Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/d153bfbe-6bec-3e72-8a9c-e3288c2aba85.roa
File:                     d153bfbe-6bec-3e72-8a9c-e3288c2aba85.roa (raw, json)
Hash identifier:          YaagLJC53BANM52OqPpHX/IfliGJeAm2eNtfUhpvmX8=
Subject key identifier:   16:62:07:02:EC:C9:C4:BE:6A:DD:43:18:DD:B2:19:A5:06:7B:A8:56
Certificate issuer:       /CN=93458135-7183-45e8-9dbc-dd82d2ffa119
Certificate serial:       010D0C9F4328584B2A2C6307B2E71F4F29060CD0
Authority key identifier: EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/d153bfbe-6bec-3e72-8a9c-e3288c2aba85.roa
Signing time:             Fri 12 Sep 2025 01:00:32 +0000
ROA not before:           Fri 12 Sep 2025 01:00:32 +0000
ROA not after:            Thu 11 Dec 2025 02:00:32 +0000
asID:                     21570
IP address blocks:        66.46.166.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:2a:2c:63:07:b2:e7:1f:4f:29:06:0c:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93458135-7183-45e8-9dbc-dd82d2ffa119
        Validity
            Not Before: Sep 12 01:00:32 2025 GMT
            Not After : Dec 11 02:00:32 2025 GMT
        Subject: CN=785286c8-67eb-4b97-98ce-7a4a1a7d6325
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:9f:91:74:c4:e2:3d:df:d7:e9:3c:ea:cf:98:
                    1e:e6:bd:9a:7a:e0:97:eb:2a:9d:05:14:b9:ea:2e:
                    f3:49:48:02:fe:ba:5c:40:56:fc:c9:e8:4f:8e:12:
                    75:da:b6:68:02:90:28:ab:cd:e1:bc:69:01:1d:c2:
                    3a:9b:64:e8:59:3f:0c:46:31:11:bd:82:64:af:68:
                    ff:15:0c:85:26:6c:90:23:db:af:cc:4e:7e:cb:89:
                    f1:54:82:8b:6c:81:8b:2c:25:5a:72:65:49:d9:7f:
                    af:7d:cd:9a:6b:78:60:4c:5d:bc:72:aa:09:4b:32:
                    d8:41:7b:4e:b6:f8:2d:dd:ba:64:50:12:4a:77:e6:
                    7c:da:ad:b4:50:41:67:9b:fe:ee:6a:96:9a:8e:09:
                    6c:1e:d6:56:de:61:0a:b4:16:ef:23:60:33:cc:41:
                    70:cb:d3:48:dc:27:e3:9d:bf:b7:8f:1a:ee:5a:91:
                    99:1b:cd:e3:b3:c0:82:c3:75:09:9b:0f:9a:41:5c:
                    d3:2d:ff:9e:41:0c:f9:1e:b2:58:f9:a3:9e:d8:73:
                    22:f3:62:96:57:b7:50:a4:dc:69:f8:57:38:60:29:
                    1c:59:c0:de:98:43:04:8f:13:4d:64:99:e7:fc:c8:
                    23:35:d1:7b:25:85:e7:e1:aa:d8:1a:8e:f1:01:d2:
                    80:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:62:07:02:EC:C9:C4:BE:6A:DD:43:18:DD:B2:19:A5:06:7B:A8:56
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/d153bfbe-6bec-3e72-8a9c-e3288c2aba85.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl

            X509v3 Authority Key Identifier:
                keyid:EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.46.166.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6c:60:06:b7:da:6c:45:92:b4:98:62:6b:f1:6b:4c:a0:43:10:
         0e:7e:fb:f7:bc:3e:45:00:32:b9:1a:a5:e9:6b:20:d6:49:01:
         c2:ec:1b:db:b9:3e:a2:ef:d5:58:d4:a7:9d:0b:59:d0:12:6a:
         a5:f0:85:97:cf:e4:a2:30:80:e0:cc:43:91:f3:18:fa:8c:12:
         8f:25:19:93:53:5c:cf:ed:83:75:cd:72:ae:88:53:b1:d0:1d:
         42:29:ba:c6:c0:05:4f:56:f3:45:5e:7e:8e:c0:c2:87:36:9e:
         48:9b:dd:79:85:a1:b3:c7:78:5b:ed:99:db:50:cb:5f:37:03:
         6d:b1:b8:e9:cc:c8:03:23:42:15:c8:af:bf:30:a6:50:7c:7a:
         bf:95:b3:f4:22:c7:7c:51:80:11:b9:f4:e3:c6:a0:4b:6b:64:
         d9:ab:85:2c:0f:95:f4:50:72:7e:1d:69:76:8b:a1:2c:96:2b:
         57:09:c1:26:38:6c:5a:fe:f9:08:05:f8:a3:61:3b:00:26:69:
         de:dc:fe:81:a3:79:6d:fd:00:a7:de:99:f3:92:c1:73:83:00:
         aa:9a:e1:a3:50:e4:57:66:9b:99:0b:27:c2:88:00:1b:82:71:
         bc:3f:82:33:fb:6d:c6:37:42:03:30:e3:e8:99:3f:84:10:9c:
         19:c0:89:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 10 17:32:08 2025 by rpki-client