3f:95:cf:c9:ad:
                    9d:6d:a0:d7:ea:3a:cb:35:f0:7d:05:75:f0:b0:f1:
                    bf:4d:5b:f4:fd:f1:03:0a:26:fb:83:07:d7:d0:e7:
                    2d:0e:6f:c0:f9:60:a1:e0:6c:fa:09:1c:53:2d:97:
                    c5:8c:4f:16:cb:ba:f4:6b:92:0f:9c:0b:33:ce:c2:
                    83:b5:d2:fa:cd:5d:7b:18:f4:6c:94:cf:d9:ea:53:
                    53:57:b8:04:8e:46:59:d8:fb:db:e5:c6:d9:cb:78:
                    92:93:7d:53:27:2c:60:6c:75:85:09:ee:05:5a:2f:
                    54:a4:b8:a8:da:8f:3b:f4:82:33:50:d6:4f:a8:76:
                    da:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:95:E3:61:4D:52:0F:80:22:76:B1:17:A7:98:19:CC:9A:D7:AF:88
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/98804329-a40c-3c27-9b85-a5c0cfb9b275.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/24fa05bf-5b46-4a55-bd55-4891d21cb24f.crl

            X509v3 Authority Key Identifier:
                keyid:F7:6F:8C:D8:57:DC:73:3D:90:CF:C1:F9:F3:DF:C0:38:A5:E8:74:80

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.249.100.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5c:9c:27:9b:28:b3:bd:52:6c:ba:e0:8c:4e:6e:06:82:b6:e4:
         57:dd:6b:25:d1:9e:83:d0:d3:a8:f7:1a:80:76:01:dc:55:b9:
         d4:6b:1c:e7:d6:20:4b:17:e4:31:ab:87:40:99:d2:77:98:d4:
         9b:1f:ec:e9:34:f7:b3:b6:03:4c:47:2b:2f:6f:bd:1a:3f:66:
         1e:f5:2f:34:97:76:ab:09:6a:a7:e2:f5:eb:03:5b:79:70:8d:
         82:4d:b4:c7:bb:cb:9c:87:6e:49:ed:eb:5a:15:a2:a5:ab:2c:
         db:b4:a9:b7:7b:ed:cb:92:77:af:48:64:aa:59:c3:d0:72:a5:
         71:08:73:77:81:f7:e3:ee:e6:77:d1:26:cc:9f:01:d7:c0:ee:
         a7:53:15:5a:90:9d:77:8b:77:1a:9c:3c:7b:88:ea:fa:0e:98:
         47:ac:94:08:2a:05:dd:b2:d2:fb:17:1a:cb:df:ef:d6:40:9f:
         c1:2b:e7:43:93:e1:38:2a:99:b1:ab:48:ae:6a:42:46:5c:fc:
         5f:fe:2e:3c:1c:38:f3:98:b3:a9:6b:7d:f1:9f:56:a5:0a:16:
         76:f4:60:f5:b4:b1:ed:a7:73:a6:2f:c5:48:a2:d2:82:10:2c:
         1f:bc:b2:d5:d7:a3:06:e5:d7:59:3f:c3:4f:c9:fb:66:b7:9a:
         39:b9:2a:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 09:35:52 2025 by rpki-client