Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7bebf1fd-be49-4771-87fb-2d0488be4cab/50916351-782d-3e23-995d-6f80e9033c13.roa
File:                     50916351-782d-3e23-995d-6f80e9033c13.roa (raw, json)
Hash identifier:          v8RUl+lQrJMITUGoiufY8zqgZbSoGM0eKntNBiGssBc=
Subject key identifier:   5F:C5:E3:4A:92:85:35:71:F2:99:87:44:15:5E:5A:7B:7F:57:62:BF
Certificate issuer:       /CN=7bebf1fd-be49-4771-87fb-2d0488be4cab
Certificate serial:       010D0C9F4328584AECC12A24CA23368DEFB48D04
Authority key identifier: A6:AD:23:24:BF:14:90:C2:B8:53:86:42:68:F2:81:07:01:EB:97:40
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7bebf1fd-be49-4771-87fb-2d0488be4cab.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7bebf1fd-be49-4771-87fb-2d0488be4cab/50916351-782d-3e23-995d-6f80e9033c13.roa
Signing time:             Thu 21 Aug 2025 01:00:33 +0000
ROA not before:           Thu 21 Aug 2025 01:00:33 +0000
ROA not after:            Wed 19 Nov 2025 02:00:33 +0000
asID:                     198949
IP address blocks:        66.22.108.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7bebf1fd-be49-4771-87fb-2d0488be4cab/7bebf1fd-be49-4771-87fb-2d0488be4cab.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7bebf1fd-be49-4771-87fb-2d0488be4cab/7bebf1fd-be49-4771-87fb-2d0488be4cab.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7bebf1fd-be49-4771-87fb-2d0488be4cab.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 23:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:ec:c1:2a:24:ca:23:36:8d:ef:b4:8d:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7bebf1fd-be49-4771-87fb-2d0488be4cab
        Validity
            Not Before: Aug 21 01:00:33 2025 GMT
            Not After : Nov 19 02:00:33 2025 GMT
        Subject: CN=f9f6a8e0-d6dc-459a-abd2-04db1c3b8874
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:e1:c5:58:33:39:5c:11:5f:1c:c5:2d:f3:b4:
                    ac:a6:2a:4d:02:60:ab:a3:46:71:21:15:9f:2b:46:
                    8d:f3:44:ac:1b:ec:4d:24:b0:f2:04:2d:88:83:67:
                    14:0d:d4:aa:e9:d3:d4:db:93:e8:62:a8:a5:cd:7f:
                    8b:78:af:a9:4c:86:1c:e3:26:07:37:cb:40:28:b3:
                    d2:f9:d4:16:7b:35:8a:6d:2c:be:2e:7f:40:8b:6e:
                    b9:8f:28:52:2c:db:15:34:3d:91:02:68:b6:6a:97:
                    44:d2:41:66:e3:8b:6f:f8:a3:a0:fa:59:e7:bc:92:
                    e8:ad:a4:b6:29:cb:86:4b:20:56:c3:14:b5:39:22:
                    5d:b8:1e:a3:f8:38:10:cb:28:d5:8e:e0:30:c7:e1:
                    f7:f3:fa:59:3b:8f:70:a0:8b:b5:c9:66:1d:f3:be:
                    93:17:68:4e:ab:bc:51:3d:5f:7c:b9:ca:9e:c1:c6:
                    88:ab:af:45:f7:9c:c6:72:7e:b7:b5:c9:fe:99:89:
                    a3:69:d7:6d:2b:2c:a0:01:02:ce:2f:45:84:1e:61:
                    c6:d9:f0:71:cb:d7:64:10:34:57:74:35:a7:f0:fb:
                    f2:4f:ac:15:55:b5:00:ff:da:0a:a5:cb:7c:9a:8e:
                    ea:3d:bb:37:09:9b:0e:4a:a1:59:7d:74:1e:0a:69:
                    7b:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:C5:E3:4A:92:85:35:71:F2:99:87:44:15:5E:5A:7B:7F:57:62:BF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7bebf1fd-be49-4771-87fb-2d0488be4cab/50916351-782d-3e23-995d-6f80e9033c13.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7bebf1fd-be49-4771-87fb-2d0488be4cab/7bebf1fd-be49-4771-87fb-2d0488be4cab.crl

            X509v3 Authority Key Identifier:
                keyid:A6:AD:23:24:BF:14:90:C2:B8:53:86:42:68:F2:81:07:01:EB:97:40

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7bebf1fd-be49-4771-87fb-2d0488be4cab.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.22.108.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         93:45:4e:42:c1:b0:02:43:76:70:0b:86:e2:a4:7b:d4:39:a2:
         38:c4:b3:8e:1d:9d:15:7d:e1:1b:e9:47:85:af:ff:63:95:0b:
         cb:2c:ec:91:d6:28:08:f5:a9:6c:3f:0a:58:ac:49:c4:f8:db:
         b0:9d:8c:e2:e3:de:43:cc:c5:2f:c7:80:41:7f:76:cf:2d:a2:
         5f:ad:26:f9:32:cf:35:14:8d:d4:fe:d6:56:df:b6:3f:7b:34:
         32:de:71:30:4b:ad:1d:bb:c4:ff:64:92:79:b9:2a:e7:f8:17:
         21:56:92:7d:b7:9a:77:b3:ad:56:7e:a3:92:f6:be:38:7a:de:
         60:0e:24:46:a1:4f:6d:63:4f:bb:1f:6a:4c:7c:de:90:12:94:
         d7:36:62:72:aa:0d:9c:8b:9e:ab:ec:9c:ba:04:ea:42:c4:1f:
         50:99:08:1f:f7:17:99:b0:16:e9:86:b4:4b:17:29:40:ea:a3:
         02:b1:15:57:c6:49:05:03:fd:0b:8b:57:3b:40:c2:01:24:ab:
         36:3a:e7:7a:0a:86:91:54:e2:8a:b5:d8:8a:26:83:ae:22:16:
         bc:2d:10:12:43:f2:9b:ab:53:d9:b3:51:cb:36:54:7d:dd:14:
         5e:98:4d:c6:1f:4c:af:46:2f:b9:52:e3:cc:7a:fe:f1:de:4e:
         cb:49:b3:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 16:28:32 2025 by rpki-client