Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/d0ff0748-49a0-3920-ad1b-a4de5796190f.roa
File:                     d0ff0748-49a0-3920-ad1b-a4de5796190f.roa (raw, json)
Hash identifier:          StgDMORb5eO/25Qu6mTMYtJyaa0g9j0r/3ZlBifYteI=
Subject key identifier:   FF:58:4B:78:10:16:22:11:42:0B:F6:C7:D6:DE:55:35:5A:81:E6:FD
Certificate issuer:       /CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Certificate serial:       010D0C9F4328584B5B072DC7B8B144EA8CE17EC0
Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/d0ff0748-49a0-3920-ad1b-a4de5796190f.roa
Signing time:             Mon 29 Sep 2025 13:00:41 +0000
ROA not before:           Mon 29 Sep 2025 13:00:41 +0000
ROA not after:            Sun 28 Dec 2025 14:00:41 +0000
asID:                     852
IP address blocks:        66.110.160.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:5b:07:2d:c7:b8:b1:44:ea:8c:e1:7e:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24
        Validity
            Not Before: Sep 29 13:00:41 2025 GMT
            Not After : Dec 28 14:00:41 2025 GMT
        Subject: CN=816bbb05-bca1-4a9e-9df9-7bd732a1cce9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:14:24:89:66:f1:0b:3d:67:94:c2:81:d6:6a:
                    98:a7:12:57:c7:6f:cb:30:72:fa:11:9d:ae:d0:38:
                    49:5b:5d:70:2c:f6:65:a6:87:c1:58:0b:3d:52:40:
                    56:9f:0a:59:01:e8:d7:6f:df:07:8c:2a:6f:3c:b5:
                    a1:c9:bc:13:50:67:6f:f7:4c:33:d9:be:a9:0e:33:
                    bd:19:37:6b:02:b4:52:0d:92:f5:d1:0d:48:2b:19:
                    05:f0:b7:1b:dc:af:55:7c:67:06:71:09:a1:c3:3d:
                    a6:97:0f:22:59:33:94:b7:f1:ca:36:d3:9f:66:12:
                    3c:29:c1:b9:6e:7a:25:25:a1:ae:d7:bc:9f:07:89:
                    3e:36:8c:57:63:0f:3e:2c:8d:ab:95:63:bc:68:d4:
                    72:4d:24:c9:81:dc:93:b3:c4:d7:d0:14:b0:f6:49:
                    cc:9b:9d:bc:6b:b8:27:c0:0a:e8:dd:65:a7:6c:1b:
                    9a:28:6e:71:46:4f:c5:8f:fb:ad:48:3a:4f:ef:12:
                    2d:30:cd:ea:7e:57:d1:f0:68:48:56:dc:dc:9a:32:
                    77:63:cc:d8:35:1b:15:8d:0d:c7:3b:a1:9c:55:56:
                    08:3a:e4:2a:23:62:b6:16:84:39:0b:76:94:12:df:
                    a8:20:58:8b:42:70:fb:2e:87:a5:31:bc:b2:6c:49:
                    9a:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:58:4B:78:10:16:22:11:42:0B:F6:C7:D6:DE:55:35:5A:81:E6:FD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/d0ff0748-49a0-3920-ad1b-a4de5796190f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl

            X509v3 Authority Key Identifier:
                keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.110.160.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5c:d0:d3:d0:5b:80:b1:88:eb:73:b2:6f:c4:4a:a6:68:b2:b8:
         ab:e6:45:31:ed:7c:1e:49:3b:eb:97:2f:12:41:63:19:2c:d0:
         8f:77:93:31:c9:0c:cb:a0:9e:b0:ed:d2:25:a0:a1:3b:e8:5a:
         42:fb:d4:23:f4:a9:56:7e:81:f4:35:88:e1:1c:ba:0d:d0:fb:
         55:e6:1d:58:3b:34:50:62:37:6e:f9:48:71:5f:7c:4e:2f:b9:
         8a:7d:f3:1c:52:02:63:24:2e:da:ff:52:2a:bb:51:bf:e6:92:
         99:78:57:26:a1:86:6a:2a:ab:12:3d:a7:8b:e6:72:95:bd:b8:
         59:35:fe:f6:e1:ee:76:49:b7:ce:f8:d6:32:07:8c:66:f1:6b:
         5f:df:db:49:09:21:7c:3b:19:4d:2b:8f:22:84:e5:1a:d0:86:
         c8:b7:64:93:ce:6c:b4:51:c7:70:81:61:12:00:eb:9a:56:86:
         59:d9:6c:e7:c9:cd:ec:16:33:25:93:38:d3:9f:5c:ea:7e:f4:
         38:78:4f:fe:b6:e0:87:8e:ba:74:47:a4:30:94:3b:9e:aa:f8:
         9f:a5:1b:9d:75:67:a3:4c:6c:e5:6b:9b:8a:3d:b1:29:36:bf:
         ae:39:b5:05:74:01:dd:51:a5:f6:a7:67:06:08:09:06:a7:cb:
         72:8b:27:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 22:35:27 2025 by rpki-client