Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bf7d171d-7917-4a21-b6cc-8a27039802a5/003d76f7-bbc4-3be9-b47c-533d41cce145.roa
File:                     003d76f7-bbc4-3be9-b47c-533d41cce145.roa (raw, json)
Hash identifier:          Jn9UZMCh5ZS2IPkBKeRTT4QNFcojwmNdRD0bBORe6ws=
Subject key identifier:   AF:2E:11:1E:D7:A8:84:B1:BD:C2:1C:7C:A2:1B:A2:2C:99:CF:41:EF
Certificate issuer:       /CN=bf7d171d-7917-4a21-b6cc-8a27039802a5
Certificate serial:       010D0C9F4328584B0E4167B5ED27B6DFD896A680
Authority key identifier: AD:F6:BD:F8:A9:46:C0:37:45:CB:6D:47:C5:6C:D2:C7:15:EF:8A:3B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bf7d171d-7917-4a21-b6cc-8a27039802a5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bf7d171d-7917-4a21-b6cc-8a27039802a5/003d76f7-bbc4-3be9-b47c-533d41cce145.roa
Signing time:             Tue 02 Sep 2025 01:00:32 +0000
ROA not before:           Tue 02 Sep 2025 01:00:32 +0000
ROA not after:            Mon 01 Dec 2025 02:00:32 +0000
asID:                     393816
IP address blocks:        66.219.237.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bf7d171d-7917-4a21-b6cc-8a27039802a5/bf7d171d-7917-4a21-b6cc-8a27039802a5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bf7d171d-7917-4a21-b6cc-8a27039802a5/bf7d171d-7917-4a21-b6cc-8a27039802a5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bf7d171d-7917-4a21-b6cc-8a27039802a5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:0e:41:67:b5:ed:27:b6:df:d8:96:a6:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bf7d171d-7917-4a21-b6cc-8a27039802a5
        Validity
            Not Before: Sep  2 01:00:32 2025 GMT
            Not After : Dec  1 02:00:32 2025 GMT
        Subject: CN=ab17bb53-ea26-4569-8a20-260f2e384174
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:c8:1a:90:6a:0c:f4:b8:89:28:6e:50:36:a7:
                    32:36:ce:43:cc:88:cb:ac:67:6f:b3:be:02:5f:11:
                    28:c3:eb:44:e7:c7:75:32:3b:59:41:e1:3c:85:54:
                    a5:88:d0:7d:24:76:ee:be:57:81:f9:c1:6e:58:13:
                    1a:be:ee:9b:62:87:89:08:45:8f:4e:98:a0:37:d3:
                    dc:71:7e:ff:e6:2c:00:62:20:c3:27:f9:59:21:90:
                    58:75:b2:dd:d2:3f:04:23:94:88:c0:45:99:f8:9a:
                    a8:75:32:31:cf:da:4a:15:db:9d:ba:7a:86:41:ff:
                    86:ff:09:1a:47:21:d4:42:20:8b:d9:51:b8:ea:cb:
                    f2:92:29:60:31:3a:3b:40:3b:fe:06:b8:a0:58:c8:
                    82:30:19:3a:f3:46:4f:a4:7e:d2:a1:d3:cb:ba:f8:
                    bf:89:5a:95:fa:57:5b:e2:ea:5c:52:87:ae:3e:02:
                    a9:e5:f9:26:4f:22:76:ea:fc:7e:0b:1e:07:12:19:
                    40:84:34:7f:11:a3:61:af:f7:b3:52:3d:25:fd:5b:
                    f5:b9:ce:f2:51:1c:af:5b:a9:70:3e:06:79:6c:5c:
                    b5:b1:71:94:2c:bc:78:8f:bf:d6:d7:fc:d6:8f:4e:
                    03:a7:eb:ff:2d:00:70:15:1b:67:2e:d5:df:2e:a0:
                    ee:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:2E:11:1E:D7:A8:84:B1:BD:C2:1C:7C:A2:1B:A2:2C:99:CF:41:EF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bf7d171d-7917-4a21-b6cc-8a27039802a5/003d76f7-bbc4-3be9-b47c-533d41cce145.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bf7d171d-7917-4a21-b6cc-8a27039802a5/bf7d171d-7917-4a21-b6cc-8a27039802a5.crl

            X509v3 Authority Key Identifier:
                keyid:AD:F6:BD:F8:A9:46:C0:37:45:CB:6D:47:C5:6C:D2:C7:15:EF:8A:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bf7d171d-7917-4a21-b6cc-8a27039802a5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.219.237.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         16:35:49:13:fc:91:ad:9b:ef:82:8e:01:b9:57:a7:da:19:bd:
         7d:4c:cd:7e:a7:7d:76:af:f9:68:88:4a:e5:de:bb:be:8b:27:
         8a:5f:c8:43:f7:fc:20:87:14:1a:60:2c:74:d1:1d:4c:b6:6e:
         8f:68:9f:ac:4c:71:bf:73:b1:71:41:c6:6b:6a:4e:58:b1:69:
         9d:37:63:4b:96:cf:e2:00:d7:87:be:26:8d:5c:d7:3b:e9:78:
         eb:0b:79:25:09:3a:4e:53:ae:c5:58:8c:51:c7:cf:4d:fc:a1:
         90:7f:2b:44:9d:0a:38:91:6b:b8:95:b3:71:b8:e8:84:6e:6d:
         63:86:3d:bf:94:f8:42:b3:13:09:cd:cb:a4:75:9b:2a:eb:13:
         c4:0a:a4:ab:58:16:ec:83:cb:6a:4d:47:ee:d7:e2:1f:e2:99:
         1d:7f:d7:41:0c:b1:39:70:99:d8:77:c7:28:7b:78:86:f2:cc:
         ab:17:79:8c:0d:18:82:0c:bf:03:20:72:da:64:a8:34:63:68:
         af:cb:09:f1:ee:62:e8:e9:34:3c:25:64:fd:53:84:6e:ac:1f:
         4e:88:00:9b:85:ff:67:cd:ed:5b:06:fa:54:45:35:af:77:6d:
         ee:dc:c1:51:d6:53:ce:33:ef:eb:3d:a6:78:9d:59:a4:74:92:
         1d:06:a9:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 10 03:52:09 2025 by rpki-client