Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/654e0ef8-ac77-456b-9a63-98fdb228488b/ffa34e15-4eca-341b-a5d1-96d5143b05b6.roa
File:                     ffa34e15-4eca-341b-a5d1-96d5143b05b6.roa (raw, json)
Hash identifier:          2uQc8c57y5XFD7AlLLVnbCij/hfAwfPd1m+5V47TUIY=
Subject key identifier:   96:AD:C8:E2:8E:95:73:20:C8:FF:7E:01:BF:65:25:14:99:D0:89:88
Certificate issuer:       /CN=654e0ef8-ac77-456b-9a63-98fdb228488b
Certificate serial:       010D0C9F4328584AE4611E2379B5E8098F9EE2E0
Authority key identifier: 20:80:0A:96:BA:42:3C:E7:7D:BC:50:BB:B4:20:27:67:E2:88:5C:CC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/654e0ef8-ac77-456b-9a63-98fdb228488b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/654e0ef8-ac77-456b-9a63-98fdb228488b/ffa34e15-4eca-341b-a5d1-96d5143b05b6.roa
Signing time:             Mon 18 Aug 2025 01:00:33 +0000
ROA not before:           Mon 18 Aug 2025 01:00:33 +0000
ROA not after:            Sun 16 Nov 2025 02:00:33 +0000
asID:                     400404
IP address blocks:        66.71.208.0/21 maxlen: 24
                          96.45.144.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/654e0ef8-ac77-456b-9a63-98fdb228488b/654e0ef8-ac77-456b-9a63-98fdb228488b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/654e0ef8-ac77-456b-9a63-98fdb228488b/654e0ef8-ac77-456b-9a63-98fdb228488b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/654e0ef8-ac77-456b-9a63-98fdb228488b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:e4:61:1e:23:79:b5:e8:09:8f:9e:e2:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=654e0ef8-ac77-456b-9a63-98fdb228488b
        Validity
            Not Before: Aug 18 01:00:33 2025 GMT
            Not After : Nov 16 02:00:33 2025 GMT
        Subject: CN=55666e0d-0eb3-484a-998f-0be2c4f14abf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:62:b6:2c:81:3a:b2:88:13:0a:24:ed:25:3b:
                    b5:1b:04:a5:21:5e:d4:24:74:00:4f:a7:a0:9e:f8:
                    0d:e7:c0:0b:4c:9b:97:e2:fe:94:de:cf:d6:af:29:
                    99:aa:fb:cd:aa:e8:0b:0f:ab:1b:99:7e:f7:29:6a:
                    58:7a:89:b3:90:7e:2e:b4:15:73:83:65:1b:a7:29:
                    d0:05:f4:b1:29:38:4e:a6:8b:0e:08:bf:02:29:61:
                    88:7d:e6:ab:37:dd:dd:5e:08:e3:66:3d:38:54:6f:
                    5d:2b:b1:23:ce:7e:22:d7:37:09:80:0e:27:bf:03:
                    e4:4c:c9:1f:1b:0e:69:a3:97:89:6e:7e:c1:f5:9a:
                    a2:b3:db:7f:97:73:54:e4:54:f1:bf:53:35:51:13:
                    d8:8e:5b:51:de:1b:ac:88:c9:4f:87:77:4d:c7:ba:
                    0d:ea:cf:9b:b0:30:72:bc:76:3e:fa:18:57:ac:3b:
                    4a:3e:4c:40:75:56:ce:68:09:aa:df:9a:bf:65:82:
                    45:f6:16:06:ef:df:e0:07:5b:a5:14:6b:27:88:f8:
                    da:09:78:0c:73:4b:3b:b9:16:e2:16:4e:87:0d:0d:
                    ff:5e:f2:74:36:a3:eb:14:30:75:76:c9:75:10:63:
                    74:ac:fe:b6:1c:82:81:d9:56:d7:02:00:ce:3c:8d:
                    c5:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:AD:C8:E2:8E:95:73:20:C8:FF:7E:01:BF:65:25:14:99:D0:89:88
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/654e0ef8-ac77-456b-9a63-98fdb228488b/ffa34e15-4eca-341b-a5d1-96d5143b05b6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/654e0ef8-ac77-456b-9a63-98fdb228488b/654e0ef8-ac77-456b-9a63-98fdb228488b.crl

            X509v3 Authority Key Identifier:
                keyid:20:80:0A:96:BA:42:3C:E7:7D:BC:50:BB:B4:20:27:67:E2:88:5C:CC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/654e0ef8-ac77-456b-9a63-98fdb228488b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.71.208.0/21
                  96.45.144.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         49:cd:b5:f8:5f:3f:70:83:54:32:70:92:ce:9d:3b:e5:74:38:
         e2:bf:28:eb:84:ed:29:38:9e:45:a3:37:48:1e:4e:08:91:2a:
         d9:bd:46:ab:5f:7f:d5:a8:37:3a:03:80:16:01:5d:1b:84:ff:
         cb:fe:5c:d8:e9:7f:16:28:18:3f:26:76:5f:47:2c:b3:11:74:
         23:6c:fb:f4:0e:36:26:62:f5:ec:80:d9:11:f6:ee:89:0c:b1:
         ef:af:c0:3f:6c:9f:e7:ee:04:48:44:af:6f:6d:ed:84:9e:93:
         d8:f3:87:63:3d:bf:fd:a7:19:8c:63:d6:9d:be:50:86:f0:43:
         e2:2a:bd:26:03:00:77:4b:68:e5:89:32:01:ac:66:7a:3f:98:
         07:b7:07:65:a6:ff:8e:fc:8d:25:27:df:11:87:e8:f1:15:77:
         b8:d7:8f:10:23:56:b2:b5:fc:5f:cd:21:fe:05:c6:ec:40:25:
         1e:5b:22:28:08:fe:86:a8:38:32:ca:fe:f4:ec:33:65:2c:60:
         e9:be:4b:44:ee:26:03:4e:d9:91:d6:de:36:49:fe:f6:11:73:
         80:a1:34:6c:07:9d:ca:e3:6a:2a:93:56:de:35:ed:8a:58:82:
         ab:d9:be:05:52:e8:28:4b:bf:91:69:4f:18:88:df:61:77:a7:
         fb:c8:a9:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 04:23:46 2025 by rpki-client