Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/27262760-9681-3676-ac3b-e74d35d23dc1.roa
File:                     27262760-9681-3676-ac3b-e74d35d23dc1.roa (raw, json)
Hash identifier:          r0lbJIFpEZX9i4NqJ1i4IacG8J+WhmKxavrlHHQfzhk=
Subject key identifier:   CB:FF:A3:97:FA:B5:AA:3C:8D:96:8B:FF:E7:1D:5A:6B:82:9F:86:2E
Certificate issuer:       /CN=da370214-1d61-48bf-84a0-a60096ccaae7
Certificate serial:       010D0C9F4328584B5B0765365507FF8A9F98BA80
Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/27262760-9681-3676-ac3b-e74d35d23dc1.roa
Signing time:             Mon 29 Sep 2025 13:00:41 +0000
ROA not before:           Mon 29 Sep 2025 13:00:41 +0000
ROA not after:            Sun 28 Dec 2025 14:00:41 +0000
asID:                     62610
IP address blocks:        66.253.45.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:5b:07:65:36:55:07:ff:8a:9f:98:ba:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7
        Validity
            Not Before: Sep 29 13:00:41 2025 GMT
            Not After : Dec 28 14:00:41 2025 GMT
        Subject: CN=b5b49f4e-c776-48a2-a8ae-baf661bf0c71
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:19:7a:7a:0b:ed:24:56:5d:7d:7d:2f:8c:72:
                    b9:f6:9b:54:06:79:fa:45:9b:2d:d8:42:1b:b5:c4:
                    3d:de:13:f4:02:c1:74:9b:ac:13:f7:5e:40:1c:ed:
                    9e:d0:45:d0:c4:69:4e:c6:93:2b:c1:31:69:5c:5f:
                    42:d7:7e:d5:2c:0c:ef:e5:0b:e7:3e:b4:ed:05:b1:
                    2e:95:34:a9:f8:04:f3:a8:d3:3c:e1:ee:b9:42:8c:
                    05:e2:18:ff:7e:40:43:5a:4d:fe:02:4d:ae:12:f3:
                    9f:ff:67:f6:79:a5:60:b1:a2:f6:6d:23:0c:1f:78:
                    46:b8:35:d5:92:3f:34:9b:e9:55:72:54:7f:f1:f1:
                    f8:2f:b8:e6:37:cd:fe:55:0d:04:98:bf:e1:34:70:
                    18:a1:72:cd:6a:f7:dc:df:6e:ee:d4:0f:e6:15:43:
                    b0:94:9b:4a:c6:2e:db:9d:31:5b:0b:6e:86:ec:fb:
                    a7:4b:28:0b:c4:23:3f:52:9a:70:3d:27:a0:50:9c:
                    1e:60:22:44:50:2c:77:68:20:ab:98:de:7b:f0:3f:
                    36:9a:27:60:1d:30:47:d8:70:41:15:74:72:f7:d3:
                    75:1f:2f:05:dc:71:a9:87:00:40:47:2a:3a:2e:a4:
                    bf:cf:ca:30:87:67:52:aa:e0:af:ed:52:84:b4:5a:
                    40:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:FF:A3:97:FA:B5:AA:3C:8D:96:8B:FF:E7:1D:5A:6B:82:9F:86:2E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/27262760-9681-3676-ac3b-e74d35d23dc1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl

            X509v3 Authority Key Identifier:
                keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.253.45.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2c:fe:f5:ac:a1:1f:9c:73:9a:00:01:2b:97:44:83:fa:1d:23:
         0b:c1:25:29:4a:5d:60:b7:47:c9:d2:52:8e:e1:cc:98:24:bd:
         40:a2:12:90:23:26:db:3b:1b:0c:a6:fc:d5:de:e3:df:4a:90:
         26:4d:84:cc:72:ca:e1:78:73:8d:98:94:1a:18:06:a1:a4:a8:
         60:f3:3e:e5:c8:0f:4d:59:e6:f9:20:7b:5c:58:a3:74:a3:c7:
         b8:9b:ba:3c:bb:93:c1:55:5b:75:51:3f:22:30:8d:66:00:54:
         33:50:7b:d6:28:8c:28:53:5c:98:7d:0b:5b:6f:56:f8:e3:3d:
         8f:65:c7:e9:f6:56:15:70:ee:12:6f:6f:d7:83:09:50:05:a2:
         47:ee:cd:b6:42:5b:f7:0d:b1:b4:e2:a3:34:98:af:23:ca:53:
         19:e4:a0:71:0a:5d:42:69:0e:a4:d1:2b:27:3a:1d:ce:50:3a:
         31:b5:2a:58:d9:15:b7:12:c5:9c:5b:f2:10:a7:d8:9b:4d:67:
         e3:a7:e0:ba:1f:54:c4:a4:22:0e:d6:3f:23:b4:30:95:fa:de:
         7d:95:29:b1:33:b4:9b:0b:29:d1:6b:12:63:f4:ad:26:19:2c:
         27:32:0b:15:d4:ce:cc:06:c4:b5:eb:3a:ae:b5:e2:83:d4:b0:
         27:34:4f:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 22:46:15 2025 by rpki-client