Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/66049fc9-3d05-426a-98ee-53b139a32165/c639e8a8-42df-31cd-97a3-cc5458b1a6fe.roa
File:                     c639e8a8-42df-31cd-97a3-cc5458b1a6fe.roa (raw, json)
Hash identifier:          iljHqtjEzi6NsNNCpPZnwgVpQ6MpoIF2nObcjn/3+II=
Subject key identifier:   EC:4F:9D:CF:65:11:D8:C4:7E:D0:B0:E5:35:DE:8D:72:EF:88:C8:BB
Certificate issuer:       /CN=66049fc9-3d05-426a-98ee-53b139a32165
Certificate serial:       010D0C9F4328584B8A7CC557F195EF7DAC921580
Authority key identifier: CE:47:99:91:0A:41:1F:3A:95:A8:1E:1F:0F:DC:2F:09:86:87:C7:39
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/66049fc9-3d05-426a-98ee-53b139a32165.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/66049fc9-3d05-426a-98ee-53b139a32165/c639e8a8-42df-31cd-97a3-cc5458b1a6fe.roa
Signing time:             Thu 16 Oct 2025 13:00:38 +0000
ROA not before:           Thu 16 Oct 2025 13:00:38 +0000
ROA not after:            Wed 14 Jan 2026 14:00:38 +0000
asID:                     54845
IP address blocks:        207.45.76.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/66049fc9-3d05-426a-98ee-53b139a32165/66049fc9-3d05-426a-98ee-53b139a32165.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/66049fc9-3d05-426a-98ee-53b139a32165/66049fc9-3d05-426a-98ee-53b139a32165.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/66049fc9-3d05-426a-98ee-53b139a32165.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:8a:7c:c5:57:f1:95:ef:7d:ac:92:15:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66049fc9-3d05-426a-98ee-53b139a32165
        Validity
            Not Before: Oct 16 13:00:38 2025 GMT
            Not After : Jan 14 14:00:38 2026 GMT
        Subject: CN=2848c883-c179-40dc-8d88-dcbdf9b5aa64
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:74:c9:02:73:47:c7:71:fd:5b:7a:ce:55:81:
                    c1:08:b5:61:cd:b5:b9:91:58:da:5d:3a:66:ea:d6:
                    30:03:c9:f3:d4:0d:a0:c4:6a:8e:10:f9:0d:f8:77:
                    82:31:e3:95:22:6b:f5:76:60:1e:fc:d7:ae:81:79:
                    cc:91:6b:dd:0f:92:61:d4:98:f9:75:99:87:74:81:
                    b2:51:8c:8a:72:9a:92:af:f7:f2:3d:74:89:1c:22:
                    e1:b2:33:36:7c:ae:94:90:2d:71:07:98:10:96:07:
                    74:53:65:62:53:01:6c:a5:f4:10:7d:2a:51:d5:47:
                    dc:f8:c4:b9:0f:0e:db:1f:5b:5d:a6:3c:f1:d6:ad:
                    8b:0a:8e:d5:1c:c4:a7:7a:4f:15:51:b1:34:d9:b9:
                    aa:77:c6:5e:32:5e:8d:37:22:8f:74:05:eb:7d:5c:
                    a1:d7:3b:f6:ff:4b:67:4b:d2:0c:f0:56:3a:93:79:
                    0e:3c:6b:fe:a1:ad:08:f7:75:32:dc:50:63:00:4b:
                    91:70:35:66:8e:23:df:f0:6b:60:48:4b:5f:86:8e:
                    03:9c:33:45:5d:2d:c0:0d:f6:bb:f8:0d:ae:07:16:
                    eb:b9:45:7a:69:45:20:f8:47:6e:54:b9:80:39:ba:
                    f3:be:e1:37:7f:e4:e6:c6:3a:16:63:f1:9b:8f:e0:
                    e1:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:4F:9D:CF:65:11:D8:C4:7E:D0:B0:E5:35:DE:8D:72:EF:88:C8:BB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/66049fc9-3d05-426a-98ee-53b139a32165/c639e8a8-42df-31cd-97a3-cc5458b1a6fe.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/66049fc9-3d05-426a-98ee-53b139a32165/66049fc9-3d05-426a-98ee-53b139a32165.crl

            X509v3 Authority Key Identifier:
                keyid:CE:47:99:91:0A:41:1F:3A:95:A8:1E:1F:0F:DC:2F:09:86:87:C7:39

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/66049fc9-3d05-426a-98ee-53b139a32165.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.45.76.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         01:0c:94:bf:fa:f5:40:f0:6d:27:f2:88:68:1c:ed:03:a9:90:
         36:9b:46:e5:d6:31:de:42:80:34:ef:f8:0b:4d:b6:6a:84:56:
         fc:e2:25:d6:80:eb:07:3f:42:76:c4:f9:a3:0e:20:aa:f9:e7:
         75:0b:5b:ee:5d:6d:e4:c8:7a:08:f0:25:7d:44:10:44:47:ba:
         37:0a:29:02:4b:1c:3a:50:0f:b6:10:43:7b:e0:92:85:bf:8d:
         13:74:9a:f8:3f:a3:e2:84:71:5b:af:9d:43:c7:42:e0:ba:3f:
         4c:0d:4d:45:c2:9e:27:38:75:aa:5b:cc:c7:89:03:1a:a5:65:
         9e:80:45:17:77:b2:77:f1:06:6e:e9:0f:6a:19:9b:5b:1d:d3:
         43:ca:69:3f:d5:51:b6:8e:ce:26:d8:3a:b1:ff:79:52:7b:2e:
         bd:e3:2d:b8:5e:02:83:de:95:42:2a:4e:98:6b:32:39:39:23:
         2e:34:e3:e2:2d:c7:d8:98:43:20:18:44:50:ee:e0:5f:f6:17:
         c9:e9:3a:8c:ed:f7:90:97:52:45:70:4b:0a:83:01:51:63:c1:
         ff:59:bf:37:bc:84:10:3b:78:23:d6:89:d8:33:fe:45:a3:af:
         6c:34:c7:5c:24:dd:28:71:b5:c0:92:af:ad:e1:51:ef:ae:67:
         3f:ec:6a:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 01:23:56 2025 by rpki-client