Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/7dafc679-2b1e-3e19-8a8c-8fc838538a0c.roa
File:                     7dafc679-2b1e-3e19-8a8c-8fc838538a0c.roa (raw, json)
Hash identifier:          TDGFnsMvxjuLW+A0Wm+qDwUGC2ArzshRZSSS0FnBFi4=
Subject key identifier:   64:A5:BD:52:C2:A8:A2:D1:EF:8D:1C:58:9D:1F:B9:9A:79:36:2F:A3
Certificate issuer:       /CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Certificate serial:       010D0C9F4328584B5B072F0568907C3A0BD8C600
Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/7dafc679-2b1e-3e19-8a8c-8fc838538a0c.roa
Signing time:             Mon 29 Sep 2025 13:00:41 +0000
ROA not before:           Mon 29 Sep 2025 13:00:41 +0000
ROA not after:            Sun 28 Dec 2025 14:00:41 +0000
asID:                     852
IP address blocks:        66.222.128.0/17 maxlen: 17
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:5b:07:2f:05:68:90:7c:3a:0b:d8:c6:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24
        Validity
            Not Before: Sep 29 13:00:41 2025 GMT
            Not After : Dec 28 14:00:41 2025 GMT
        Subject: CN=b7f7b123-42fc-4d1f-9138-705fde56c900
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:a6:39:ae:9e:91:63:4a:8e:e4:7b:eb:4d:38:
                    9e:9b:18:68:ed:da:36:b1:f5:19:e7:a5:24:70:f3:
                    c1:07:ad:89:c9:a5:3c:53:bc:46:05:d2:14:96:37:
                    e1:2e:4f:76:a3:3e:f1:2a:f8:ac:88:a5:bc:8f:e7:
                    cb:fe:74:16:4e:f0:8d:4c:ce:5f:36:dd:d9:6b:eb:
                    43:19:fd:6e:72:6e:87:1a:95:cf:26:18:07:e6:6d:
                    b7:61:27:fc:9c:55:63:c3:47:f2:3a:e3:1f:51:00:
                    1a:ca:1b:91:3f:29:81:a3:f3:f1:45:f5:fc:ef:51:
                    d3:16:07:dd:67:a2:f9:72:f9:df:e9:29:bc:5c:80:
                    6b:6e:40:fd:28:03:cc:33:8a:78:ab:b7:3f:29:d7:
                    7d:46:d8:54:a2:42:15:54:2b:a9:4f:03:f5:68:bd:
                    f0:8c:2a:7b:df:61:2f:d3:3d:32:30:19:a1:76:ee:
                    b8:aa:a1:33:fb:dd:6f:42:d1:42:44:47:2b:9b:6d:
                    1a:b7:0e:c5:63:8f:2f:c6:76:7f:55:60:99:48:d6:
                    79:14:fb:4a:a8:4d:d9:7e:bb:2f:82:7a:2a:08:60:
                    33:19:e3:4a:8a:fe:ab:1e:ec:cb:b2:d5:49:8b:05:
                    eb:25:bc:e1:b6:90:e7:04:57:8f:80:7d:6f:93:42:
                    95:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:A5:BD:52:C2:A8:A2:D1:EF:8D:1C:58:9D:1F:B9:9A:79:36:2F:A3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/7dafc679-2b1e-3e19-8a8c-8fc838538a0c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl

            X509v3 Authority Key Identifier:
                keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.222.128.0/17

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         06:ab:08:1e:4c:81:5b:7c:47:84:6c:e9:b2:e8:af:1a:77:1d:
         5f:ad:fd:3e:6c:55:96:ec:89:20:0b:a1:df:de:56:cb:ef:2b:
         92:91:d0:ad:a9:dc:2e:32:df:7b:1d:8a:53:02:fc:48:37:a8:
         d1:6b:f7:8a:1b:4b:a0:e6:5e:47:e8:22:9d:f6:8d:7e:dc:46:
         e2:86:66:d3:2b:e8:f7:d7:c9:45:a8:b1:33:6f:ff:50:4c:2a:
         e8:58:a4:ca:bb:14:d5:56:fe:e0:6c:7a:0a:60:e1:49:46:8b:
         1a:de:b6:d9:20:be:67:35:79:06:7b:bf:f8:6f:cc:eb:c1:32:
         83:50:1a:d5:e8:e9:ae:4c:bc:ff:21:61:31:4e:75:e4:36:2a:
         39:61:13:88:ea:90:00:99:f7:18:b4:9e:e7:08:1b:ab:ce:46:
         d2:df:00:7f:6c:bd:64:21:74:41:73:28:a9:b2:47:ac:c2:47:
         f0:8c:1e:bb:93:5c:73:c3:08:5b:5b:87:3d:8b:67:18:a9:6c:
         ff:1c:20:4a:17:6f:e9:4c:5b:09:12:93:19:72:08:95:17:2c:
         8d:d7:47:09:b4:6f:fb:39:d1:a2:ba:a9:8e:23:97:0a:b4:a9:
         97:b1:dc:70:9e:48:51:f8:a4:d9:12:db:1b:cf:81:4b:f1:37:
         5a:d7:f4:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 07:37:08 2025 by rpki-client