Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/761633ef-0fb8-4855-a42b-c999cd4782b5/3d01ad4f-9c12-32d9-b706-856b6cea5f06.roa
File:                     3d01ad4f-9c12-32d9-b706-856b6cea5f06.roa (raw, json)
Hash identifier:          JxF3HS5RdSO1rENqlXTfnJvMseSaEQgMuFl7waZhDV4=
Subject key identifier:   58:42:3E:B2:B6:4D:CF:76:91:FE:22:7D:AC:F6:56:F0:01:4B:5E:FE
Certificate issuer:       /CN=761633ef-0fb8-4855-a42b-c999cd4782b5
Certificate serial:       010D0C9F4328584B8D477BEB0CB0BE0B2F8DA160
Authority key identifier: A0:6F:78:7C:3B:42:5D:C9:68:13:88:03:00:C3:1E:2F:C1:49:7A:F5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/761633ef-0fb8-4855-a42b-c999cd4782b5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/761633ef-0fb8-4855-a42b-c999cd4782b5/3d01ad4f-9c12-32d9-b706-856b6cea5f06.roa
Signing time:             Fri 17 Oct 2025 13:00:39 +0000
ROA not before:           Fri 17 Oct 2025 13:00:39 +0000
ROA not after:            Thu 15 Jan 2026 14:00:39 +0000
asID:                     396040
IP address blocks:        66.196.32.0/20 maxlen: 20
                          67.226.217.0/24 maxlen: 24
                          161.199.104.0/24 maxlen: 24
                          162.142.24.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/761633ef-0fb8-4855-a42b-c999cd4782b5/761633ef-0fb8-4855-a42b-c999cd4782b5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/761633ef-0fb8-4855-a42b-c999cd4782b5/761633ef-0fb8-4855-a42b-c999cd4782b5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/761633ef-0fb8-4855-a42b-c999cd4782b5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:8d:47:7b:eb:0c:b0:be:0b:2f:8d:a1:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=761633ef-0fb8-4855-a42b-c999cd4782b5
        Validity
            Not Before: Oct 17 13:00:39 2025 GMT
            Not After : Jan 15 14:00:39 2026 GMT
        Subject: CN=10be9e0e-9362-4a93-9f76-f9b93ef0ad7d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:46:b9:47:47:6d:4e:f3:e5:e4:f5:47:3a:d0:
                    49:6f:a8:8f:d5:3e:e5:d4:42:14:41:1d:8f:be:56:
                    fe:eb:b9:8f:77:5a:9f:67:cc:b1:20:a5:a8:03:cb:
                    c0:c5:ef:b2:6e:89:16:a9:d8:c3:34:fe:27:62:ee:
                    37:24:00:65:14:13:74:e1:93:7a:d4:4e:23:63:ab:
                    ac:2e:a7:cd:03:01:2b:ce:40:bd:18:79:6c:15:3e:
                    fb:6c:e8:49:39:59:b5:fb:d1:57:7a:1c:32:63:b8:
                    ce:88:18:da:36:50:f0:24:7d:89:9c:64:3f:55:2b:
                    a6:34:22:73:38:67:b2:b0:c3:5b:ad:87:2c:0e:77:
                    ba:ec:0e:fd:d1:4c:c9:54:c3:88:97:4d:25:8c:7a:
                    9a:5e:d6:c7:81:e5:46:a3:83:d6:37:57:65:6d:f2:
                    27:b3:5e:df:e6:e1:20:20:b5:cb:02:73:57:ef:ae:
                    40:bc:c5:6e:2d:07:f1:c1:24:03:48:dd:66:b2:e1:
                    3e:61:fe:d7:53:96:59:02:90:67:3d:85:c9:31:3f:
                    7c:1b:94:b5:da:75:c9:e1:32:db:6c:59:66:a8:be:
                    9d:1a:a2:1d:49:bf:90:6c:15:ba:9f:f7:5d:62:88:
                    68:e6:1f:47:67:db:a6:d0:48:4d:a8:6e:48:85:f2:
                    e0:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:42:3E:B2:B6:4D:CF:76:91:FE:22:7D:AC:F6:56:F0:01:4B:5E:FE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/761633ef-0fb8-4855-a42b-c999cd4782b5/3d01ad4f-9c12-32d9-b706-856b6cea5f06.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/761633ef-0fb8-4855-a42b-c999cd4782b5/761633ef-0fb8-4855-a42b-c999cd4782b5.crl

            X509v3 Authority Key Identifier:
                keyid:A0:6F:78:7C:3B:42:5D:C9:68:13:88:03:00:C3:1E:2F:C1:49:7A:F5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/761633ef-0fb8-4855-a42b-c999cd4782b5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.196.32.0/20
                  67.226.217.0/24
                  161.199.104.0/24
                  162.142.24.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         59:7d:13:2c:89:f3:fe:0f:a8:58:f6:a6:16:37:8f:38:a9:c8:
         55:a1:bd:58:65:4d:9f:6d:7a:43:80:4f:54:11:bd:a0:d6:aa:
         21:4e:93:3a:46:63:8c:a6:37:12:e0:81:03:dc:cc:46:d3:49:
         e0:37:c6:72:57:01:e6:52:4c:8a:2d:b1:ac:85:23:b7:7a:68:
         25:78:62:f1:ca:9b:97:bb:f0:74:de:30:ab:8a:92:f9:cf:c9:
         f9:14:06:33:a6:4a:0f:40:f2:7a:dd:50:ac:c2:cc:05:89:c9:
         40:de:88:ed:64:1b:a6:b9:e9:bd:7b:88:5c:a6:6d:c5:9f:98:
         68:ac:25:a6:87:16:92:d4:d5:77:98:49:66:54:24:9f:3f:c2:
         1b:2a:d0:f0:f2:60:03:33:a3:0b:19:91:5b:d1:27:d1:3d:b9:
         a1:74:3f:7c:da:07:d6:91:99:d5:71:bb:7c:de:4b:82:8e:02:
         ea:90:4c:fb:15:81:b5:a0:93:96:8a:6b:1d:e9:00:66:70:01:
         49:b6:25:6a:1f:ff:73:f5:09:1f:24:b8:54:6c:ac:0f:47:ab:
         f0:b9:33:88:b3:4c:67:91:7f:24:e9:37:e4:54:ab:49:52:35:
         54:fd:0d:7e:e9:e2:51:d7:53:37:9b:a2:40:6f:44:d8:4a:14:
         b8:a0:d3:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 20:41:23 2025 by rpki-client