Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74335fa0-6c3f-4878-9f3f-95c5ce0fb955/811e6a5b-ffd7-3a3d-a58e-ff280d1efcdf.roa
File:                     811e6a5b-ffd7-3a3d-a58e-ff280d1efcdf.roa (raw, json)
Hash identifier:          XzTowQKfozQ2V5xGiu+LtRN0s5Kjs2fwp2CbpZH9B0k=
Subject key identifier:   A6:3B:8B:73:FA:47:93:71:08:6B:46:1E:4C:B4:90:22:BB:55:D2:87
Certificate issuer:       /CN=74335fa0-6c3f-4878-9f3f-95c5ce0fb955
Certificate serial:       010D0C9F4328584B5F37287BFFE8EB34C710AC00
Authority key identifier: 73:C7:23:67:8A:1E:51:1F:DC:64:E6:F4:88:18:B6:08:D1:1E:E5:31
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74335fa0-6c3f-4878-9f3f-95c5ce0fb955.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74335fa0-6c3f-4878-9f3f-95c5ce0fb955/811e6a5b-ffd7-3a3d-a58e-ff280d1efcdf.roa
Signing time:             Wed 01 Oct 2025 01:00:32 +0000
ROA not before:           Wed 01 Oct 2025 01:00:32 +0000
ROA not after:            Tue 30 Dec 2025 02:00:32 +0000
asID:                     40703
IP address blocks:        157.166.216.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74335fa0-6c3f-4878-9f3f-95c5ce0fb955/74335fa0-6c3f-4878-9f3f-95c5ce0fb955.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74335fa0-6c3f-4878-9f3f-95c5ce0fb955/74335fa0-6c3f-4878-9f3f-95c5ce0fb955.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74335fa0-6c3f-4878-9f3f-95c5ce0fb955.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 07:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:5f:37:28:7b:ff:e8:eb:34:c7:10:ac:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74335fa0-6c3f-4878-9f3f-95c5ce0fb955
        Validity
            Not Before: Oct  1 01:00:32 2025 GMT
            Not After : Dec 30 02:00:32 2025 GMT
        Subject: CN=dedce5ff-2f5e-4fe0-83dd-4834a717fdf8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:2a:fc:93:c3:27:a2:99:88:10:83:2d:ca:95:
                    10:ff:e0:c3:2b:97:a5:c8:89:a4:44:8b:7e:9b:78:
                    80:24:d1:ea:a8:6c:b5:93:4f:6e:99:e9:e8:08:41:
                    3a:d3:30:56:ae:2d:88:55:ba:a3:d3:03:db:c6:28:
                    bd:ab:0d:e7:53:3a:62:09:ca:8d:dc:69:ce:b4:4d:
                    e6:50:99:98:98:1d:3b:3c:92:54:3c:7a:7e:a7:36:
                    28:a2:af:5f:bb:71:05:71:e0:bc:be:5d:bf:f0:54:
                    90:ad:d6:e3:db:88:5e:fd:81:7c:fe:a6:08:02:ad:
                    d9:64:72:2f:16:3f:b0:e8:59:e3:bf:85:e3:fd:af:
                    b3:7a:49:6e:a0:e3:0c:32:7a:c6:6d:14:9c:29:ee:
                    eb:82:5a:49:d9:eb:db:77:5f:fc:22:47:7f:a0:4b:
                    b4:8a:c1:09:07:bc:06:36:cc:f0:07:28:b8:ae:93:
                    c0:fe:b7:a6:f5:8a:11:0d:f3:a6:33:3a:e2:ad:6b:
                    b5:c3:9a:76:3b:f2:68:ff:c6:8f:bc:6e:f7:31:66:
                    25:de:a3:68:c2:10:e3:67:d4:4b:2a:9c:2f:e8:0d:
                    d6:b4:8e:62:57:6a:2b:af:97:92:cf:33:24:f7:b4:
                    80:77:e4:7a:ed:20:f8:f1:0a:9e:8a:4d:b8:50:a0:
                    09:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:3B:8B:73:FA:47:93:71:08:6B:46:1E:4C:B4:90:22:BB:55:D2:87
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74335fa0-6c3f-4878-9f3f-95c5ce0fb955/811e6a5b-ffd7-3a3d-a58e-ff280d1efcdf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74335fa0-6c3f-4878-9f3f-95c5ce0fb955/74335fa0-6c3f-4878-9f3f-95c5ce0fb955.crl

            X509v3 Authority Key Identifier:
                keyid:73:C7:23:67:8A:1E:51:1F:DC:64:E6:F4:88:18:B6:08:D1:1E:E5:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74335fa0-6c3f-4878-9f3f-95c5ce0fb955.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.166.216.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         67:23:53:3d:de:ad:71:fc:60:e3:8c:e3:1a:58:ff:32:f6:a6:
         eb:82:b5:71:f1:18:25:af:57:37:54:f3:9b:b2:96:13:7e:25:
         0c:84:4d:d9:0d:ad:b1:23:b3:80:3f:96:a6:c0:ab:4f:f8:31:
         19:0c:6c:2a:8a:8b:f0:78:f9:cd:d0:00:d8:9f:c2:fb:29:6f:
         80:e9:56:78:2c:22:84:69:ed:33:34:3a:2a:0d:02:45:78:7c:
         da:51:35:5d:45:dc:5d:6b:ef:3e:fd:af:0a:30:cf:c8:53:74:
         b0:5f:8b:39:66:10:24:6a:48:c9:b7:eb:4f:8b:7c:55:39:35:
         09:c2:df:ab:47:25:0e:bb:88:27:b1:e2:70:cf:ec:da:c1:6a:
         a9:9e:1f:0b:17:35:30:8b:76:f0:ac:7d:be:c1:a5:c3:cb:bc:
         a5:16:f2:1d:6f:23:73:52:c0:10:3b:8d:c0:e6:88:44:e7:49:
         3a:6d:2c:7b:24:0e:39:ff:e3:82:b4:9d:58:a0:f7:0c:ab:fa:
         0c:fd:c4:4d:67:1f:e8:cf:95:b3:71:6a:4d:2c:7f:b0:64:3f:
         3a:e7:af:f8:1f:d1:31:7b:84:8d:e1:b0:fd:8c:da:ed:5d:d5:
         7c:d3:87:97:b7:f9:f6:2d:fd:86:e5:2d:3d:ab:2a:1d:12:d0:
         55:ad:6c:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 06:20:37 2025 by rpki-client