Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/ccc67347-7639-3ad4-9a7f-7230fb5315ff.roa
File:                     ccc67347-7639-3ad4-9a7f-7230fb5315ff.roa (raw, json)
Hash identifier:          u0KgOZcazVOHZcw2FC90k7BabIA6IbwNWmQxkD2OMAg=
Subject key identifier:   54:D5:39:1D:6A:15:69:54:CE:C0:28:72:EA:A6:9D:ED:D3:63:5E:F0
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F4328584B821DD07D1238B0BBDEABD580
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/ccc67347-7639-3ad4-9a7f-7230fb5315ff.roa
Signing time:             Mon 13 Oct 2025 13:00:36 +0000
ROA not before:           Mon 13 Oct 2025 13:00:36 +0000
ROA not after:            Sun 11 Jan 2026 14:00:36 +0000
asID:                     20115
IP address blocks:        66.216.240.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:82:1d:d0:7d:12:38:b0:bb:de:ab:d5:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Oct 13 13:00:36 2025 GMT
            Not After : Jan 11 14:00:36 2026 GMT
        Subject: CN=a8a36b91-4017-4ae8-91de-13d02ce2218f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:fb:c1:89:a2:63:20:c9:2d:d2:60:45:cd:04:
                    ec:61:94:7a:3e:a7:d7:53:52:eb:5d:6e:e7:05:4f:
                    0a:73:1e:60:a1:7c:da:e2:81:f5:08:98:b0:1b:ed:
                    c3:2f:dd:b2:32:dd:47:59:69:8e:59:ce:03:a5:1f:
                    ec:57:d5:0f:07:ff:11:ab:22:cb:bc:3a:08:5b:f6:
                    52:86:1a:03:c1:37:25:1d:bf:26:4a:37:87:e8:27:
                    5d:26:7a:91:2d:70:4a:d6:14:4d:43:f2:c1:9b:a6:
                    c1:01:04:d0:46:17:26:98:1c:52:22:6a:dd:33:c2:
                    80:22:8a:3c:07:37:7b:64:0f:76:c8:62:34:d8:84:
                    ec:2a:b8:bd:e8:86:22:8c:57:66:5f:02:8e:89:ca:
                    ae:7c:d6:91:ee:b8:65:3f:fe:77:22:96:23:31:3a:
                    a1:00:4d:a9:ef:f9:21:82:46:9f:60:a6:07:f6:cc:
                    ee:8e:46:e2:36:8b:c0:2d:d2:4c:74:04:07:71:a7:
                    51:fd:56:6f:6b:3a:37:6f:c7:7e:fc:f9:ed:e0:3a:
                    2c:10:7e:4b:dc:c4:d4:f9:b8:8d:a0:53:88:f1:27:
                    ce:16:cf:c3:1b:8e:bf:1d:4b:0b:c3:61:8e:88:d3:
                    7d:a0:82:80:03:f7:21:fa:63:44:98:b1:c7:d1:d3:
                    dc:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:D5:39:1D:6A:15:69:54:CE:C0:28:72:EA:A6:9D:ED:D3:63:5E:F0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/ccc67347-7639-3ad4-9a7f-7230fb5315ff.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.216.240.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a9:1b:bb:9f:ff:d2:41:85:dd:f1:7a:76:39:59:8a:92:4a:6c:
         1d:f2:61:53:9d:90:cc:b6:4f:8c:a2:6c:fe:7d:78:2a:b5:f1:
         f4:1f:38:ed:b1:0f:11:52:6a:7c:2f:3e:64:66:9d:0a:d2:52:
         c5:c7:1f:63:dc:75:df:46:cc:55:91:90:e8:6b:b0:8d:4b:d9:
         91:26:b1:45:c9:a9:b2:4f:ee:10:07:42:0c:cf:72:e1:0d:bc:
         58:72:ac:c2:78:4b:76:62:1a:54:9d:2c:84:9c:95:cc:63:29:
         24:95:ca:a1:e5:78:5a:f2:18:a1:39:9a:64:32:f3:94:5b:82:
         63:ac:52:c1:6a:2c:3b:a6:db:bb:bd:92:99:5e:bb:09:7b:f9:
         46:a9:4d:3a:31:bc:20:94:58:1d:e8:fc:b7:09:bd:40:33:a0:
         e4:75:91:fe:fe:98:29:d2:e0:5d:0d:e7:32:80:92:6f:2d:43:
         ce:78:d1:d0:41:93:0c:86:c2:54:e8:0a:08:a7:c7:91:3e:90:
         58:fc:ba:c1:55:f3:73:89:fb:a3:a6:05:23:05:3b:0c:3d:6e:
         84:12:90:63:7a:23:88:a1:03:ab:78:a4:a4:23:4d:00:1f:b6:
         12:ee:35:02:40:8b:f0:db:3b:4a:66:df:75:54:a7:1f:b1:55:
         a0:de:89:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 07:28:37 2025 by rpki-client