Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/2e76978c-4e26-3769-9a26-890f2f631d53.roa
File:                     2e76978c-4e26-3769-9a26-890f2f631d53.roa (raw, json)
Hash identifier:          pcghCZCEqZzXthe8zMZfoQAFDsM6poO1TYFxhtmA/Ro=
Subject key identifier:   C0:0F:D0:1D:8B:82:9A:FB:B5:8F:EC:C0:9A:6F:38:50:EA:7D:57:AE
Certificate issuer:       /CN=da370214-1d61-48bf-84a0-a60096ccaae7
Certificate serial:       010D0C9F4328584B87B23E68776AF97A62AF0700
Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/2e76978c-4e26-3769-9a26-890f2f631d53.roa
Signing time:             Wed 15 Oct 2025 13:00:38 +0000
ROA not before:           Wed 15 Oct 2025 13:00:38 +0000
ROA not after:            Tue 13 Jan 2026 14:00:38 +0000
asID:                     46401
IP address blocks:        66.54.132.0/22 maxlen: 24
                          67.200.52.0/24 maxlen: 24
                          67.200.53.0/24 maxlen: 24
                          67.200.56.0/23 maxlen: 24
                          67.200.116.0/23 maxlen: 24
                          74.199.198.0/23 maxlen: 24
                          208.97.205.0/24 maxlen: 24
                          209.213.215.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:87:b2:3e:68:77:6a:f9:7a:62:af:07:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7
        Validity
            Not Before: Oct 15 13:00:38 2025 GMT
            Not After : Jan 13 14:00:38 2026 GMT
        Subject: CN=57cdd447-9961-4949-9b7d-84e2ed80f893
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:99:08:3c:be:71:b1:06:ae:37:c1:ae:1a:0d:
                    13:cb:44:55:7f:d2:f6:b2:50:14:b0:21:8f:b0:2d:
                    5e:c6:64:4b:e9:00:83:45:a6:b8:59:36:e7:c8:34:
                    d1:22:8e:b1:7a:38:db:ee:f6:83:f1:5a:cb:ea:90:
                    d8:b4:7f:53:f3:98:74:c4:29:46:e7:6a:e6:47:07:
                    40:20:10:e5:2b:ce:b7:81:4e:af:41:5b:95:ec:e0:
                    fd:4e:69:6c:9b:70:a9:2a:8a:2e:84:9c:b3:e6:42:
                    c5:45:80:bb:89:26:14:90:e8:74:07:26:bc:74:10:
                    94:2c:17:77:b2:53:f5:e0:3f:ac:0f:e7:06:78:d3:
                    4c:cd:b2:72:62:f0:ec:9f:70:2a:95:af:26:ec:a5:
                    19:a6:15:1d:c5:db:b2:fa:32:96:a4:4e:3a:0a:c9:
                    49:c7:7f:6a:da:a6:02:22:3d:f3:31:bc:36:94:ae:
                    cf:63:39:ef:fd:c5:28:13:1a:2e:5b:95:de:b7:c3:
                    1f:27:5e:1e:8d:a5:31:31:31:9d:f8:6f:52:fd:b1:
                    46:0f:28:9c:ce:72:e0:59:bb:53:78:59:a3:b8:f3:
                    a9:9d:89:49:28:51:b2:4e:1c:ff:b0:67:cf:5b:d6:
                    0d:d4:ed:9d:ea:e1:06:24:ba:db:9d:f6:65:18:85:
                    d6:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:0F:D0:1D:8B:82:9A:FB:B5:8F:EC:C0:9A:6F:38:50:EA:7D:57:AE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/2e76978c-4e26-3769-9a26-890f2f631d53.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl

            X509v3 Authority Key Identifier:
                keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.54.132.0/22
                  67.200.52.0/23
                  67.200.56.0/23
                  67.200.116.0/23
                  74.199.198.0/23
                  208.97.205.0/24
                  209.213.215.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         78:45:1f:83:a4:31:b3:6f:e9:af:7c:69:ce:e0:cf:c6:ba:da:
         c7:9f:53:40:cd:e2:29:81:4e:d4:9b:d0:2d:e8:bb:47:5e:4c:
         8c:61:21:73:67:00:a9:15:9a:f5:ae:32:91:d0:20:53:57:a3:
         2c:d6:3d:66:6f:2f:4d:9c:88:b4:0b:14:be:37:f9:cb:e4:82:
         00:a3:6e:53:35:2d:bb:1c:49:06:6f:2b:b7:9e:0d:dc:b1:2c:
         1d:7f:58:87:14:8b:92:79:aa:05:ab:60:0f:32:d1:d1:af:16:
         38:f3:65:3a:51:65:90:bb:61:c3:76:32:7c:be:92:c0:d4:ee:
         1f:be:8c:24:4b:d0:4d:60:f1:f2:6f:84:bf:3a:50:ae:19:9d:
         1f:96:21:0b:fd:30:ec:47:24:cc:f1:a6:52:b2:f8:c9:76:a6:
         ed:97:2a:7e:9e:b0:04:cd:c8:72:e4:2a:c8:a2:9c:e0:c0:80:
         f5:48:20:15:44:0a:c1:24:31:18:8d:73:3b:71:a3:a4:ec:95:
         9b:5a:f4:4c:d7:98:2c:32:09:4d:f2:b1:ed:b3:5f:fc:ec:08:
         cc:61:bc:82:ff:e3:31:49:30:38:25:b3:51:db:fd:95:5b:4b:
         40:23:06:b2:9b:b7:06:cc:c0:ea:fa:08:48:d4:5d:8b:96:03:
         90:d8:01:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 22:44:01 2025 by rpki-client