Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d170fca2-5f74-4408-8dc9-597ba031cfe2/d8781f8b-bea3-3cce-88ff-84fa5117d863.roa
File:                     d8781f8b-bea3-3cce-88ff-84fa5117d863.roa (raw, json)
Hash identifier:          IvB5WZul5hNCyDSPTsZAnlbiVOP0QnbFpLkTE1s84CI=
Subject key identifier:   DC:B1:16:DA:40:00:1C:F7:95:F5:AA:B1:38:EF:55:95:8C:44:62:BE
Certificate issuer:       /CN=d170fca2-5f74-4408-8dc9-597ba031cfe2
Certificate serial:       010D0C9F4328584AC876557B7A1A959BA8691500
Authority key identifier: FF:28:BA:9B:42:6B:7A:24:D9:A4:AB:B7:91:4D:BD:B3:6F:3F:62:9E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d170fca2-5f74-4408-8dc9-597ba031cfe2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d170fca2-5f74-4408-8dc9-597ba031cfe2/d8781f8b-bea3-3cce-88ff-84fa5117d863.roa
Signing time:             Fri 08 Aug 2025 01:00:33 +0000
ROA not before:           Fri 08 Aug 2025 01:00:33 +0000
ROA not after:            Thu 06 Nov 2025 02:00:33 +0000
asID:                     16509
IP address blocks:        66.178.134.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d170fca2-5f74-4408-8dc9-597ba031cfe2/d170fca2-5f74-4408-8dc9-597ba031cfe2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d170fca2-5f74-4408-8dc9-597ba031cfe2/d170fca2-5f74-4408-8dc9-597ba031cfe2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d170fca2-5f74-4408-8dc9-597ba031cfe2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:c8:76:55:7b:7a:1a:95:9b:a8:69:15:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d170fca2-5f74-4408-8dc9-597ba031cfe2
        Validity
            Not Before: Aug  8 01:00:33 2025 GMT
            Not After : Nov  6 02:00:33 2025 GMT
        Subject: CN=d6c2eaa3-1b9c-4bd1-93ad-2ca425eda407
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:f9:be:30:7b:3f:89:2b:c9:d0:5b:f6:b6:fa:
                    0d:5f:f5:21:0d:17:ae:a0:cd:b4:cd:0b:b4:3a:0e:
                    5c:56:82:7f:9d:51:64:41:e8:84:91:07:44:20:6a:
                    b9:39:47:03:bc:73:49:1f:fe:4b:ff:47:25:c2:55:
                    2b:8d:f2:43:f2:75:c0:ca:4b:0c:11:a2:b9:f0:f4:
                    48:15:27:99:f1:c5:42:82:65:b4:45:2f:6a:ae:11:
                    b9:13:d7:d2:19:3d:57:f3:da:57:4b:91:ae:9c:46:
                    6b:a3:e7:f1:5c:32:f6:3e:cd:04:6d:ea:18:02:41:
                    a6:02:bf:20:6d:db:8a:2f:6b:a1:08:95:a2:d8:e2:
                    ea:be:94:f9:a2:53:82:90:74:2d:ca:18:f5:19:f8:
                    8f:fa:89:f0:75:ba:a4:dd:c2:bc:24:64:0a:b8:ba:
                    0a:0e:7f:a7:1b:c1:8e:4b:b5:fb:6d:aa:3c:1f:80:
                    60:5e:b0:ac:30:d7:4f:d7:e7:9e:4a:94:00:2c:9d:
                    d5:43:3b:8f:9f:08:8e:4b:3e:4a:b7:19:bb:d5:28:
                    56:76:ec:06:10:d3:7b:4a:85:27:18:14:29:9d:d8:
                    44:83:bb:83:8f:02:9b:0f:08:e5:9c:2f:89:a5:37:
                    d5:bd:11:5f:8d:c7:c4:6a:68:63:8a:76:cd:95:65:
                    35:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:B1:16:DA:40:00:1C:F7:95:F5:AA:B1:38:EF:55:95:8C:44:62:BE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d170fca2-5f74-4408-8dc9-597ba031cfe2/d8781f8b-bea3-3cce-88ff-84fa5117d863.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d170fca2-5f74-4408-8dc9-597ba031cfe2/d170fca2-5f74-4408-8dc9-597ba031cfe2.crl

            X509v3 Authority Key Identifier:
                keyid:FF:28:BA:9B:42:6B:7A:24:D9:A4:AB:B7:91:4D:BD:B3:6F:3F:62:9E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d170fca2-5f74-4408-8dc9-597ba031cfe2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.178.134.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         41:92:f7:fe:ef:9e:38:c0:b9:48:70:54:ac:e9:29:f0:69:dd:
         b3:c2:8a:58:08:24:b0:9a:df:61:21:3b:e3:e9:9f:7b:cb:e7:
         b0:8a:b3:01:a4:4c:72:1d:53:f9:de:29:3b:89:1a:a9:a5:b1:
         e3:ec:89:92:e2:57:56:e0:eb:d2:7b:8c:1f:bb:f2:6f:61:fc:
         df:58:5b:93:96:be:2f:b4:3b:f2:1d:8d:24:b6:7a:34:ed:cf:
         96:1f:69:e6:8a:61:99:88:c6:9d:60:2c:10:64:7d:58:04:ae:
         a0:9d:77:8c:48:3f:b2:69:19:d3:41:01:a3:29:61:e1:af:4b:
         37:a1:6b:a5:bf:fe:7a:73:68:af:2a:a9:27:e8:ba:47:14:80:
         62:db:5f:e0:c8:ae:a5:d5:1d:d2:53:45:a0:21:53:51:57:37:
         c0:44:fe:21:0a:8f:45:ee:64:27:4b:ad:c1:59:fd:1c:0c:d5:
         20:d8:04:86:c8:cc:9b:cb:f8:09:bc:c8:96:4a:15:c6:04:92:
         1b:a1:37:ea:7c:9f:f2:52:9b:3c:f5:be:0d:b2:d8:e4:a2:e1:
         d5:2f:0a:87:ad:e1:3b:3d:80:70:01:22:f7:54:ce:6a:f2:e0:
         38:12:a1:96:2b:0a:09:38:1c:b9:9a:8f:49:0a:7a:2d:3f:f6:
         5f:c1:d8:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 09:01:16 2025 by rpki-client