Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/8b794a88-29d1-3a9b-b2b7-ba20c3f095ba.roa
File:                     8b794a88-29d1-3a9b-b2b7-ba20c3f095ba.roa (raw, json)
Hash identifier:          vBmYRESHXn9HqrtA8T+YA3Gz3amjivA9N44Np4O/3X4=
Subject key identifier:   55:D1:16:E2:EF:9D:75:8B:70:DA:C3:B8:10:61:C3:BC:EF:3B:7D:13
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584AC9DBA7719B96EC4B7AA43640
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/8b794a88-29d1-3a9b-b2b7-ba20c3f095ba.roa
Signing time:             Fri 08 Aug 2025 13:00:40 +0000
ROA not before:           Fri 08 Aug 2025 13:00:40 +0000
ROA not after:            Thu 06 Nov 2025 14:00:40 +0000
asID:                     398885
IP address blocks:        66.160.185.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:c9:db:a7:71:9b:96:ec:4b:7a:a4:36:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Aug  8 13:00:40 2025 GMT
            Not After : Nov  6 14:00:40 2025 GMT
        Subject: CN=fcf6e1b5-8791-4ac7-bf18-8634500395b1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:55:00:33:b8:e6:f1:e4:81:35:e3:45:9c:ec:
                    fa:fa:a3:7e:41:e7:48:a3:f8:48:68:86:c9:17:ce:
                    5c:da:f0:cb:76:c9:4b:76:5a:ee:85:bb:dc:b7:e2:
                    e8:a7:b1:4a:5d:22:5e:9e:1b:0d:a2:b1:14:6f:3d:
                    01:b5:5e:25:3d:36:73:b0:b7:08:2e:26:c4:6e:f4:
                    f8:82:df:ac:f1:bf:04:8d:5d:29:88:47:17:3b:54:
                    ea:21:52:60:5f:5b:94:49:3c:f8:cf:e2:63:48:7b:
                    d2:2e:17:65:6b:43:13:b9:cb:49:d1:53:7f:67:7c:
                    d5:3c:95:ae:32:5c:d2:4f:68:9f:93:f6:27:f2:c8:
                    73:f2:d8:96:77:b6:b5:56:3c:51:32:21:a5:71:85:
                    d5:5b:8a:44:22:a3:72:11:ad:8d:2f:34:dc:27:91:
                    bf:9b:af:5e:6d:55:d5:5c:6b:5a:3a:87:54:81:90:
                    82:d9:2d:90:4a:29:29:7d:98:0e:2d:a0:4f:80:ef:
                    e1:68:4e:92:91:e5:f4:87:e3:fc:d4:79:f6:e6:0e:
                    84:18:3b:dd:0f:fa:d1:02:b4:fd:48:d0:09:4a:24:
                    3d:7e:0f:cc:aa:5d:d3:a7:01:22:51:65:dd:b9:36:
                    a8:35:15:ff:19:a1:3a:39:2f:bc:a8:91:ae:84:2d:
                    9b:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:D1:16:E2:EF:9D:75:8B:70:DA:C3:B8:10:61:C3:BC:EF:3B:7D:13
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/8b794a88-29d1-3a9b-b2b7-ba20c3f095ba.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.160.185.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         37:3c:05:f8:f6:51:a3:9b:de:8e:27:19:d7:80:38:bb:4c:77:
         e7:ef:42:1f:66:c7:3a:29:8f:28:28:be:00:11:5e:d6:8c:2c:
         16:da:11:34:f0:8c:b2:d6:a6:d3:13:c1:56:5f:fb:47:90:c7:
         2d:72:03:61:1b:96:a1:86:9a:88:54:db:6d:e0:a1:e4:ba:40:
         80:c2:07:e4:54:35:11:a2:db:ef:69:6f:27:1c:47:57:6e:f3:
         48:7e:f7:7d:cb:3d:f0:46:76:b0:39:fc:4e:41:7c:f4:ba:7f:
         2d:1b:a8:2b:6b:61:1e:c2:a2:c1:46:31:cc:8b:26:64:53:07:
         33:80:23:f7:be:c8:b2:de:7b:6e:e5:f1:c9:82:6f:c8:0d:11:
         e3:fa:af:4e:82:c4:c4:8d:fe:2c:6d:f8:aa:ab:27:60:df:f9:
         23:ee:15:8c:ae:62:c4:49:43:5d:db:f0:18:f5:dc:19:d9:4e:
         0b:85:59:4e:95:28:c7:c9:7c:3b:2e:df:10:f9:4a:ed:83:e3:
         37:71:73:e7:63:99:d4:c4:a4:27:33:39:04:83:2a:28:5a:20:
         fc:5d:1b:3b:ae:7f:07:47:82:32:f5:59:af:12:a3:eb:78:7e:
         c9:1f:49:49:e4:39:83:40:94:3e:ef:49:ff:c4:72:8c:9a:38:
         d6:59:af:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 18:43:05 2025 by rpki-client