Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2fe89f6f-530f-4fd6-8c9f-68c4478b3a40/f1389442-5028-3887-b4f0-43f58569208c.roa
File:                     f1389442-5028-3887-b4f0-43f58569208c.roa (raw, json)
Hash identifier:          sVFurQtK+erAmqQqf9SpGERCJxDt4yyRxKbGmK1Ob70=
Subject key identifier:   A0:DB:07:5B:94:DD:54:0C:3B:FE:8D:8C:40:D2:58:7A:4E:1A:DE:D8
Certificate issuer:       /CN=2fe89f6f-530f-4fd6-8c9f-68c4478b3a40
Certificate serial:       010D0C9F4328584B0B76B3D453234C9571DBEDA0
Authority key identifier: EB:C9:0D:BE:3E:5C:11:0A:A1:CA:4A:85:23:5E:B1:30:D8:A6:CA:C7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2fe89f6f-530f-4fd6-8c9f-68c4478b3a40.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2fe89f6f-530f-4fd6-8c9f-68c4478b3a40/f1389442-5028-3887-b4f0-43f58569208c.roa
Signing time:             Mon 01 Sep 2025 01:00:33 +0000
ROA not before:           Mon 01 Sep 2025 01:00:33 +0000
ROA not after:            Sun 30 Nov 2025 02:00:33 +0000
asID:                     14618
IP address blocks:        66.45.8.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2fe89f6f-530f-4fd6-8c9f-68c4478b3a40/2fe89f6f-530f-4fd6-8c9f-68c4478b3a40.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2fe89f6f-530f-4fd6-8c9f-68c4478b3a40/2fe89f6f-530f-4fd6-8c9f-68c4478b3a40.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2fe89f6f-530f-4fd6-8c9f-68c4478b3a40.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:0b:76:b3:d4:53:23:4c:95:71:db:ed:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2fe89f6f-530f-4fd6-8c9f-68c4478b3a40
        Validity
            Not Before: Sep  1 01:00:33 2025 GMT
            Not After : Nov 30 02:00:33 2025 GMT
        Subject: CN=20b93f1f-eedc-4288-bc03-325721b68cae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:c4:d6:cd:e9:07:5f:a9:6c:c1:e6:be:8c:cd:
                    44:9e:de:48:45:ec:4b:b2:1e:af:0e:43:5d:27:9f:
                    0e:43:99:39:a2:01:d7:e4:d0:5b:59:86:34:33:ea:
                    d3:32:39:18:21:df:71:69:f1:25:88:5a:b5:d5:e2:
                    69:dc:89:8c:f3:7c:2b:bf:d4:cf:94:af:d5:b1:17:
                    e5:82:b8:42:f3:b2:1b:fd:f1:9d:55:2e:ef:76:c5:
                    06:82:7d:6e:e4:0e:86:7d:8e:f3:51:1e:a9:09:68:
                    2d:19:25:28:c1:ea:a4:64:21:4e:05:5d:c5:52:65:
                    e9:43:75:f1:59:c9:1f:6a:86:b0:76:01:b3:22:cd:
                    34:05:0a:a7:d9:7b:2b:50:19:8f:47:c8:b2:b9:d4:
                    e9:d4:eb:4d:a7:75:e9:93:e1:e8:75:4f:5c:8c:29:
                    96:2a:e7:f1:bc:0e:8a:c9:23:88:65:69:40:83:6e:
                    bb:74:98:90:c6:61:59:b3:c1:e9:d8:40:90:99:78:
                    b5:17:b3:33:98:f9:eb:84:bb:73:50:6c:ff:16:3b:
                    df:ab:7c:52:bd:26:66:85:dd:a9:d4:2a:57:2b:56:
                    1a:d1:c8:b7:4f:cb:78:cb:c6:ad:7a:13:76:15:fb:
                    64:23:60:a5:9e:9b:a1:e9:04:38:8b:7c:61:a0:39:
                    9d:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:DB:07:5B:94:DD:54:0C:3B:FE:8D:8C:40:D2:58:7A:4E:1A:DE:D8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2fe89f6f-530f-4fd6-8c9f-68c4478b3a40/f1389442-5028-3887-b4f0-43f58569208c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2fe89f6f-530f-4fd6-8c9f-68c4478b3a40/2fe89f6f-530f-4fd6-8c9f-68c4478b3a40.crl

            X509v3 Authority Key Identifier:
                keyid:EB:C9:0D:BE:3E:5C:11:0A:A1:CA:4A:85:23:5E:B1:30:D8:A6:CA:C7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2fe89f6f-530f-4fd6-8c9f-68c4478b3a40.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.45.8.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7f:9b:ce:c7:0c:77:0b:ef:dd:39:15:02:29:80:c5:d0:5f:8b:
         ff:8f:ce:b4:53:33:17:5f:b4:8a:a3:d3:17:a9:fd:0f:ab:a4:
         63:d4:c3:33:b3:2a:8b:d0:f6:04:d5:43:ff:6f:cf:0a:64:c7:
         38:1f:1d:23:0f:8a:b0:b1:a9:63:1f:12:8b:ce:31:14:8d:3b:
         a4:51:c1:bb:69:3b:6b:0d:2f:50:d2:12:3d:94:0d:b6:65:b6:
         a4:e2:5c:79:3b:7a:82:54:0e:86:31:0e:36:ab:01:df:ea:42:
         13:80:cc:fb:1c:ae:c5:80:68:5b:03:8a:52:b8:c5:40:b8:85:
         3d:93:eb:d4:5a:34:fa:2e:c5:a1:5f:44:e8:9f:9e:ef:65:c5:
         45:5f:3c:56:07:35:e3:73:1f:d2:8d:41:39:bd:d9:eb:ea:f8:
         1a:4f:01:9f:e1:b0:de:f3:f0:c6:70:36:20:1d:1c:f3:e0:71:
         e1:d9:f6:47:29:f7:72:28:83:c2:66:8c:f6:a2:89:b3:1c:c8:
         81:4e:be:bf:da:7d:6e:1a:d6:ae:f7:6d:e8:27:3e:e9:42:93:
         0a:f7:1b:d1:47:0c:0e:b8:52:a7:6c:a2:be:1e:f2:aa:2f:97:
         c7:31:23:e0:c0:b1:75:0a:7e:a7:37:06:4d:e3:53:3c:79:e1:
         76:51:fd:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 05:24:48 2025 by rpki-client