Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9e1491d6-2ab7-4c14-bee6-122ee4531127/bbf39f86-d152-30ea-b2ae-861c6e7a4fc2.roa
File:                     bbf39f86-d152-30ea-b2ae-861c6e7a4fc2.roa (raw, json)
Hash identifier:          SkVMKOobguwd8J0B09eY2AobMXGVeQGkoBa12eE785c=
Subject key identifier:   65:22:4D:2D:42:AA:50:9C:F9:CF:38:E9:6D:FC:CE:7E:DC:96:09:90
Certificate issuer:       /CN=9e1491d6-2ab7-4c14-bee6-122ee4531127
Certificate serial:       010D0C9F4328584AF2568648EE83533A276FB480
Authority key identifier: C2:B5:FB:E5:85:57:E2:F0:2A:41:C4:C8:DA:D4:D7:06:C3:0E:9B:68
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9e1491d6-2ab7-4c14-bee6-122ee4531127.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9e1491d6-2ab7-4c14-bee6-122ee4531127/bbf39f86-d152-30ea-b2ae-861c6e7a4fc2.roa
Signing time:             Sat 23 Aug 2025 01:00:33 +0000
ROA not before:           Sat 23 Aug 2025 01:00:33 +0000
ROA not after:            Fri 21 Nov 2025 02:00:33 +0000
asID:                     396417
IP address blocks:        66.203.115.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9e1491d6-2ab7-4c14-bee6-122ee4531127/9e1491d6-2ab7-4c14-bee6-122ee4531127.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9e1491d6-2ab7-4c14-bee6-122ee4531127/9e1491d6-2ab7-4c14-bee6-122ee4531127.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9e1491d6-2ab7-4c14-bee6-122ee4531127.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Aug 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:f2:56:86:48:ee:83:53:3a:27:6f:b4:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9e1491d6-2ab7-4c14-bee6-122ee4531127
        Validity
            Not Before: Aug 23 01:00:33 2025 GMT
            Not After : Nov 21 02:00:33 2025 GMT
        Subject: CN=67a94994-1383-4f4a-8c26-ebe46dd13a00
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:9c:6a:4f:13:61:6f:fe:d3:7f:e9:87:96:7d:
                    ca:44:95:a1:bf:0f:fb:6f:7d:61:86:35:3a:53:c5:
                    0e:cd:56:e1:2f:a6:58:f2:e7:89:bf:c1:11:f1:f5:
                    df:21:d4:69:57:4b:47:ee:a3:c5:8e:16:10:05:f4:
                    1c:65:f0:51:7c:0b:49:0b:4a:34:e5:f4:cc:05:5a:
                    8d:f3:fd:da:36:ee:c6:b7:6b:7c:97:aa:7d:c6:9d:
                    ef:f9:4e:e0:84:18:c6:fc:83:fc:08:34:f5:25:e1:
                    74:54:ba:99:b3:1a:a5:10:ad:10:c7:5e:04:ae:b0:
                    c1:be:5f:f1:30:8c:0c:39:5a:87:22:a1:01:f4:01:
                    08:91:18:46:db:64:a6:60:6f:1b:2a:76:5e:da:28:
                    ca:f5:3d:1b:e4:91:ad:0a:62:29:06:fb:dc:72:40:
                    2e:bc:5b:1a:1b:66:24:43:b2:b8:6c:09:c6:64:8f:
                    6b:74:05:30:69:62:83:b8:29:ba:13:62:d8:44:12:
                    18:37:0b:ae:43:f3:a4:54:e5:3d:00:d6:21:73:67:
                    76:45:9b:f4:1a:10:80:5f:b9:02:de:85:07:79:c0:
                    29:2c:93:20:a9:94:6e:f4:fb:88:7b:4d:1a:bc:d1:
                    f0:37:89:fb:d7:5c:50:07:04:c9:bc:1c:85:2f:bb:
                    8e:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:22:4D:2D:42:AA:50:9C:F9:CF:38:E9:6D:FC:CE:7E:DC:96:09:90
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9e1491d6-2ab7-4c14-bee6-122ee4531127/bbf39f86-d152-30ea-b2ae-861c6e7a4fc2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9e1491d6-2ab7-4c14-bee6-122ee4531127/9e1491d6-2ab7-4c14-bee6-122ee4531127.crl

            X509v3 Authority Key Identifier:
                keyid:C2:B5:FB:E5:85:57:E2:F0:2A:41:C4:C8:DA:D4:D7:06:C3:0E:9B:68

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9e1491d6-2ab7-4c14-bee6-122ee4531127.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.203.115.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5d:24:ea:76:bd:84:58:62:72:52:fc:14:1f:51:fb:5c:b9:87:
         f7:b5:e1:d0:22:dc:4d:de:c5:80:ee:8d:a8:db:8a:8e:ab:86:
         56:86:32:54:f1:05:56:fb:1e:47:11:4f:15:89:64:e0:f8:0c:
         b2:00:9e:cf:ba:d9:91:3a:67:6d:6f:e1:2f:81:9e:e9:f1:9a:
         fe:60:fb:bc:e5:37:6e:35:78:29:43:54:5e:ef:1b:7f:67:e3:
         22:11:6a:33:80:5b:1d:e5:84:c6:70:e1:f4:01:2e:d0:bd:f2:
         ca:1e:27:9c:43:bb:87:49:40:f6:df:cf:8d:2e:53:d9:de:b3:
         97:b4:a1:cd:e5:a1:38:47:6e:54:82:30:ee:16:db:4a:bc:50:
         2b:5f:0a:1e:16:0d:d2:ce:ad:fc:8d:36:26:79:b0:bb:a7:c6:
         cf:2c:2b:ff:6e:36:4b:88:58:d2:39:3a:59:fe:17:5c:f4:db:
         74:e1:37:7c:57:fc:16:4b:9e:2d:51:df:f1:73:8e:54:ee:a6:
         8a:40:92:2e:04:3b:9c:d2:27:05:51:6f:0f:f8:86:31:93:c8:
         bc:57:d2:70:44:bc:e4:c5:6d:2b:0b:96:4c:84:5d:f3:57:91:
         04:9e:4e:2d:b6:be:73:5c:a3:b5:ba:df:70:44:31:22:a9:4a:
         ad:f4:2e:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 09:36:03 2025 by rpki-client