Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e18cd83c-f7a0-4bd1-a96e-d085ff78ecaf/d432243f-b3e0-34c4-b2f4-5e13c2165a22.roa
File:                     d432243f-b3e0-34c4-b2f4-5e13c2165a22.roa (raw, json)
Hash identifier:          jcr5ByEW14izU1dFmy+EBFWf5CMviDvvCwbb/EpOHm8=
Subject key identifier:   77:49:AC:1E:72:5E:A5:30:46:42:62:8C:AC:C9:F8:46:EB:67:F6:87
Certificate issuer:       /CN=e18cd83c-f7a0-4bd1-a96e-d085ff78ecaf
Certificate serial:       010D0C9F4328584B8BE21830AB2B5B1C239E5780
Authority key identifier: 79:4E:35:8D:AC:45:13:27:8B:65:94:A9:E2:BA:54:F4:4C:0A:4D:C7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e18cd83c-f7a0-4bd1-a96e-d085ff78ecaf.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e18cd83c-f7a0-4bd1-a96e-d085ff78ecaf/d432243f-b3e0-34c4-b2f4-5e13c2165a22.roa
Signing time:             Fri 17 Oct 2025 01:00:30 +0000
ROA not before:           Fri 17 Oct 2025 01:00:30 +0000
ROA not after:            Thu 15 Jan 2026 02:00:30 +0000
asID:                     4809
IP address blocks:        66.102.249.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e18cd83c-f7a0-4bd1-a96e-d085ff78ecaf/e18cd83c-f7a0-4bd1-a96e-d085ff78ecaf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e18cd83c-f7a0-4bd1-a96e-d085ff78ecaf/e18cd83c-f7a0-4bd1-a96e-d085ff78ecaf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e18cd83c-f7a0-4bd1-a96e-d085ff78ecaf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 09:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:8b:e2:18:30:ab:2b:5b:1c:23:9e:57:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e18cd83c-f7a0-4bd1-a96e-d085ff78ecaf
        Validity
            Not Before: Oct 17 01:00:30 2025 GMT
            Not After : Jan 15 02:00:30 2026 GMT
        Subject: CN=b2af2f6a-d882-4d5e-b7ce-19281bb141b5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:b5:e5:b9:ae:5f:6e:a7:c2:ac:46:02:38:33:
                    d2:f6:40:90:cb:06:8c:9c:2e:01:68:f7:b6:db:fb:
                    00:27:50:88:cd:37:d1:1a:11:9e:4c:48:6e:45:bd:
                    44:66:a2:b1:fd:0e:67:ac:7d:3f:2a:1e:03:14:85:
                    af:8b:7e:6b:e9:bd:4e:d0:4a:63:14:ab:b9:4c:7d:
                    40:80:6d:77:02:e7:d3:cc:b4:0a:10:ca:e1:6f:6f:
                    15:ec:b1:d0:66:8b:c1:a1:71:dd:22:ee:dd:73:06:
                    bf:e6:12:12:9b:34:cc:ba:65:00:12:1d:f2:2f:20:
                    9f:71:bc:cf:65:89:a7:f2:d6:16:4b:f4:b5:e4:d2:
                    5a:fa:aa:64:15:c0:8d:23:c9:48:0a:77:c1:24:bf:
                    a0:7b:a3:1a:2f:14:91:b2:50:99:7a:e2:26:68:5d:
                    48:c2:00:92:d6:5a:5d:9d:3e:b5:2d:12:cd:a0:bf:
                    fd:a9:66:dc:05:e2:bd:5f:f2:99:61:79:2d:3f:43:
                    53:51:c4:1e:4a:cb:f7:47:bd:53:a7:71:2e:5b:92:
                    14:78:eb:2b:e0:d0:3f:77:b9:7e:14:28:15:c4:82:
                    1a:37:b2:2f:8a:8d:d0:a0:87:f4:4d:71:93:2e:bb:
                    e4:b5:fd:4a:e5:a2:b4:f5:94:13:ed:13:39:53:ef:
                    af:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:49:AC:1E:72:5E:A5:30:46:42:62:8C:AC:C9:F8:46:EB:67:F6:87
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e18cd83c-f7a0-4bd1-a96e-d085ff78ecaf/d432243f-b3e0-34c4-b2f4-5e13c2165a22.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e18cd83c-f7a0-4bd1-a96e-d085ff78ecaf/e18cd83c-f7a0-4bd1-a96e-d085ff78ecaf.crl

            X509v3 Authority Key Identifier:
                keyid:79:4E:35:8D:AC:45:13:27:8B:65:94:A9:E2:BA:54:F4:4C:0A:4D:C7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e18cd83c-f7a0-4bd1-a96e-d085ff78ecaf.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.102.249.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8b:12:90:9a:f4:7e:d1:d9:f4:a1:55:ca:6d:0f:d7:fc:ce:0f:
         9a:27:e7:aa:a8:cd:25:d8:a2:80:b7:09:71:8a:da:0d:86:38:
         ce:ce:1b:bc:c4:59:c8:e6:02:ed:73:e0:26:31:5a:64:4f:14:
         ce:ac:6f:56:a3:8e:20:af:62:d7:08:c6:2e:f9:af:3a:18:f3:
         b4:c6:31:77:e9:dd:ef:1a:31:fb:1a:e6:3d:1e:d3:9d:8c:8d:
         79:a0:ef:38:c5:74:97:28:04:c6:21:ad:da:9b:29:93:91:00:
         a6:52:68:ea:f2:ff:8d:4d:da:48:42:15:a3:ea:8a:3d:b0:6b:
         c2:b3:08:86:55:1c:22:e4:f1:53:d1:2a:51:ad:1c:22:69:af:
         11:92:b8:d7:0c:a4:8f:b6:89:84:00:57:03:0b:36:84:27:88:
         e1:de:1e:5f:9d:47:92:7d:d8:54:ca:97:5d:0b:14:ed:04:ca:
         c1:26:06:94:2f:ce:d8:57:ae:24:9b:8b:54:d0:9d:b7:c3:e8:
         85:3c:4e:85:80:1c:a3:e3:fb:fe:fe:b9:b9:72:1f:f5:24:a6:
         b2:38:e1:b6:fb:f5:87:44:3e:1a:c7:a6:ae:9c:8c:63:fa:32:
         87:f5:96:38:96:e3:47:b7:20:67:a4:18:c0:30:18:74:aa:09:
         25:89:05:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 09:45:42 2025 by rpki-client