Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/b149b396-46f8-3e10-aab8-580e49ef1a58.roa
File:                     b149b396-46f8-3e10-aab8-580e49ef1a58.roa (raw, json)
Hash identifier:          oDFjqlU+E73shtCggutVdBa/NXsmqbbkKmYV60VyFLc=
Subject key identifier:   B5:44:3D:C9:E3:E5:2B:38:1E:65:FF:AF:1B:4D:04:61:F7:E0:81:08
Certificate issuer:       /CN=93458135-7183-45e8-9dbc-dd82d2ffa119
Certificate serial:       010D0C9F4328584B27618535437D52DB5A6A15DC
Authority key identifier: EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/b149b396-46f8-3e10-aab8-580e49ef1a58.roa
Signing time:             Thu 11 Sep 2025 01:00:33 +0000
ROA not before:           Thu 11 Sep 2025 01:00:33 +0000
ROA not after:            Wed 10 Dec 2025 02:00:33 +0000
asID:                     15290
IP address blocks:        66.46.20.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:27:61:85:35:43:7d:52:db:5a:6a:15:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93458135-7183-45e8-9dbc-dd82d2ffa119
        Validity
            Not Before: Sep 11 01:00:33 2025 GMT
            Not After : Dec 10 02:00:33 2025 GMT
        Subject: CN=42f3ac7c-bf39-4ff2-8341-eed2c8ab8301
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:58:96:2b:96:b4:26:b6:bd:00:16:be:58:84:
                    f1:68:bd:64:38:b0:fd:07:0d:ba:bb:65:a3:f3:c4:
                    8a:6d:23:ea:fa:ad:aa:e6:c3:89:d8:95:ae:f4:5c:
                    12:89:83:60:48:f5:ab:2c:bb:ed:18:b6:46:f7:96:
                    f9:17:50:ac:9c:7d:86:2c:5a:01:60:1f:7f:10:07:
                    c5:f5:2a:87:40:c2:3b:fe:cb:a7:00:32:41:3d:64:
                    6d:9c:48:86:9e:2a:b8:6d:ae:0d:8e:87:cc:21:a4:
                    5b:5a:f6:e8:18:f1:c1:2f:46:f9:bb:ca:4c:56:ce:
                    36:92:b3:88:d1:8b:ce:9c:56:78:73:7d:2f:f5:4d:
                    74:57:f5:ec:c4:16:5e:dd:f8:88:01:f6:e9:bf:04:
                    3b:f2:e8:b4:f0:c0:bd:33:ba:70:b3:e1:b6:3d:45:
                    ea:5f:f7:92:9f:51:8c:da:cb:c4:e1:ae:17:65:52:
                    b6:46:81:91:48:fc:fe:e7:81:11:b1:6c:19:a0:6e:
                    dc:75:5b:c5:30:59:89:1e:4a:97:32:36:01:c9:a5:
                    6a:65:b6:17:50:da:c4:73:70:a6:8f:c4:ee:4f:0a:
                    65:1a:bd:f5:a9:d9:e1:b2:cc:36:c2:e9:ac:b9:c7:
                    fd:62:f3:fd:22:f6:86:bd:17:03:89:70:55:df:83:
                    a4:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:44:3D:C9:E3:E5:2B:38:1E:65:FF:AF:1B:4D:04:61:F7:E0:81:08
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/b149b396-46f8-3e10-aab8-580e49ef1a58.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl

            X509v3 Authority Key Identifier:
                keyid:EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.46.20.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9e:84:40:c1:9a:a4:b7:4e:68:36:23:1b:41:18:44:6e:c9:1b:
         22:a7:5a:03:89:b6:17:9d:23:ba:45:0a:59:08:ce:bd:c7:d1:
         26:b3:36:45:09:99:9e:53:7b:2c:43:74:65:5a:fc:54:98:33:
         05:a2:3f:57:bc:d4:44:2c:49:48:a0:6d:cd:62:1c:a4:ca:62:
         80:4f:00:85:b7:40:60:93:3b:9c:6f:b8:a5:f8:98:6b:08:39:
         3b:84:bf:85:a8:82:19:10:14:ca:ed:76:b0:ae:3f:ae:23:9c:
         99:40:82:68:82:e6:92:d1:04:2b:06:d2:a8:10:f9:c1:f4:86:
         1b:5a:da:8e:2e:d9:94:65:d2:5a:fd:ce:de:ce:37:77:04:2d:
         70:65:05:9c:f8:87:43:fa:56:04:5a:b1:e8:f4:8e:2f:f0:1e:
         4a:ac:a9:24:38:a6:93:76:ef:03:c1:de:f5:c7:ae:5b:11:01:
         80:b3:a3:9e:31:65:7b:98:a5:2b:9c:86:7f:c5:1e:31:18:d4:
         22:a5:b1:6b:b7:24:29:95:3f:cd:44:a7:94:48:8a:39:b0:ab:
         e9:04:ec:f1:16:46:cd:8f:32:dd:5f:ee:c9:2b:af:9b:58:31:
         b7:a6:e4:b2:0e:8c:bd:5b:b1:06:b8:8d:da:ca:d6:ed:71:7c:
         08:25:ef:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 10 17:32:07 2025 by rpki-client