Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c6d16a39-472c-48cc-ac4c-7e385950a0e2/fe5c461d-2561-3a07-aa5b-9cf0679eb88f.roa
File:                     fe5c461d-2561-3a07-aa5b-9cf0679eb88f.roa (raw, json)
Hash identifier:          6zjEsnG6x3Wdoc52kuH0kJcx8mxNJflgGQdx5Uo3lxQ=
Subject key identifier:   6F:6A:A0:D8:E1:F6:B7:32:7E:63:21:93:B9:91:1C:F7:32:12:17:D4
Certificate issuer:       /CN=c6d16a39-472c-48cc-ac4c-7e385950a0e2
Certificate serial:       010D0C9F4328584B85EB2EFE64FD611989549800
Authority key identifier: 4E:9E:79:41:AD:55:D4:9D:9D:D7:5D:EE:90:7D:F7:4E:30:AA:90:3D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c6d16a39-472c-48cc-ac4c-7e385950a0e2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c6d16a39-472c-48cc-ac4c-7e385950a0e2/fe5c461d-2561-3a07-aa5b-9cf0679eb88f.roa
Signing time:             Tue 14 Oct 2025 21:44:05 +0000
ROA not before:           Tue 14 Oct 2025 21:44:05 +0000
ROA not after:            Mon 12 Jan 2026 22:44:05 +0000
asID:                     401319
IP address blocks:        66.51.101.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c6d16a39-472c-48cc-ac4c-7e385950a0e2/c6d16a39-472c-48cc-ac4c-7e385950a0e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c6d16a39-472c-48cc-ac4c-7e385950a0e2/c6d16a39-472c-48cc-ac4c-7e385950a0e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c6d16a39-472c-48cc-ac4c-7e385950a0e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:85:eb:2e:fe:64:fd:61:19:89:54:98:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c6d16a39-472c-48cc-ac4c-7e385950a0e2
        Validity
            Not Before: Oct 14 21:44:05 2025 GMT
            Not After : Jan 12 22:44:05 2026 GMT
        Subject: CN=db2e77c2-efed-41e0-a185-29a8e9b7b2a5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:ff:d2:e3:c6:6c:11:bd:ec:79:1f:4a:40:e9:
                    22:56:ef:37:3a:52:54:03:ee:99:69:e9:f6:d9:4a:
                    8b:e4:76:e8:67:7c:e9:38:54:39:71:2f:48:ea:68:
                    31:b6:2d:00:b3:30:f0:b9:4e:6f:5a:36:08:35:23:
                    47:28:d0:f6:97:9d:a7:7e:1b:f5:3d:32:37:5f:f8:
                    24:70:08:fd:fd:72:00:cc:2d:87:7e:db:ad:d6:74:
                    45:f0:78:48:98:cd:4f:26:48:bd:30:e9:3e:ab:28:
                    30:ad:c7:10:bc:51:52:92:fe:57:e1:60:c2:ac:63:
                    d3:fd:62:1d:1c:b1:a2:fa:12:fb:3d:4d:05:8a:38:
                    83:ad:78:c5:ae:04:94:ff:30:09:c8:fe:ec:8c:da:
                    a3:7b:df:0f:15:44:88:9f:93:ba:1c:98:e4:7c:a9:
                    8c:b7:27:73:90:6d:e9:48:08:97:cb:f2:c2:8d:03:
                    d9:59:74:84:5d:e8:06:df:e0:e5:d1:7a:03:60:ca:
                    6f:ff:55:50:e2:9c:31:4e:2e:65:63:32:26:03:22:
                    1f:d5:c8:d2:95:94:1d:0b:95:5a:70:6f:85:8a:9f:
                    00:65:0e:c7:52:29:64:05:b3:6d:f9:42:68:eb:3c:
                    84:84:80:2e:c1:08:ab:21:c3:a5:de:7c:13:81:43:
                    ae:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:6A:A0:D8:E1:F6:B7:32:7E:63:21:93:B9:91:1C:F7:32:12:17:D4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c6d16a39-472c-48cc-ac4c-7e385950a0e2/fe5c461d-2561-3a07-aa5b-9cf0679eb88f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c6d16a39-472c-48cc-ac4c-7e385950a0e2/c6d16a39-472c-48cc-ac4c-7e385950a0e2.crl

            X509v3 Authority Key Identifier:
                keyid:4E:9E:79:41:AD:55:D4:9D:9D:D7:5D:EE:90:7D:F7:4E:30:AA:90:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c6d16a39-472c-48cc-ac4c-7e385950a0e2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.51.101.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2c:2b:4c:1c:dc:a0:bb:ba:86:b8:dc:25:5c:c4:19:8c:21:d6:
         a3:97:5a:d5:c8:07:66:ac:0f:18:c6:49:d6:a2:e6:4f:fa:58:
         5c:6c:fd:96:81:9d:5d:d1:a0:38:43:96:b0:ba:e0:1e:15:45:
         f0:8e:cb:ab:48:f3:d1:b5:46:24:72:a3:40:3a:89:1f:e1:39:
         2f:5f:c8:d2:9d:50:79:14:c8:a6:69:91:3e:f1:3b:5e:d1:2d:
         84:d8:d8:0f:27:7f:6e:e1:0d:5e:27:18:0a:fc:8c:6d:ea:5e:
         98:93:22:63:4e:b2:44:a5:d9:8a:d9:b7:c1:d2:be:68:a9:63:
         7b:f8:8e:a0:8f:66:12:3b:bb:0d:a9:49:b5:05:a5:44:52:3e:
         a8:b2:a5:9d:1e:cf:2e:dc:f3:fe:65:a3:86:ca:2c:b9:ca:50:
         bf:92:f9:64:d7:7e:09:c2:02:9b:15:cf:ee:06:64:d9:93:13:
         20:99:4f:88:11:67:02:4e:14:99:8c:3a:19:ed:6c:2e:08:2f:
         b1:ff:db:74:d2:1a:80:2f:9b:96:26:39:82:54:1c:c0:31:46:
         1f:de:8a:36:18:43:b7:38:97:3a:5e:b6:7d:60:9f:a0:e6:1b:
         4f:ae:8a:b5:d1:9b:71:51:a7:25:47:1e:9d:b8:cb:17:ef:c4:
         e0:be:35:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 10:14:03 2025 by rpki-client