Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a4e67936-c857-487d-93df-2dff7fa79988/f8b9e90b-cc80-3bbd-b475-11cb7e7cd6f8.roa
File:                     f8b9e90b-cc80-3bbd-b475-11cb7e7cd6f8.roa (raw, json)
Hash identifier:          mmvDpni4pdSIJdhjIZKOeFdcLXzumfe8O1figKtIB3Y=
Subject key identifier:   81:98:6C:87:65:0E:E5:7D:8F:B1:E6:A1:28:8E:61:FC:EB:4C:4C:DC
Certificate issuer:       /CN=a4e67936-c857-487d-93df-2dff7fa79988
Certificate serial:       010D0C9F4328584AE0311B09C271205DDF9D860C
Authority key identifier: 16:A5:E3:3A:12:28:97:2E:9F:52:34:01:A7:6E:E1:96:9C:DF:E9:8E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a4e67936-c857-487d-93df-2dff7fa79988.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a4e67936-c857-487d-93df-2dff7fa79988/f8b9e90b-cc80-3bbd-b475-11cb7e7cd6f8.roa
Signing time:             Sat 16 Aug 2025 13:00:42 +0000
ROA not before:           Sat 16 Aug 2025 13:00:42 +0000
ROA not after:            Fri 14 Nov 2025 14:00:42 +0000
asID:                     14618
IP address blocks:        66.114.94.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a4e67936-c857-487d-93df-2dff7fa79988/a4e67936-c857-487d-93df-2dff7fa79988.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a4e67936-c857-487d-93df-2dff7fa79988/a4e67936-c857-487d-93df-2dff7fa79988.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a4e67936-c857-487d-93df-2dff7fa79988.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:e0:31:1b:09:c2:71:20:5d:df:9d:86:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a4e67936-c857-487d-93df-2dff7fa79988
        Validity
            Not Before: Aug 16 13:00:42 2025 GMT
            Not After : Nov 14 14:00:42 2025 GMT
        Subject: CN=1b9b4486-b57a-4767-a2ba-9f4c1303885f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:22:d3:68:fc:d6:40:0c:d5:7c:9d:16:5e:81:
                    b0:9e:88:90:5e:d4:ab:38:42:5c:f3:8c:59:1e:54:
                    25:93:8a:a9:60:50:40:10:a4:72:7e:95:38:3a:1e:
                    e5:5c:75:a3:3d:ab:44:bc:78:09:49:e8:c4:e0:c1:
                    73:4b:5b:e4:51:c6:23:ba:10:86:0d:ca:87:89:8b:
                    34:9a:92:07:6e:f2:3f:90:6c:b9:13:b3:57:ee:d4:
                    05:69:cb:13:31:51:57:31:ee:58:b6:a2:0c:f8:22:
                    95:6a:67:b5:5e:ab:18:5d:e6:6f:07:7d:ff:d0:ff:
                    fe:57:40:bb:2c:34:05:3e:f6:bb:2c:7e:58:c6:a6:
                    3b:7a:52:43:e3:f9:21:b2:0d:39:a5:e1:ab:45:13:
                    6e:ca:0d:b7:08:32:c5:45:df:1c:1d:c3:5f:e3:fc:
                    bf:25:a0:62:ea:71:4a:ce:31:f6:d6:4b:58:af:fd:
                    cb:ca:0a:17:e1:f3:ec:87:ba:07:65:6a:d9:d0:e9:
                    b7:29:96:aa:02:45:80:de:43:4f:ce:3c:ab:35:dd:
                    0b:49:be:e6:f5:dd:23:13:3b:f3:56:9c:25:69:eb:
                    67:6c:e7:82:21:e3:91:16:d9:61:88:a4:ee:c9:f3:
                    b9:a3:11:c3:0b:6e:6f:83:34:69:85:f7:4c:38:3f:
                    76:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:98:6C:87:65:0E:E5:7D:8F:B1:E6:A1:28:8E:61:FC:EB:4C:4C:DC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a4e67936-c857-487d-93df-2dff7fa79988/f8b9e90b-cc80-3bbd-b475-11cb7e7cd6f8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a4e67936-c857-487d-93df-2dff7fa79988/a4e67936-c857-487d-93df-2dff7fa79988.crl

            X509v3 Authority Key Identifier:
                keyid:16:A5:E3:3A:12:28:97:2E:9F:52:34:01:A7:6E:E1:96:9C:DF:E9:8E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a4e67936-c857-487d-93df-2dff7fa79988.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.114.94.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         37:b0:d0:25:f0:ab:81:5b:ee:00:18:71:63:3b:09:c0:50:b9:
         fd:3d:00:cf:d3:d3:66:4d:02:56:83:21:3e:64:17:5a:58:f4:
         f3:99:f3:f3:2d:c9:ce:eb:be:f0:e0:15:8f:66:11:1a:24:82:
         71:9f:af:76:12:fa:e2:e1:15:31:fa:b1:6c:d0:5c:f1:b7:2f:
         51:bd:58:26:a4:30:ce:05:b7:e9:37:99:12:7e:6f:74:02:c5:
         5a:ae:6f:d3:a0:59:af:cd:62:70:2c:6c:46:d3:bc:c1:a3:46:
         62:2f:98:97:ec:47:77:04:37:c7:b6:1f:71:a5:94:3f:78:92:
         2f:b7:3d:3b:fb:f3:ea:16:e2:d6:aa:b2:6b:57:7f:64:ed:26:
         a9:d3:1b:41:7e:88:46:b1:28:c8:09:cc:28:be:ae:4d:77:d8:
         45:68:7d:9c:6c:02:de:ea:b6:c7:6d:53:23:dd:30:5b:83:ff:
         7b:11:05:49:38:b2:85:76:52:9f:01:41:3e:3b:bf:2b:03:1e:
         0a:00:13:dd:6b:c7:08:b6:ca:c6:6e:67:fd:dc:70:2b:6f:7d:
         a6:a2:b9:28:9b:4b:e5:b2:d5:53:dc:10:8a:cc:0d:4a:29:a5:
         19:28:40:7d:20:5c:8c:a5:89:d2:86:b7:81:6b:d5:58:1f:16:
         62:3f:b1:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 08:09:23 2025 by rpki-client