Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/2ce623dc-9c87-311f-8054-f95e4e4e1843.roa
File:                     2ce623dc-9c87-311f-8054-f95e4e4e1843.roa (raw, json)
Hash identifier:          4PB1CrtY+eRPX78wLI7YaaVu4fAMWi3cQ+MpxlJ0c+k=
Subject key identifier:   F4:EA:9F:6A:72:03:80:8D:AA:BB:15:F4:8F:C6:32:1E:08:4C:A9:8E
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F4328584B821D304DDDE8680C40CBE000
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/2ce623dc-9c87-311f-8054-f95e4e4e1843.roa
Signing time:             Mon 13 Oct 2025 13:00:36 +0000
ROA not before:           Mon 13 Oct 2025 13:00:36 +0000
ROA not after:            Sun 11 Jan 2026 14:00:36 +0000
asID:                     20115
IP address blocks:        66.215.192.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:82:1d:30:4d:dd:e8:68:0c:40:cb:e0:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Oct 13 13:00:36 2025 GMT
            Not After : Jan 11 14:00:36 2026 GMT
        Subject: CN=c2dc19cd-b6e0-4927-aba0-66105a32e102
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:33:77:09:24:df:ba:0b:5c:f5:63:c9:fe:cf:
                    b6:aa:70:c8:dc:b9:ad:9b:1d:bf:ac:8a:87:4a:88:
                    c9:2f:b5:4e:c5:73:7e:0a:13:9b:fc:b7:70:a6:61:
                    37:1c:5f:f7:ac:51:a7:5f:f2:04:d9:cf:f9:14:d2:
                    35:13:46:92:54:3b:33:60:f8:ab:f6:4c:58:be:7f:
                    b1:c2:cb:ed:f5:a6:a8:97:b1:4b:84:10:6b:37:c1:
                    c9:24:6e:74:0a:b8:d7:9b:3c:84:b0:80:4c:c4:f1:
                    50:84:d7:34:c2:33:3d:a1:21:bf:d8:4a:b6:9f:7c:
                    cb:17:24:11:7a:f6:c4:a6:9d:d3:10:ec:67:6b:2b:
                    ff:d8:6f:a4:a9:a6:8f:37:f8:2d:cc:71:9e:a5:bf:
                    70:be:73:5e:3d:38:03:3d:0c:5c:86:3e:71:24:2e:
                    40:bb:b0:ea:e7:c4:62:f9:b3:e5:6c:7a:60:2e:b0:
                    92:ac:41:51:54:fb:ca:bb:e9:28:ab:60:66:b4:5e:
                    b4:b7:eb:1d:ec:13:ef:02:91:cb:fc:69:e5:b2:03:
                    91:01:b2:e3:a5:39:70:f3:4c:16:f6:ab:f3:e2:e9:
                    dc:86:46:78:ba:89:2d:92:8b:e1:f8:6f:62:ea:a2:
                    17:45:e3:f2:90:c2:e5:31:8f:5e:4b:18:43:7a:42:
                    0b:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:EA:9F:6A:72:03:80:8D:AA:BB:15:F4:8F:C6:32:1E:08:4C:A9:8E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/2ce623dc-9c87-311f-8054-f95e4e4e1843.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.215.192.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         41:97:18:0b:39:c4:2a:82:61:07:66:3d:68:fe:c7:eb:ce:fe:
         8a:96:f7:04:dd:33:1e:8c:23:73:d6:a6:e0:5d:b8:73:5b:8d:
         9f:d4:1c:74:a6:58:88:24:bf:6b:db:06:86:08:c4:24:ad:3a:
         b7:45:6a:46:9a:ae:91:7c:69:0d:1f:d2:8f:1a:6c:1e:e1:ff:
         5d:ee:c9:d0:39:b5:25:ef:06:d0:a4:bd:23:87:f5:d3:68:3d:
         8d:ef:a4:68:dd:ce:cb:bb:82:4c:c7:06:3b:be:f1:a9:1a:0c:
         d3:65:1b:ef:86:96:59:d5:50:49:f0:7e:b6:17:20:fa:6a:0a:
         ea:6a:c7:5e:21:7e:90:8a:cb:28:15:dd:72:bb:1e:28:3b:f3:
         6c:5c:5d:63:f6:5a:ab:60:c8:9f:3a:67:56:9b:91:70:94:c8:
         70:c1:40:63:cd:86:7d:10:a0:d7:58:f4:77:c6:9a:20:0c:20:
         34:49:77:ed:b0:4b:bd:18:83:d4:92:46:6a:4d:c1:ea:81:5d:
         21:80:40:68:95:43:f5:73:0f:3a:67:f5:4b:0d:68:3a:fc:40:
         27:49:6c:54:85:13:eb:f1:6f:36:80:ff:f1:a8:78:fa:20:10:
         b1:ef:3d:e9:c5:8a:9a:4d:6a:d3:d8:af:c0:0c:ac:1f:e6:ef:
         e4:5b:ef:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 04:42:57 2025 by rpki-client