Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e5ecaf10-47c4-46e7-bd37-9c05f198c961/c3d6533c-9dc2-388e-b466-22a8067ca530.roa
File:                     c3d6533c-9dc2-388e-b466-22a8067ca530.roa (raw, json)
Hash identifier:          W5WXkP+FGsZ1YX5CYb93BGNqoXuw/gpXQW3FkAIMQPk=
Subject key identifier:   C0:B9:57:0B:99:02:0C:50:C9:83:8C:94:6A:77:C0:C0:31:69:2F:AC
Certificate issuer:       /CN=e5ecaf10-47c4-46e7-bd37-9c05f198c961
Certificate serial:       010D0C9F4328584B434C5873D9BBC2AE41E74980
Authority key identifier: 70:B0:E3:CB:ED:1B:4C:49:56:BE:1F:FE:32:B2:09:03:9A:40:20:38
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e5ecaf10-47c4-46e7-bd37-9c05f198c961.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e5ecaf10-47c4-46e7-bd37-9c05f198c961/c3d6533c-9dc2-388e-b466-22a8067ca530.roa
Signing time:             Sun 21 Sep 2025 01:00:32 +0000
ROA not before:           Sun 21 Sep 2025 01:00:32 +0000
ROA not after:            Sat 20 Dec 2025 02:00:32 +0000
asID:                     2725
IP address blocks:        66.85.25.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e5ecaf10-47c4-46e7-bd37-9c05f198c961/e5ecaf10-47c4-46e7-bd37-9c05f198c961.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e5ecaf10-47c4-46e7-bd37-9c05f198c961/e5ecaf10-47c4-46e7-bd37-9c05f198c961.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e5ecaf10-47c4-46e7-bd37-9c05f198c961.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Oct 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:43:4c:58:73:d9:bb:c2:ae:41:e7:49:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e5ecaf10-47c4-46e7-bd37-9c05f198c961
        Validity
            Not Before: Sep 21 01:00:32 2025 GMT
            Not After : Dec 20 02:00:32 2025 GMT
        Subject: CN=49e79c87-94af-4ea0-84ca-b93d40ca6e6f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:f8:cf:fd:91:99:a7:b8:9e:db:08:8c:4c:c7:
                    97:41:9c:39:eb:fe:47:07:47:94:37:e0:c1:b8:e4:
                    80:89:a9:83:71:d9:4d:b3:77:b0:b1:81:71:1f:45:
                    80:9c:29:8f:43:df:59:bf:d5:b6:2b:92:43:91:88:
                    4f:1e:fe:cf:89:53:94:af:cd:bd:4d:23:ec:73:b3:
                    40:e5:f2:e6:67:b5:47:fb:18:a0:2c:c9:46:dc:73:
                    34:fd:f4:62:7c:96:84:40:54:5c:7e:a6:6d:56:fe:
                    f0:95:39:8f:e8:c0:0e:d3:2a:19:5c:51:ca:04:42:
                    29:71:17:33:f8:8a:f8:3f:81:bf:79:3e:87:e9:2a:
                    83:6a:4f:e4:15:ff:ef:ae:af:09:49:43:57:48:36:
                    9d:2f:e2:cf:fc:34:59:42:83:cb:64:4d:d3:2d:21:
                    8b:1c:27:f7:93:da:f3:41:ea:03:c7:8f:7a:05:05:
                    15:10:ef:b0:26:ca:9b:3b:3f:6a:fc:ec:33:d3:88:
                    8c:cf:fd:cf:33:73:cf:6e:41:bd:c3:f3:3b:16:a8:
                    e1:24:9c:c7:e3:7c:7f:bd:c8:cd:3f:76:c0:f1:21:
                    69:88:11:15:ae:bd:05:cd:81:fe:3e:20:36:d8:73:
                    e3:44:8a:95:3b:aa:63:47:0d:8f:0a:0d:8a:5a:13:
                    b3:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:B9:57:0B:99:02:0C:50:C9:83:8C:94:6A:77:C0:C0:31:69:2F:AC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e5ecaf10-47c4-46e7-bd37-9c05f198c961/c3d6533c-9dc2-388e-b466-22a8067ca530.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e5ecaf10-47c4-46e7-bd37-9c05f198c961/e5ecaf10-47c4-46e7-bd37-9c05f198c961.crl

            X509v3 Authority Key Identifier:
                keyid:70:B0:E3:CB:ED:1B:4C:49:56:BE:1F:FE:32:B2:09:03:9A:40:20:38

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e5ecaf10-47c4-46e7-bd37-9c05f198c961.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.85.25.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4a:03:b8:f6:79:37:d8:53:ce:6e:9c:3c:c0:87:67:72:79:2c:
         e8:f6:04:39:f7:29:fb:b8:a1:8f:7d:6a:20:da:de:20:4b:4f:
         f8:28:b3:7d:a0:8b:ee:1a:0e:93:f7:81:29:25:5a:f4:cc:e0:
         2f:79:83:a4:c4:18:9b:49:0d:09:32:98:3a:0b:4d:82:10:d9:
         1d:2e:c8:79:d5:03:66:4c:f1:c6:c2:71:38:56:b8:26:a3:c5:
         29:7a:77:10:e0:65:df:4f:56:fa:6b:6d:94:e6:95:19:f1:e3:
         67:ec:f5:89:26:4d:df:29:d7:50:86:2d:16:2c:91:24:86:86:
         2f:6f:07:0b:fe:68:57:78:b9:a3:ef:7b:f7:d2:e7:0d:af:f8:
         be:5d:c1:d5:b6:a8:45:5d:ef:1e:b8:b1:8f:1a:99:5c:37:f6:
         46:fe:ae:60:72:8a:8b:8b:15:0b:5c:72:cb:4f:9e:b8:f4:8b:
         8c:5e:7b:24:ac:c0:ce:64:a6:90:31:88:6c:4d:82:a1:0b:41:
         2b:79:21:c2:6f:d2:bb:f4:22:07:f2:29:92:0e:9c:8e:25:fa:
         74:a0:46:66:73:cb:80:1d:5d:d2:77:4d:8e:d5:ac:3c:6b:38:
         da:ff:cf:e0:1f:66:c7:31:f0:fc:29:2a:88:8b:99:e0:7c:73:
         5c:de:c8:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 22 00:08:00 2025 by rpki-client