Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/acdcf67c-3f56-42fa-a790-eac540e58280/00cc911e-d753-3e3e-8000-eae6d45ca547.roa
File:                     00cc911e-d753-3e3e-8000-eae6d45ca547.roa (raw, json)
Hash identifier:          EvTOPk9xYILpHCIUDTT18itRCa10e2wAN3EfW1/8cBA=
Subject key identifier:   42:A3:B4:78:1B:95:06:DD:46:D0:F8:9A:99:2D:4E:FA:9B:86:50:87
Certificate issuer:       /CN=acdcf67c-3f56-42fa-a790-eac540e58280
Certificate serial:       010D0C9F4328584B5571DD22AEBCD7B5BDF15880
Authority key identifier: C9:67:19:6F:42:9D:1A:2A:28:CB:B6:E1:55:9B:9F:38:40:A6:84:68
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/acdcf67c-3f56-42fa-a790-eac540e58280.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/acdcf67c-3f56-42fa-a790-eac540e58280/00cc911e-d753-3e3e-8000-eae6d45ca547.roa
Signing time:             Sat 27 Sep 2025 13:00:41 +0000
ROA not before:           Sat 27 Sep 2025 13:00:41 +0000
ROA not after:            Fri 26 Dec 2025 14:00:41 +0000
asID:                     11830
IP address blocks:        66.218.167.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/acdcf67c-3f56-42fa-a790-eac540e58280/acdcf67c-3f56-42fa-a790-eac540e58280.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/acdcf67c-3f56-42fa-a790-eac540e58280/acdcf67c-3f56-42fa-a790-eac540e58280.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/acdcf67c-3f56-42fa-a790-eac540e58280.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:55:71:dd:22:ae:bc:d7:b5:bd:f1:58:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=acdcf67c-3f56-42fa-a790-eac540e58280
        Validity
            Not Before: Sep 27 13:00:41 2025 GMT
            Not After : Dec 26 14:00:41 2025 GMT
        Subject: CN=221d6209-6ea7-4a02-b165-f817172c2ea4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:bf:a9:24:e4:52:f8:6d:d2:e6:98:d6:23:d1:
                    f5:4b:6a:e8:d5:40:a8:8b:31:74:62:97:ed:5f:64:
                    76:3f:75:5e:b5:cb:ee:0e:b0:0a:5f:dc:b7:ee:ec:
                    03:22:fe:16:0b:f1:54:ee:34:d8:8a:df:3e:3a:e0:
                    4e:87:a9:1c:d9:92:b8:5a:dd:f0:e4:a6:93:b2:93:
                    a1:00:61:ce:35:55:11:67:f4:14:ce:d5:b0:48:c1:
                    83:1b:e3:35:67:2a:4f:75:2e:4c:25:32:5b:6c:1a:
                    09:25:f1:a3:30:ff:a7:16:f4:d9:ee:37:37:0b:a4:
                    f3:ed:6a:db:fe:a2:e6:d6:70:b3:c5:5f:4a:7b:41:
                    45:e6:84:61:22:d6:23:73:d5:bc:0e:fb:79:09:71:
                    0d:6a:13:5a:42:6c:36:0e:e2:dd:b4:6d:49:a8:8d:
                    51:b0:be:c9:05:65:62:3b:d1:4a:1b:0d:ab:e5:80:
                    96:1c:52:cb:4e:e4:9a:47:74:a4:7f:a0:86:d4:47:
                    4e:43:b8:3c:3e:a6:fd:22:10:d4:d9:39:e2:85:22:
                    46:d9:b1:cd:5f:19:2c:6d:f8:8c:b4:79:a2:29:88:
                    2c:95:7b:4b:26:fa:1d:3c:0c:fa:30:39:a1:fc:50:
                    11:f0:37:e4:5a:66:0b:be:05:d8:e0:f1:fb:a8:75:
                    ce:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:A3:B4:78:1B:95:06:DD:46:D0:F8:9A:99:2D:4E:FA:9B:86:50:87
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/acdcf67c-3f56-42fa-a790-eac540e58280/00cc911e-d753-3e3e-8000-eae6d45ca547.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/acdcf67c-3f56-42fa-a790-eac540e58280/acdcf67c-3f56-42fa-a790-eac540e58280.crl

            X509v3 Authority Key Identifier:
                keyid:C9:67:19:6F:42:9D:1A:2A:28:CB:B6:E1:55:9B:9F:38:40:A6:84:68

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/acdcf67c-3f56-42fa-a790-eac540e58280.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.218.167.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4b:77:8e:f1:fc:3e:c5:8f:74:11:8c:08:22:3b:33:df:3b:b2:
         6e:00:3a:05:59:2a:f9:17:47:f4:cb:39:b6:bf:ae:c0:5a:f3:
         1d:f4:88:fa:6b:6b:d1:6f:01:85:91:ba:84:aa:a3:d6:75:04:
         a4:57:93:60:b7:02:ce:ee:10:ad:5b:ca:24:d8:80:c7:05:e6:
         4c:5c:f9:01:67:49:76:71:b0:62:17:16:2a:e8:ed:85:60:1c:
         49:37:cd:8b:b4:31:53:4a:49:30:03:da:8b:47:91:5e:5f:fb:
         80:dd:69:b7:7d:aa:8e:69:08:10:32:c9:ed:5b:26:86:9f:8e:
         47:24:b2:01:55:18:bc:0e:f1:30:f7:22:d7:6b:83:1d:ff:15:
         d8:69:fb:7e:64:a7:17:b9:5c:cc:7c:7b:9a:d2:1e:b5:12:ff:
         4f:ee:65:fa:76:3a:90:92:4d:8b:de:e0:f2:93:79:c0:b2:1f:
         79:01:bb:2b:e6:e0:85:dd:f4:41:1e:77:7d:fd:3c:00:a8:56:
         b7:9b:e3:e0:61:ea:73:fe:97:4e:34:18:74:af:25:95:4e:77:
         3f:97:d2:ab:0c:13:84:1d:9a:44:8e:55:41:3c:c3:06:10:8c:
         7f:1d:0b:99:4a:09:8b:4f:6a:7e:77:6e:b9:44:d1:eb:93:83:
         2a:83:b3:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 12:37:59 2025 by rpki-client