Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c05ae39f-c5c5-44bf-9771-c4a013b7c9d4/06241e00-7903-3050-9775-e4425bd2b4d5.roa
File:                     06241e00-7903-3050-9775-e4425bd2b4d5.roa (raw, json)
Hash identifier:          XyETBJmIntuJmleSwPKtTJH0/zd5cl3JUDPRfdeqbVk=
Subject key identifier:   DE:54:B6:C5:D1:44:A0:22:90:7A:61:41:7F:58:D7:46:9F:86:29:C0
Certificate issuer:       /CN=c05ae39f-c5c5-44bf-9771-c4a013b7c9d4
Certificate serial:       010D0C9F4328584B13D6AE949EC2D1BE260A9840
Authority key identifier: 90:6A:45:5D:2A:18:39:95:D3:36:2A:9C:07:2B:B3:4A:4E:52:37:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c05ae39f-c5c5-44bf-9771-c4a013b7c9d4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c05ae39f-c5c5-44bf-9771-c4a013b7c9d4/06241e00-7903-3050-9775-e4425bd2b4d5.roa
Signing time:             Thu 04 Sep 2025 01:00:33 +0000
ROA not before:           Thu 04 Sep 2025 01:00:33 +0000
ROA not after:            Wed 03 Dec 2025 02:00:33 +0000
asID:                     27823
IP address blocks:        66.97.32.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c05ae39f-c5c5-44bf-9771-c4a013b7c9d4/c05ae39f-c5c5-44bf-9771-c4a013b7c9d4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c05ae39f-c5c5-44bf-9771-c4a013b7c9d4/c05ae39f-c5c5-44bf-9771-c4a013b7c9d4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c05ae39f-c5c5-44bf-9771-c4a013b7c9d4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 Oct 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:13:d6:ae:94:9e:c2:d1:be:26:0a:98:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c05ae39f-c5c5-44bf-9771-c4a013b7c9d4
        Validity
            Not Before: Sep  4 01:00:33 2025 GMT
            Not After : Dec  3 02:00:33 2025 GMT
        Subject: CN=b6cf7d87-3453-4608-ae84-70df33a9573f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:43:48:ee:b2:c7:32:3b:09:db:9a:96:54:c3:
                    12:cf:45:f9:88:4c:9f:49:3b:66:a6:f3:68:01:51:
                    57:78:29:85:cf:04:e3:eb:ad:74:ff:41:a1:ce:12:
                    d2:c8:0a:4c:af:2e:43:06:d0:8a:3a:53:55:ea:b7:
                    d6:f1:d2:7b:8d:50:73:cf:cb:5f:e7:fc:9f:78:50:
                    ab:58:a5:7d:97:3b:9b:f7:fc:75:4c:f2:51:52:d1:
                    54:0b:c6:13:5e:f4:e4:7d:35:12:92:0a:96:41:62:
                    2d:9b:f6:81:cc:c9:44:74:ee:25:ff:72:dc:41:29:
                    a7:9d:b9:f4:59:92:be:6c:b5:52:27:4b:51:6c:b1:
                    fc:9d:b7:4d:ae:72:a7:e6:93:e5:1b:c8:b8:fd:cd:
                    75:d4:dd:39:84:84:4e:85:cf:61:72:d7:1f:88:9b:
                    79:ac:29:3f:d1:66:f3:48:ca:15:9d:10:aa:a1:13:
                    af:25:8f:ba:91:36:96:87:67:92:a9:89:fb:da:82:
                    db:dd:f9:7e:29:26:e4:41:aa:3a:b4:cd:bf:65:dc:
                    46:ec:75:ee:9a:af:be:a8:23:02:3b:51:cf:f1:07:
                    93:eb:a4:4d:f4:5f:8d:aa:fc:1e:10:11:50:5d:f6:
                    e5:ff:1a:a7:2c:4d:58:98:0a:99:61:d2:77:9c:10:
                    75:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:54:B6:C5:D1:44:A0:22:90:7A:61:41:7F:58:D7:46:9F:86:29:C0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c05ae39f-c5c5-44bf-9771-c4a013b7c9d4/06241e00-7903-3050-9775-e4425bd2b4d5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c05ae39f-c5c5-44bf-9771-c4a013b7c9d4/c05ae39f-c5c5-44bf-9771-c4a013b7c9d4.crl

            X509v3 Authority Key Identifier:
                keyid:90:6A:45:5D:2A:18:39:95:D3:36:2A:9C:07:2B:B3:4A:4E:52:37:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c05ae39f-c5c5-44bf-9771-c4a013b7c9d4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.97.32.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         89:d4:3e:98:c8:6d:d5:8e:31:07:fc:5e:d5:de:e3:87:7a:eb:
         53:af:74:d7:fd:41:cb:d2:52:6e:40:f7:97:fe:0b:7a:d2:79:
         7a:6f:62:8a:52:25:78:bd:22:1a:ee:8c:5f:ec:6e:62:cf:39:
         5a:a0:a9:b0:9f:2f:9e:7e:a3:46:15:43:2d:89:9c:c4:85:95:
         d5:fd:89:36:e9:58:33:1e:b6:58:67:e9:5d:3f:9a:5b:98:18:
         a5:9e:82:18:d3:b8:99:26:43:d3:bd:f9:fe:8b:a0:07:87:90:
         e9:fe:f9:06:9b:48:62:eb:0a:70:80:92:1d:d5:39:72:0c:f3:
         e8:1f:08:23:3d:45:82:d1:b6:c2:ef:57:8b:90:cf:ed:4b:62:
         8b:2c:fc:1c:2d:c3:1d:59:24:61:7f:ae:7f:32:f8:2a:27:ba:
         16:01:91:b4:5c:2c:3f:c7:f0:91:2b:1c:d6:a1:fd:2e:6e:12:
         bc:d8:9f:69:95:fc:0d:60:04:86:d0:88:a6:11:15:97:da:62:
         19:38:10:3e:9d:0e:5a:74:cf:cf:53:db:54:e3:fa:de:5b:df:
         4a:0f:93:87:2d:b3:99:60:78:d2:4f:9a:a8:f7:61:45:dc:92:
         e2:40:31:22:4c:87:c8:83:21:a2:5b:6c:96:16:b0:c7:76:fe:
         2a:44:73:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 11 02:32:18 2025 by rpki-client