Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a05c180d-6db0-4307-bc39-264e11bb765c/9c186c9e-ef97-3a93-98fd-31dc5fdb4aad.roa
File:                     9c186c9e-ef97-3a93-98fd-31dc5fdb4aad.roa (raw, json)
Hash identifier:          KzjqpnwzzVmKtVoGYl+je0pnWaMVJQVjqQbBGeLzG+A=
Subject key identifier:   CB:85:D7:C0:84:AE:DB:4E:88:F1:9D:07:75:62:D9:7C:99:C3:07:53
Certificate issuer:       /CN=a05c180d-6db0-4307-bc39-264e11bb765c
Certificate serial:       010D0C9F4328584B6201F0185CD099B1C0877C80
Authority key identifier: FA:96:F4:82:9C:8D:63:83:5B:FB:C0:EA:74:85:60:F5:E9:31:65:58
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a05c180d-6db0-4307-bc39-264e11bb765c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a05c180d-6db0-4307-bc39-264e11bb765c/9c186c9e-ef97-3a93-98fd-31dc5fdb4aad.roa
Signing time:             Thu 02 Oct 2025 01:00:31 +0000
ROA not before:           Thu 02 Oct 2025 01:00:31 +0000
ROA not after:            Wed 31 Dec 2025 02:00:31 +0000
asID:                     12127
IP address blocks:        66.119.92.0/22 maxlen: 24
                          66.201.160.0/20 maxlen: 24
                          66.201.176.0/21 maxlen: 24
                          66.249.192.0/22 maxlen: 24
                          66.249.196.0/23 maxlen: 24
                          66.249.198.0/24 maxlen: 24
                          66.249.199.0/24 maxlen: 24
                          66.249.200.0/23 maxlen: 24
                          66.249.202.0/23 maxlen: 24
                          66.249.204.0/22 maxlen: 24
                          216.184.96.0/21 maxlen: 24
                          216.184.106.0/24 maxlen: 24
                          216.184.107.0/24 maxlen: 24
                          216.184.108.0/22 maxlen: 24
                          216.184.120.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a05c180d-6db0-4307-bc39-264e11bb765c/a05c180d-6db0-4307-bc39-264e11bb765c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a05c180d-6db0-4307-bc39-264e11bb765c/a05c180d-6db0-4307-bc39-264e11bb765c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a05c180d-6db0-4307-bc39-264e11bb765c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 Oct 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:62:01:f0:18:5c:d0:99:b1:c0:87:7c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a05c180d-6db0-4307-bc39-264e11bb765c
        Validity
            Not Before: Oct  2 01:00:31 2025 GMT
            Not After : Dec 31 02:00:31 2025 GMT
        Subject: CN=5a6288d5-ddf0-4fa9-9315-6caa39136fab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:f0:da:39:30:d2:6a:45:81:eb:4b:1f:52:c7:
                    0f:e1:f7:e6:dc:01:eb:d6:61:f0:98:43:a4:39:a8:
                    42:2b:a4:dc:f9:e7:f9:a1:be:8c:5c:9a:80:8e:7d:
                    2c:db:b1:9d:35:7c:eb:4b:6d:dd:8e:b7:d1:5f:a6:
                    5a:ab:af:4d:43:23:f7:9d:0f:ec:29:01:86:9a:f1:
                    fe:1a:e0:ca:1d:df:78:a9:8a:99:3b:9f:b3:e7:70:
                    87:6a:03:22:21:77:91:1e:4e:d1:f9:db:db:c9:75:
                    08:1e:75:d0:d5:e1:9f:8d:3c:22:ae:db:f2:97:3e:
                    1c:e9:bf:ec:54:70:df:79:84:bb:e2:ed:2f:2d:ac:
                    bd:cd:c9:97:d8:d4:fd:5c:d1:5c:b9:96:f7:3a:54:
                    f1:d7:95:d8:13:23:62:ba:30:33:e5:2e:1b:1e:1c:
                    33:1e:c5:60:c3:fc:c5:78:40:0e:28:d8:86:dc:eb:
                    fa:3e:14:ab:39:53:da:03:cf:98:04:37:7c:2d:8d:
                    a3:3c:a6:e1:ca:7f:22:3e:51:aa:be:33:5c:5a:2d:
                    3d:bd:bc:82:8a:d4:b2:9c:4b:67:1d:4f:f2:35:f5:
                    ab:25:c7:0b:d9:a2:2f:c9:69:a0:30:ce:8e:a5:a8:
                    99:87:63:9f:d3:20:fb:70:7d:d5:f4:a8:a1:74:37:
                    ef:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:85:D7:C0:84:AE:DB:4E:88:F1:9D:07:75:62:D9:7C:99:C3:07:53
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a05c180d-6db0-4307-bc39-264e11bb765c/9c186c9e-ef97-3a93-98fd-31dc5fdb4aad.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a05c180d-6db0-4307-bc39-264e11bb765c/a05c180d-6db0-4307-bc39-264e11bb765c.crl

            X509v3 Authority Key Identifier:
                keyid:FA:96:F4:82:9C:8D:63:83:5B:FB:C0:EA:74:85:60:F5:E9:31:65:58

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a05c180d-6db0-4307-bc39-264e11bb765c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.119.92.0/22
                  66.201.160.0-66.201.183.255
                  66.249.192.0/20
                  216.184.96.0/21
                  216.184.106.0-216.184.111.255
                  216.184.120.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         88:99:e3:ca:be:b3:47:40:1b:64:14:fc:c1:62:6e:39:67:90:
         ea:7e:73:d5:30:00:7e:f1:9e:b9:3e:50:08:20:a1:f6:00:ab:
         d4:a5:cd:d5:a5:03:52:19:55:74:a4:39:38:10:9a:65:53:0c:
         66:8d:e0:a9:41:3d:78:c3:b8:21:d5:1b:07:d2:e3:2c:d0:6b:
         e8:77:23:19:de:ec:55:b1:d2:cc:37:56:79:72:7b:9e:e9:43:
         b7:10:f6:cc:11:e1:59:af:c9:45:4d:0e:d7:15:1d:07:55:c5:
         4e:0a:e9:f2:ec:85:bc:62:01:cf:2c:34:11:1b:7d:c6:05:da:
         40:48:79:39:b6:1c:56:85:bb:41:cb:64:21:50:83:d6:bd:e7:
         16:df:a8:c6:fc:94:94:5a:5f:23:f7:08:dc:bd:39:bd:31:10:
         8e:70:8c:8a:7c:e7:b5:e8:a4:16:bf:57:54:aa:7e:cc:47:dd:
         2c:57:bd:7f:9b:56:b4:d2:0f:b5:28:6b:9f:f5:d4:29:92:75:
         13:9e:3b:53:da:f9:ed:26:b0:bf:47:ea:cc:74:27:04:65:a1:
         e7:74:26:44:66:0a:8a:8d:d4:35:9b:59:38:53:b9:2f:11:d4:
         7b:50:a8:85:54:9a:b1:35:45:f6:10:8f:b1:9e:2d:ed:b7:8e:
         13:26:ae:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 21:08:48 2025 by rpki-client