Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c6d16a39-472c-48cc-ac4c-7e385950a0e2/5020df77-5b61-3b7a-b4a8-4917e312ba56.roa
File:                     5020df77-5b61-3b7a-b4a8-4917e312ba56.roa (raw, json)
Hash identifier:          ZUnlZibxW2CKetFBHh/wS0nNk03O5o+rh36aysvZ56Y=
Subject key identifier:   0B:E8:62:99:33:FA:D5:EC:57:08:BC:6B:53:5A:63:8E:01:83:90:75
Certificate issuer:       /CN=c6d16a39-472c-48cc-ac4c-7e385950a0e2
Certificate serial:       010D0C9F4328584B85EB6CFE94C83A0EFE9E7A80
Authority key identifier: 4E:9E:79:41:AD:55:D4:9D:9D:D7:5D:EE:90:7D:F7:4E:30:AA:90:3D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c6d16a39-472c-48cc-ac4c-7e385950a0e2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c6d16a39-472c-48cc-ac4c-7e385950a0e2/5020df77-5b61-3b7a-b4a8-4917e312ba56.roa
Signing time:             Tue 14 Oct 2025 21:44:34 +0000
ROA not before:           Tue 14 Oct 2025 21:44:34 +0000
ROA not after:            Mon 12 Jan 2026 22:44:34 +0000
asID:                     401319
IP address blocks:        66.51.102.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c6d16a39-472c-48cc-ac4c-7e385950a0e2/c6d16a39-472c-48cc-ac4c-7e385950a0e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c6d16a39-472c-48cc-ac4c-7e385950a0e2/c6d16a39-472c-48cc-ac4c-7e385950a0e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c6d16a39-472c-48cc-ac4c-7e385950a0e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:85:eb:6c:fe:94:c8:3a:0e:fe:9e:7a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c6d16a39-472c-48cc-ac4c-7e385950a0e2
        Validity
            Not Before: Oct 14 21:44:34 2025 GMT
            Not After : Jan 12 22:44:34 2026 GMT
        Subject: CN=f7fdebeb-f5c5-4f9a-b8cb-914084ed7453
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:30:d7:9f:33:6d:bb:8e:e8:3c:3d:e8:68:a9:
                    df:a5:94:59:ad:9e:e0:ea:b0:af:70:07:18:ae:47:
                    10:11:c4:da:2f:b6:27:a4:31:72:c7:b7:3c:30:32:
                    7b:04:e4:7d:88:d0:64:11:e1:ea:76:bb:7a:4f:a0:
                    44:01:f7:69:e0:1a:16:7a:56:3c:59:46:8e:82:ed:
                    e3:f8:19:ef:c1:a9:4e:86:a6:c1:fa:74:5f:c2:0e:
                    73:67:55:fe:3e:4a:98:52:27:96:9f:06:f6:f1:34:
                    15:9b:78:5a:49:4a:a0:9f:3c:89:59:1f:f7:95:56:
                    44:38:b2:19:c2:09:51:09:26:53:4e:b8:22:d3:3f:
                    f3:ce:ff:99:eb:75:64:54:41:74:04:8e:60:2f:c3:
                    30:f8:c8:27:c7:71:16:b1:84:49:12:87:81:7f:89:
                    8c:76:ac:71:15:33:61:82:89:17:cd:8a:e3:40:70:
                    0a:53:a4:42:61:0d:bd:8b:a4:53:21:9e:97:6d:6a:
                    3d:d4:13:40:2f:db:80:50:36:c2:8d:31:8a:fe:3d:
                    1a:2c:dc:5e:e7:b2:58:aa:5b:91:96:f7:2f:ee:ce:
                    eb:e1:b0:b9:3c:a9:f8:83:5f:a9:41:98:b6:60:ea:
                    94:9f:c1:34:db:2f:58:cd:70:c1:2c:df:fe:b6:72:
                    da:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:E8:62:99:33:FA:D5:EC:57:08:BC:6B:53:5A:63:8E:01:83:90:75
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c6d16a39-472c-48cc-ac4c-7e385950a0e2/5020df77-5b61-3b7a-b4a8-4917e312ba56.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c6d16a39-472c-48cc-ac4c-7e385950a0e2/c6d16a39-472c-48cc-ac4c-7e385950a0e2.crl

            X509v3 Authority Key Identifier:
                keyid:4E:9E:79:41:AD:55:D4:9D:9D:D7:5D:EE:90:7D:F7:4E:30:AA:90:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c6d16a39-472c-48cc-ac4c-7e385950a0e2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.51.102.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3b:fa:36:da:59:d5:99:1a:4c:7f:06:5d:bf:1c:81:df:87:7d:
         2f:a8:cc:79:dc:4e:13:39:80:fe:6f:14:15:8b:c7:5a:d9:45:
         d9:cb:a7:6e:69:2d:35:cb:fe:c6:f3:17:b7:7c:ff:2e:d3:b2:
         3a:74:18:4e:29:eb:53:cc:3f:f4:de:10:7a:97:e4:6d:dc:b3:
         fe:18:98:f4:5e:78:7e:88:2e:cd:7d:74:ce:68:e5:dc:87:b1:
         81:fe:13:e7:4f:b6:4f:d7:16:44:90:8f:3e:c7:74:87:0e:30:
         06:8f:3d:40:96:90:6c:e0:52:9d:7c:8b:81:fa:76:98:90:c9:
         b0:f4:02:9d:cd:ec:28:26:59:76:07:b1:5b:e9:66:67:fe:be:
         12:84:e0:90:3c:cc:1a:ea:85:1e:fa:b7:84:5c:b1:fe:a7:62:
         6a:aa:ba:0b:5c:72:cd:cd:47:0d:c3:00:c2:bc:ca:b9:d3:b7:
         28:10:6c:c6:33:a1:5b:91:85:8e:e7:15:ef:bf:a4:d9:d5:60:
         36:25:4c:99:81:54:6d:64:0e:55:63:0d:9e:d7:a3:0f:90:ff:
         45:6e:f5:9d:3f:9b:16:60:9c:55:69:4d:09:9e:b3:63:c0:d4:
         0e:70:83:cb:11:8a:bf:0d:3a:8f:08:78:d5:18:e0:50:c3:01:
         13:c3:0f:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 10:14:02 2025 by rpki-client