Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/07b1b458-5261-4e4a-a0fc-1757fe461f75/57bbcea5-b469-3fcd-a8d8-d1ff3e78de83.roa
File:                     57bbcea5-b469-3fcd-a8d8-d1ff3e78de83.roa (raw, json)
Hash identifier:          hdRihzLKTeFBH+Y1Yt+fpvsY49jdhubETgYMsW4R8jQ=
Subject key identifier:   89:2A:4B:2B:81:E5:53:B7:34:A2:27:5B:6D:7E:38:81:E9:5E:AF:F1
Certificate issuer:       /CN=07b1b458-5261-4e4a-a0fc-1757fe461f75
Certificate serial:       010D0C9F4328584B3126F20711C7EDC36F82D380
Authority key identifier: 93:6E:45:7E:D8:C9:63:EE:99:E8:2F:26:1A:3D:10:CE:14:AA:B6:AF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/07b1b458-5261-4e4a-a0fc-1757fe461f75.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/07b1b458-5261-4e4a-a0fc-1757fe461f75/57bbcea5-b469-3fcd-a8d8-d1ff3e78de83.roa
Signing time:             Sun 14 Sep 2025 13:00:42 +0000
ROA not before:           Sun 14 Sep 2025 13:00:42 +0000
ROA not after:            Sat 13 Dec 2025 14:00:42 +0000
asID:                     20371
IP address blocks:        66.111.32.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/07b1b458-5261-4e4a-a0fc-1757fe461f75/07b1b458-5261-4e4a-a0fc-1757fe461f75.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/07b1b458-5261-4e4a-a0fc-1757fe461f75/07b1b458-5261-4e4a-a0fc-1757fe461f75.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/07b1b458-5261-4e4a-a0fc-1757fe461f75.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:31:26:f2:07:11:c7:ed:c3:6f:82:d3:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=07b1b458-5261-4e4a-a0fc-1757fe461f75
        Validity
            Not Before: Sep 14 13:00:42 2025 GMT
            Not After : Dec 13 14:00:42 2025 GMT
        Subject: CN=f18a2a98-aadf-4334-a530-b7a65caeeed8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f6:c0:9a:1d:69:7e:08:0d:4e:a9:26:86:75:c3:
                    c4:3a:f6:53:3e:20:76:d2:10:a5:ad:1d:ba:74:d4:
                    55:ea:25:66:74:34:0f:68:a3:f4:82:8e:fe:4f:d5:
                    c2:37:64:46:a3:df:de:4a:76:53:ba:9d:35:d7:f7:
                    55:8a:31:53:4a:6c:9e:24:c2:4d:69:49:16:44:ab:
                    0a:fb:9b:73:04:a1:5d:74:1a:15:fa:a0:96:ec:44:
                    a7:ce:22:ca:10:2d:09:15:92:93:f1:aa:ec:dd:b3:
                    c4:b9:26:17:c9:e4:eb:04:f5:67:fc:d7:72:24:d2:
                    f3:f7:6e:ae:03:1e:f0:6f:dd:32:d2:e6:fc:14:c3:
                    52:50:c7:fc:81:42:f9:0b:7c:a3:8f:a9:d8:3b:a4:
                    16:c3:b6:af:3e:19:f6:48:4e:ff:41:c6:ff:cc:5c:
                    a2:f8:8e:89:96:69:05:c3:41:3c:61:71:09:ad:2e:
                    ba:a4:fe:ac:e2:ee:f7:59:6e:08:08:d6:d4:6c:f2:
                    1e:87:6b:79:a2:f3:b0:be:fb:ee:5e:9b:c9:39:09:
                    c3:69:eb:9f:38:af:d5:bf:bc:b3:b0:38:93:97:60:
                    ec:94:fa:e8:ff:60:1c:33:dd:33:c7:7d:bb:ad:a8:
                    08:32:7d:75:39:76:f9:72:93:69:3d:ee:dc:eb:eb:
                    dd:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:2A:4B:2B:81:E5:53:B7:34:A2:27:5B:6D:7E:38:81:E9:5E:AF:F1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/07b1b458-5261-4e4a-a0fc-1757fe461f75/57bbcea5-b469-3fcd-a8d8-d1ff3e78de83.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/07b1b458-5261-4e4a-a0fc-1757fe461f75/07b1b458-5261-4e4a-a0fc-1757fe461f75.crl

            X509v3 Authority Key Identifier:
                keyid:93:6E:45:7E:D8:C9:63:EE:99:E8:2F:26:1A:3D:10:CE:14:AA:B6:AF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/07b1b458-5261-4e4a-a0fc-1757fe461f75.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.111.32.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         55:e2:02:f8:cc:65:1e:4e:76:d2:c5:6d:6b:b1:a1:00:79:a8:
         eb:7a:1c:bb:5d:6e:1a:bf:5c:ec:82:7b:7a:96:34:d8:e3:a0:
         0f:de:8e:a7:28:58:58:c1:5b:64:6e:ad:82:5e:28:1d:9a:d2:
         d7:88:f2:1a:74:61:ad:12:39:ec:74:af:ff:f4:6a:c0:0d:a0:
         5b:35:9e:14:6a:d7:8d:96:47:3e:62:2f:44:85:30:28:21:32:
         f4:e4:d2:46:7c:2a:4e:37:4f:76:5c:e2:ee:f4:14:ba:0d:80:
         5b:cf:e5:1e:66:08:41:b8:88:f2:4f:87:22:d5:6e:77:a0:ec:
         30:9a:c1:59:91:17:4f:9d:25:0a:07:c8:12:e0:8e:2c:d1:28:
         74:91:65:4d:64:42:07:c8:0e:0f:bb:0c:b3:b8:07:85:34:77:
         04:bc:b2:1d:b3:55:3f:10:3f:0e:b2:94:77:67:2a:ed:29:b2:
         8b:c5:37:27:80:83:26:a4:a8:09:bd:98:8a:66:08:45:96:f0:
         4d:80:80:4e:87:8b:3a:46:90:cf:50:b6:e1:8b:b6:c7:70:47:
         66:b6:37:d9:35:98:4c:20:58:3a:3a:b3:69:1a:56:19:02:40:
         fa:55:b0:b4:ad:4c:9d:b9:df:59:08:21:58:2f:73:4a:3f:1e:
         7c:a7:a1:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 10 22:35:41 2025 by rpki-client