Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758/f4a74179-bca2-3eed-8890-6681deae4ca9.roa
File:                     f4a74179-bca2-3eed-8890-6681deae4ca9.roa (raw, json)
Hash identifier:          9Visu97cwzC9b4WRGIe9XA1cm+Y66i5cak1x5Dw+83Q=
Subject key identifier:   87:A5:B4:A7:19:29:46:6F:DE:55:C5:E4:8A:00:53:D7:AB:58:55:42
Certificate issuer:       /CN=286639fc-94c4-4d6a-9de1-f1b3ebb5f758
Certificate serial:       010D0C9F4328584B92DCDA75EC3BDADE36543300
Authority key identifier: 63:C7:11:22:88:E9:0B:38:04:E5:58:20:EC:45:6D:8A:6F:96:C0:01
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758/f4a74179-bca2-3eed-8890-6681deae4ca9.roa
Signing time:             Sun 19 Oct 2025 13:00:39 +0000
ROA not before:           Sun 19 Oct 2025 13:00:39 +0000
ROA not after:            Sat 17 Jan 2026 14:00:39 +0000
asID:                     20940
IP address blocks:        66.198.8.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758/286639fc-94c4-4d6a-9de1-f1b3ebb5f758.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758/286639fc-94c4-4d6a-9de1-f1b3ebb5f758.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:92:dc:da:75:ec:3b:da:de:36:54:33:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=286639fc-94c4-4d6a-9de1-f1b3ebb5f758
        Validity
            Not Before: Oct 19 13:00:39 2025 GMT
            Not After : Jan 17 14:00:39 2026 GMT
        Subject: CN=8d57ecd6-9643-4a2b-abab-6f4f211bb599
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:94:ef:6a:14:25:21:95:58:f9:0f:a8:b8:23:
                    8f:e0:9a:50:12:71:7d:82:59:89:a7:c2:b6:fb:db:
                    3c:2c:af:d9:26:80:53:6a:18:b3:30:81:3a:12:d4:
                    ab:2d:2a:a0:2f:16:00:d9:7f:55:62:48:b1:11:ee:
                    af:4a:17:25:53:6e:1a:5a:3a:46:92:77:34:9e:1f:
                    f2:9c:25:b6:cd:2c:50:db:eb:89:62:df:7b:e0:56:
                    d9:d1:21:ba:00:2e:e9:f1:0d:e3:6c:74:8f:a8:50:
                    f0:61:b7:6a:02:06:2c:a8:7f:0c:a5:7f:16:32:00:
                    23:a7:03:02:9d:43:db:4f:77:37:b3:f0:20:f8:32:
                    42:92:66:e0:3d:37:0a:32:c0:18:e8:e0:d9:c1:fc:
                    5b:4d:15:e4:16:23:c7:5f:1e:f8:c4:c1:91:47:c4:
                    84:22:fe:35:b1:83:27:9f:dc:41:54:dc:73:9e:18:
                    a5:b6:96:52:f5:06:a0:aa:f1:dc:06:a1:26:90:dd:
                    3a:e4:6e:f7:55:e4:cd:67:23:da:93:5b:6c:d7:5f:
                    0a:67:04:3c:8f:37:36:57:84:71:94:14:1d:c6:e3:
                    15:f4:dc:e2:3f:0b:f3:9f:ef:9f:fb:ea:26:36:00:
                    ba:6b:1a:54:76:0f:ed:8c:4b:73:e6:0c:e2:e1:e7:
                    fc:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:A5:B4:A7:19:29:46:6F:DE:55:C5:E4:8A:00:53:D7:AB:58:55:42
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758/f4a74179-bca2-3eed-8890-6681deae4ca9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758/286639fc-94c4-4d6a-9de1-f1b3ebb5f758.crl

            X509v3 Authority Key Identifier:
                keyid:63:C7:11:22:88:E9:0B:38:04:E5:58:20:EC:45:6D:8A:6F:96:C0:01

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.198.8.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5e:a5:fd:ec:6d:8c:11:d0:5f:20:06:ef:da:e8:aa:39:0f:47:
         e9:e3:d1:f8:29:d3:e7:84:02:51:f4:ce:b0:4b:da:76:63:cf:
         fe:aa:c4:b2:d3:94:1c:ba:fc:10:93:b8:9e:f1:91:e3:ab:30:
         7f:8b:55:50:7b:f4:e2:03:66:53:18:02:84:0f:1e:d6:71:11:
         18:75:81:71:56:39:b4:7a:23:34:23:6b:ae:07:f0:82:93:fd:
         59:67:cd:b9:da:07:2e:33:e5:cc:ab:e2:31:91:b8:45:08:89:
         02:23:97:91:8e:46:80:c2:6a:75:5d:f0:b1:71:46:07:fc:8d:
         ca:43:1e:23:6b:19:6c:4c:72:15:88:fa:35:b0:c3:a8:a6:13:
         68:31:1e:36:af:07:86:e6:ff:71:ea:6f:0c:27:1f:80:36:c4:
         7f:a0:21:3f:ae:11:65:43:f5:a9:04:43:9f:81:92:81:29:78:
         fc:34:20:b4:98:99:1f:8d:eb:35:00:bd:33:c6:20:52:d1:c8:
         5a:a3:27:fa:e1:b0:4a:ba:0e:9d:34:6f:91:40:7b:31:72:81:
         a2:11:ed:96:c3:59:ea:4e:4e:e7:bb:08:3a:8a:95:3d:33:9d:
         1d:33:69:77:4b:df:92:40:63:57:0b:f3:4a:cf:ce:25:c6:43:
         15:dd:48:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 00:22:52 2025 by rpki-client