Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/6fd31e81-6599-4bac-8a74-7bbe9233374a/84cce534-cd76-306d-b70b-9b2ea11b5686.roa
File:                     84cce534-cd76-306d-b70b-9b2ea11b5686.roa (raw, json)
Hash identifier:          xFYDvfNyzXXwY8NVK3Z0J5OzxkCKnCykUrCA2PX+u98=
Subject key identifier:   E1:F3:64:05:E2:02:38:48:7A:19:91:EA:2F:7B:83:9F:4E:98:27:42
Certificate issuer:       /CN=6fd31e81-6599-4bac-8a74-7bbe9233374a
Certificate serial:       010D0C9F4328584B6D2C97C2B281B48D1F783400
Authority key identifier: 0C:99:41:69:D2:E3:D1:01:11:72:83:86:2D:E7:07:E4:D0:14:29:AB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/6fd31e81-6599-4bac-8a74-7bbe9233374a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/6fd31e81-6599-4bac-8a74-7bbe9233374a/84cce534-cd76-306d-b70b-9b2ea11b5686.roa
Signing time:             Mon 06 Oct 2025 01:00:33 +0000
ROA not before:           Mon 06 Oct 2025 01:00:33 +0000
ROA not after:            Sun 04 Jan 2026 02:00:33 +0000
asID:                     14618
IP address blocks:        66.218.7.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/6fd31e81-6599-4bac-8a74-7bbe9233374a/6fd31e81-6599-4bac-8a74-7bbe9233374a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/6fd31e81-6599-4bac-8a74-7bbe9233374a/6fd31e81-6599-4bac-8a74-7bbe9233374a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/6fd31e81-6599-4bac-8a74-7bbe9233374a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 10 Oct 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:6d:2c:97:c2:b2:81:b4:8d:1f:78:34:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6fd31e81-6599-4bac-8a74-7bbe9233374a
        Validity
            Not Before: Oct  6 01:00:33 2025 GMT
            Not After : Jan  4 02:00:33 2026 GMT
        Subject: CN=ffcab08d-9735-490f-939c-2ea09489ce13
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:22:3f:07:66:80:dc:fd:69:d1:d8:fe:73:73:
                    8d:7b:ce:3b:9f:30:0b:fd:b8:d9:17:b4:43:c0:2e:
                    e2:2c:ce:11:dc:f3:ad:bf:6c:1b:6a:80:cb:2f:87:
                    97:cf:61:6d:45:99:cf:70:2b:a5:09:00:83:cb:20:
                    4d:22:39:aa:99:be:a3:f3:9e:09:8b:23:7a:05:d3:
                    cb:f3:71:ad:fa:c0:ab:e4:7e:15:a7:1c:bc:d8:dd:
                    09:0b:26:34:fd:f4:8f:43:f0:8c:81:48:1c:00:4b:
                    c4:ba:4d:0c:5b:11:82:11:cf:ce:cc:57:66:b6:d8:
                    20:bc:b5:4a:9c:51:7c:31:c0:de:8b:9a:d0:ca:31:
                    2e:74:a6:28:4e:5e:ec:60:a3:01:1a:0d:4b:18:c9:
                    2f:96:a4:e9:18:9a:98:dd:c1:bb:e5:d4:97:c2:c2:
                    79:e7:e8:59:9c:be:eb:94:ed:2f:c3:35:b4:69:8c:
                    a4:45:df:48:31:6b:f4:7c:81:88:d6:6f:c4:e0:79:
                    5b:af:c8:18:31:e6:dc:33:d7:10:1c:3a:09:43:3a:
                    b4:6f:48:a4:6c:94:25:73:de:bc:7d:16:57:ec:20:
                    be:03:9f:99:a7:1c:ee:74:8b:0d:47:93:48:cc:56:
                    95:5e:70:04:22:a7:5d:81:0e:4b:eb:13:60:b2:e5:
                    8c:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:F3:64:05:E2:02:38:48:7A:19:91:EA:2F:7B:83:9F:4E:98:27:42
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/6fd31e81-6599-4bac-8a74-7bbe9233374a/84cce534-cd76-306d-b70b-9b2ea11b5686.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/6fd31e81-6599-4bac-8a74-7bbe9233374a/6fd31e81-6599-4bac-8a74-7bbe9233374a.crl

            X509v3 Authority Key Identifier:
                keyid:0C:99:41:69:D2:E3:D1:01:11:72:83:86:2D:E7:07:E4:D0:14:29:AB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/6fd31e81-6599-4bac-8a74-7bbe9233374a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.218.7.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         23:01:77:bb:ad:e3:e7:bf:86:85:ee:5c:b3:e7:92:1f:53:c1:
         85:ad:13:4d:3c:db:54:b9:32:a4:9e:3c:02:67:7c:da:24:d7:
         6d:33:cc:9f:9d:3a:ad:d7:29:e1:1e:15:22:54:2d:63:94:e2:
         5f:d1:7b:be:e6:08:ce:38:ac:5c:56:2d:a1:2d:27:8b:81:b8:
         8d:73:ce:9a:e1:40:0c:69:e1:1d:b3:0e:e0:3f:10:2c:24:e5:
         a6:18:b6:c4:3c:8d:23:d2:1c:e4:79:3f:65:bb:ca:f4:5b:4e:
         61:6d:dd:b4:cc:2c:99:3c:d3:5c:a4:a2:f9:a2:ed:89:c7:a4:
         9f:38:b0:8b:e1:f0:05:2b:d4:3c:5a:59:53:d7:dd:b8:49:78:
         f8:91:82:77:0a:73:f7:76:17:7f:26:6d:37:57:be:d1:69:1c:
         f7:d2:c1:39:fa:3a:b4:9f:57:ff:aa:67:6b:a4:64:5c:89:ba:
         5f:6d:dc:07:21:51:eb:95:e8:f5:7d:cc:22:be:7e:ff:4a:a6:
         70:1f:91:8a:22:e9:4c:34:5b:37:5d:77:ac:be:cd:24:94:99:
         4c:14:a5:0b:52:c5:5c:0a:71:8b:7e:6e:b3:85:1b:ca:e5:81:
         bc:cd:78:c7:7e:cb:8f:85:bb:11:6c:b1:da:22:51:05:fa:2f:
         d0:1f:a0:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 8 19:45:28 2025 by rpki-client