Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516/81b109d3-3e7c-3c00-af78-b3187adb6b1d.roa
File:                     81b109d3-3e7c-3c00-af78-b3187adb6b1d.roa (raw, json)
Hash identifier:          dic7xu6bLlAqRnEDpT6ep8odcPMQZ2bIOt7A3DBMRCo=
Subject key identifier:   F8:D2:79:25:C7:CA:E7:41:B9:AE:B8:05:39:22:4B:3E:3E:25:76:0A
Certificate issuer:       /CN=1add3b23-5fb0-4412-be17-98450d352516
Certificate serial:       010D0C9F4328584B4D11D01EC35E039FDEDBFB00
Authority key identifier: DF:D6:AB:35:08:C4:67:A3:69:8E:4B:5D:EA:87:78:C0:7A:1D:8E:26
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516/81b109d3-3e7c-3c00-af78-b3187adb6b1d.roa
Signing time:             Wed 24 Sep 2025 13:00:41 +0000
ROA not before:           Wed 24 Sep 2025 13:00:41 +0000
ROA not after:            Tue 23 Dec 2025 14:00:41 +0000
asID:                     53298
IP address blocks:        66.181.80.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516/1add3b23-5fb0-4412-be17-98450d352516.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516/1add3b23-5fb0-4412-be17-98450d352516.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Oct 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:4d:11:d0:1e:c3:5e:03:9f:de:db:fb:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1add3b23-5fb0-4412-be17-98450d352516
        Validity
            Not Before: Sep 24 13:00:41 2025 GMT
            Not After : Dec 23 14:00:41 2025 GMT
        Subject: CN=8e001f32-73b6-4d77-8154-4d0b4b40e9e6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:74:52:ed:f8:7a:aa:d3:e1:37:9e:16:21:3e:
                    37:93:7b:9d:d8:da:56:71:a3:60:c0:54:26:4c:bd:
                    bc:26:05:1c:37:53:b7:c5:2c:2d:62:c7:af:8e:98:
                    df:aa:df:5e:58:e0:5e:b0:6b:8c:a2:56:5c:4e:e0:
                    70:c6:a0:0d:37:89:c3:3c:cb:3c:a0:df:22:f4:c3:
                    c5:df:45:90:1c:dc:d8:9d:71:e9:59:80:90:79:6a:
                    80:e3:3c:f6:a6:a8:74:32:58:70:03:12:f7:19:9e:
                    d5:c8:52:4a:fe:fc:e6:56:ca:5f:60:d8:7f:7c:a8:
                    e9:35:46:7c:30:32:a9:96:d8:13:a3:df:6e:bb:b1:
                    ed:10:b2:22:d5:a4:b8:c1:78:b6:f8:3c:91:cd:7d:
                    71:32:05:db:1a:03:78:39:ec:a6:02:bf:fe:28:30:
                    1b:86:3b:d8:36:cd:2a:0b:f6:62:6b:28:52:2c:2c:
                    6c:ad:e9:14:5f:50:f0:20:6b:de:56:61:de:aa:cb:
                    91:fa:a0:43:78:9d:33:68:c4:2d:ed:c1:1a:37:b0:
                    7d:4a:d8:c9:88:89:cc:d5:0c:82:79:a5:2e:aa:82:
                    a7:b3:0f:92:79:36:82:0f:a8:55:e1:28:07:53:db:
                    cd:05:fe:f8:dd:a4:0d:74:43:26:47:34:53:6b:92:
                    37:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:D2:79:25:C7:CA:E7:41:B9:AE:B8:05:39:22:4B:3E:3E:25:76:0A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516/81b109d3-3e7c-3c00-af78-b3187adb6b1d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516/1add3b23-5fb0-4412-be17-98450d352516.crl

            X509v3 Authority Key Identifier:
                keyid:DF:D6:AB:35:08:C4:67:A3:69:8E:4B:5D:EA:87:78:C0:7A:1D:8E:26

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.181.80.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         00:23:e8:fa:e3:7f:23:e2:26:93:2a:56:ba:c7:c8:74:63:01:
         e3:b7:0d:82:87:4c:63:db:b6:fc:69:ba:28:10:83:5f:3a:82:
         8d:77:65:c3:96:30:ce:11:8d:05:6a:9f:23:a1:4a:26:79:51:
         1e:a4:09:bf:82:30:e3:2d:08:32:ab:04:29:c0:80:ee:74:90:
         fa:5e:01:1d:32:6f:5e:7f:ec:44:35:0e:1b:7a:18:0a:3e:2f:
         30:07:56:d2:58:c6:58:4d:e0:23:1b:5f:e3:3b:54:ed:e0:56:
         76:38:a4:5e:21:0a:24:3b:eb:74:75:a2:b9:8f:26:47:f9:17:
         ba:78:bb:71:43:bd:ce:9a:79:2c:9a:23:a0:be:6c:81:87:a9:
         1f:32:d2:92:50:31:d7:16:9a:e0:f3:28:2d:62:d9:fd:0b:07:
         44:8e:b3:71:fc:fc:3b:cb:71:58:26:68:2f:7c:f8:61:02:29:
         78:d8:9b:f6:fe:05:52:25:a5:01:eb:46:5d:69:23:61:98:96:
         bc:38:62:93:f6:06:16:98:3f:ce:a1:5b:4e:80:20:88:d8:e6:
         88:91:86:41:c8:c2:e0:f4:df:b0:89:04:9f:37:e5:34:e8:65:
         7c:3b:a8:69:2f:16:fd:48:ba:7e:a7:dc:df:a7:a5:b0:78:32:
         e9:3e:75:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 02:31:26 2025 by rpki-client