Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0f65cc61-2b4a-4f48-ae5d-28366aa2dcb0/eba8674b-6a2c-3e80-81cf-e60bca58ab7e.roa
File:                     eba8674b-6a2c-3e80-81cf-e60bca58ab7e.roa (raw, json)
Hash identifier:          NxSz9/a8RujxfR3eYh+S5YmSK4W+/lCBdgOIVFJX6KM=
Subject key identifier:   1F:D1:7B:2E:91:83:8A:08:EB:D2:81:31:5D:A4:0E:8A:2F:D7:97:AE
Certificate issuer:       /CN=0f65cc61-2b4a-4f48-ae5d-28366aa2dcb0
Certificate serial:       010D0C9F4328584B8BE21EE8CAA96761BE5F1600
Authority key identifier: 48:20:B7:A3:62:19:15:ED:7E:42:BF:64:41:93:4F:4C:CC:EE:CF:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0f65cc61-2b4a-4f48-ae5d-28366aa2dcb0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0f65cc61-2b4a-4f48-ae5d-28366aa2dcb0/eba8674b-6a2c-3e80-81cf-e60bca58ab7e.roa
Signing time:             Fri 17 Oct 2025 01:00:30 +0000
ROA not before:           Fri 17 Oct 2025 01:00:30 +0000
ROA not after:            Thu 15 Jan 2026 02:00:30 +0000
asID:                     14618
IP address blocks:        66.182.132.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0f65cc61-2b4a-4f48-ae5d-28366aa2dcb0/0f65cc61-2b4a-4f48-ae5d-28366aa2dcb0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0f65cc61-2b4a-4f48-ae5d-28366aa2dcb0/0f65cc61-2b4a-4f48-ae5d-28366aa2dcb0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0f65cc61-2b4a-4f48-ae5d-28366aa2dcb0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:8b:e2:1e:e8:ca:a9:67:61:be:5f:16:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0f65cc61-2b4a-4f48-ae5d-28366aa2dcb0
        Validity
            Not Before: Oct 17 01:00:30 2025 GMT
            Not After : Jan 15 02:00:30 2026 GMT
        Subject: CN=9d11cd27-24ca-4282-8147-ce35cb452164
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:21:2f:12:86:9f:f6:52:e0:66:a7:4d:59:cf:
                    26:c0:65:fd:61:12:02:c5:c4:6e:f6:7f:c2:0e:27:
                    68:4b:42:38:bf:9d:01:84:a3:cc:02:86:ad:14:b8:
                    93:e0:bb:6d:68:5b:31:6d:56:78:8c:7a:dc:5d:2a:
                    97:73:e3:1b:7b:1d:e7:c7:d8:69:22:6d:f8:cc:b9:
                    93:92:8a:f5:b1:8a:73:61:15:ca:db:b4:b7:c5:33:
                    11:b2:12:46:ce:ad:bc:85:33:2e:1b:c1:84:4d:35:
                    cd:46:be:94:28:ef:bb:8e:89:44:68:f1:63:1f:2d:
                    73:88:e4:a3:81:d7:0a:e9:30:7c:e6:62:1a:2e:96:
                    e9:3a:60:6c:9f:27:3d:e2:1f:84:b7:70:9b:c6:f6:
                    a8:b5:1f:1f:67:a9:86:0b:c0:0f:eb:c2:d6:08:c1:
                    8b:0a:40:0d:44:d9:cb:aa:7e:55:d0:6e:ef:3c:a1:
                    3b:93:1b:95:b5:26:20:c7:bc:9e:a4:d8:5f:2b:8d:
                    2f:2c:76:32:8d:bf:0d:13:d3:69:19:a7:e7:d4:82:
                    bd:6a:f8:05:aa:ef:b0:8c:2e:c6:1f:00:e3:4a:73:
                    9f:f5:e1:4c:42:34:a1:6f:18:59:1a:07:3e:f6:7d:
                    00:7b:9f:22:b0:ba:58:9d:6a:04:9b:d1:42:0c:57:
                    5f:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:D1:7B:2E:91:83:8A:08:EB:D2:81:31:5D:A4:0E:8A:2F:D7:97:AE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0f65cc61-2b4a-4f48-ae5d-28366aa2dcb0/eba8674b-6a2c-3e80-81cf-e60bca58ab7e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0f65cc61-2b4a-4f48-ae5d-28366aa2dcb0/0f65cc61-2b4a-4f48-ae5d-28366aa2dcb0.crl

            X509v3 Authority Key Identifier:
                keyid:48:20:B7:A3:62:19:15:ED:7E:42:BF:64:41:93:4F:4C:CC:EE:CF:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0f65cc61-2b4a-4f48-ae5d-28366aa2dcb0.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.182.132.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7c:24:89:9f:6f:0f:83:d1:bf:5e:34:01:b4:0c:40:25:7e:af:
         94:52:c5:64:12:89:38:00:13:cd:73:02:86:58:62:5a:b7:b0:
         47:81:73:2b:76:93:dc:6a:9f:75:2f:fc:85:1c:c1:33:69:71:
         88:b5:12:22:0c:c7:e4:4b:3c:5d:28:c0:e0:a5:16:38:68:43:
         db:5a:f9:9c:20:fa:a6:57:e3:95:02:16:60:f6:4c:a2:d2:cc:
         e8:85:00:21:ff:ec:ac:11:f2:9c:34:0e:ca:d8:bd:f8:45:0c:
         d0:9e:20:7e:3a:61:e2:96:9d:4a:fb:94:3d:d8:70:f7:10:52:
         61:88:75:f7:1f:5f:a3:20:5b:fd:44:e3:d5:9b:f3:3f:1d:8a:
         76:66:0c:4e:51:63:27:31:75:ff:c8:fc:9a:53:30:7f:c6:03:
         68:bf:f2:8b:ac:fd:aa:bb:9e:3b:fb:38:06:47:56:1f:81:79:
         17:78:3c:73:11:b8:9e:95:27:a6:60:df:75:1b:86:c9:c4:4c:
         48:18:24:f7:12:36:55:55:5a:c1:55:6c:8e:37:cf:a1:cc:aa:
         cb:10:cc:a3:c4:8d:88:3e:2b:f8:7a:94:aa:47:36:21:29:4c:
         4d:0e:14:48:3f:b0:35:87:ba:54:a2:43:c6:7b:38:c5:4f:99:
         1c:8f:ba:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 23:07:11 2025 by rpki-client