Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d131ffaa-85f2-4bd5-8961-9dc8adf15b8b/09ef4b44-ba95-30f1-91ff-60c41204628c.roa
File:                     09ef4b44-ba95-30f1-91ff-60c41204628c.roa (raw, json)
Hash identifier:          PimA7tWfYTSP8YSJ9nDeE5DLpnHacHLoBuSzc8lDidQ=
Subject key identifier:   AE:B4:0E:D9:8E:F0:7F:6A:84:C5:58:44:5E:C0:46:A3:00:2B:15:39
Certificate issuer:       /CN=d131ffaa-85f2-4bd5-8961-9dc8adf15b8b
Certificate serial:       010D0C9F4328584B8917676721D2187518CD5280
Authority key identifier: 9F:17:3E:C4:F4:5B:C5:67:20:A6:CD:81:15:0D:C2:4B:63:29:4E:F5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d131ffaa-85f2-4bd5-8961-9dc8adf15b8b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d131ffaa-85f2-4bd5-8961-9dc8adf15b8b/09ef4b44-ba95-30f1-91ff-60c41204628c.roa
Signing time:             Thu 16 Oct 2025 01:00:30 +0000
ROA not before:           Thu 16 Oct 2025 01:00:30 +0000
ROA not after:            Wed 14 Jan 2026 02:00:30 +0000
asID:                     13917
IP address blocks:        66.206.160.0/20 maxlen: 20
                          66.206.175.0/24 maxlen: 24
                          2606:f000::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d131ffaa-85f2-4bd5-8961-9dc8adf15b8b/d131ffaa-85f2-4bd5-8961-9dc8adf15b8b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d131ffaa-85f2-4bd5-8961-9dc8adf15b8b/d131ffaa-85f2-4bd5-8961-9dc8adf15b8b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d131ffaa-85f2-4bd5-8961-9dc8adf15b8b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:89:17:67:67:21:d2:18:75:18:cd:52:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d131ffaa-85f2-4bd5-8961-9dc8adf15b8b
        Validity
            Not Before: Oct 16 01:00:30 2025 GMT
            Not After : Jan 14 02:00:30 2026 GMT
        Subject: CN=d614a398-92e8-4f5c-b195-20d60bd30645
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:a5:42:2e:a9:c3:56:d6:b1:9f:03:6a:40:76:
                    24:87:fb:31:33:52:7a:60:1c:57:ef:14:13:08:33:
                    a3:fa:a1:0d:7b:e8:cf:d8:ab:59:db:b6:c2:35:4c:
                    50:e6:1b:3d:f6:b6:1b:20:0c:79:b4:da:34:09:75:
                    df:d3:97:50:3a:dc:cb:3a:de:d5:b8:99:d7:ff:20:
                    38:49:0a:ba:09:67:89:d1:74:fc:b5:58:de:66:b4:
                    64:69:24:e0:39:da:40:f0:94:f0:bc:e1:da:d2:88:
                    eb:af:1d:57:83:76:11:1c:57:e8:5a:8c:15:7a:d6:
                    b8:62:16:d2:22:a2:14:c2:76:01:14:3d:bd:e4:9a:
                    50:d0:8b:dc:18:c0:ed:2a:a1:e9:87:97:58:f5:ee:
                    19:81:3c:2f:40:0a:26:d1:60:2a:67:e6:f5:ea:83:
                    d7:2b:29:10:25:aa:8e:9c:38:97:f3:03:9d:cf:59:
                    22:35:8b:8e:25:0a:fb:01:5c:8d:8f:64:c8:36:ce:
                    2c:90:2a:97:5c:7a:59:8d:35:df:0f:c8:4b:2f:af:
                    d5:55:a8:37:59:65:be:ee:bd:f6:0e:0e:3a:87:af:
                    40:f5:79:9d:f4:50:66:cc:76:8c:63:62:49:4e:5a:
                    1e:63:09:13:98:57:67:20:a5:89:10:9f:da:92:68:
                    7b:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:B4:0E:D9:8E:F0:7F:6A:84:C5:58:44:5E:C0:46:A3:00:2B:15:39
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d131ffaa-85f2-4bd5-8961-9dc8adf15b8b/09ef4b44-ba95-30f1-91ff-60c41204628c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d131ffaa-85f2-4bd5-8961-9dc8adf15b8b/d131ffaa-85f2-4bd5-8961-9dc8adf15b8b.crl

            X509v3 Authority Key Identifier:
                keyid:9F:17:3E:C4:F4:5B:C5:67:20:A6:CD:81:15:0D:C2:4B:63:29:4E:F5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d131ffaa-85f2-4bd5-8961-9dc8adf15b8b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.206.160.0/20
                IPv6:
                  2606:f000::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         89:3f:10:f4:42:14:7c:33:c7:a3:c9:d0:ab:f4:9c:16:26:53:
         bc:4c:38:3d:43:86:9d:ac:66:ad:3b:c1:4d:9a:ba:89:75:aa:
         9a:a2:ac:6a:88:dd:47:b5:e4:41:3e:92:46:8d:fd:ac:77:dd:
         9b:50:7d:4d:54:12:7c:c0:b2:62:7c:af:a5:64:e9:fc:f7:70:
         3c:45:8b:6d:b5:d6:e2:81:e1:4f:57:b8:16:40:17:a4:95:a0:
         2a:5e:55:b0:10:4f:92:19:bc:f7:75:fc:83:e7:61:e6:84:c1:
         7c:6a:cf:71:d3:c6:f8:a2:eb:7e:7b:16:f4:42:40:43:a6:9d:
         80:cd:a6:cb:43:53:51:41:aa:41:a7:b6:53:a5:9b:fe:6d:2a:
         a9:04:f3:9e:d8:4d:0e:38:5f:31:ff:5b:d7:0e:04:aa:51:d7:
         ad:6b:42:ca:cf:37:34:67:2f:35:d0:8a:cd:56:13:08:b5:b5:
         cf:85:50:90:67:eb:05:30:93:1d:64:97:fc:29:3e:1e:18:f8:
         7b:71:e3:a5:3c:77:6d:d1:6b:e5:be:b8:5d:9c:a8:57:f4:18:
         ab:ac:e9:ab:6b:db:58:47:a5:a9:20:b0:fb:7b:ee:56:ee:ef:
         fd:14:db:2d:af:ef:dc:6a:cb:27:3c:ee:b1:cf:25:c7:84:a3:
         b3:3d:0d:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 13:23:03 2025 by rpki-client