Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/74c66e80-7073-3988-a63b-86cdc1e03230.roa
File:                     74c66e80-7073-3988-a63b-86cdc1e03230.roa (raw, json)
Hash identifier:          eZ+HLeAbzX/aDplu3TUgTuxBJXylQe6NHxSTpuGxwSI=
Subject key identifier:   3B:52:5E:20:D6:B0:86:DB:75:AE:27:C5:66:B7:55:BE:68:1A:45:36
Certificate issuer:       /CN=8511b8dc-74ba-47e5-af4a-7c4e6b777d92
Certificate serial:       010D0C9F4328584B153C1772B00BA438E71D2E00
Authority key identifier: D7:F3:DF:A9:F7:40:F0:2B:51:D8:42:27:F2:DC:C2:E1:DF:60:75:0E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/74c66e80-7073-3988-a63b-86cdc1e03230.roa
Signing time:             Thu 04 Sep 2025 13:00:41 +0000
ROA not before:           Thu 04 Sep 2025 13:00:41 +0000
ROA not after:            Wed 03 Dec 2025 14:00:41 +0000
asID:                     4540
IP address blocks:        66.187.112.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:15:3c:17:72:b0:0b:a4:38:e7:1d:2e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8511b8dc-74ba-47e5-af4a-7c4e6b777d92
        Validity
            Not Before: Sep  4 13:00:41 2025 GMT
            Not After : Dec  3 14:00:41 2025 GMT
        Subject: CN=c419000b-0231-4532-b452-aac2f522a37c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:77:78:40:b7:46:0d:03:99:48:bd:a7:1d:af:
                    7f:c3:27:80:3b:e4:24:45:65:d7:c9:12:9d:bd:e3:
                    5a:20:31:49:b0:f2:ab:2d:30:aa:94:d9:27:a5:eb:
                    65:bf:b9:55:08:5f:ba:81:8d:7a:09:f4:00:5c:49:
                    7b:1a:94:4a:17:97:ef:06:62:73:8f:38:96:60:f4:
                    91:5f:8a:e0:7f:c2:c6:df:75:71:51:3d:d6:2c:82:
                    c0:fc:52:ac:f9:5d:42:1b:47:88:68:82:ed:56:e5:
                    dd:56:ed:19:eb:e3:97:08:b5:16:f5:74:93:eb:90:
                    f6:c8:cd:6c:f0:77:80:2b:c0:05:9b:85:b6:4f:2d:
                    ca:85:65:46:e2:6c:aa:97:b6:8d:8a:6a:bf:3d:37:
                    b2:39:a0:1f:2b:a0:4d:81:86:84:39:44:03:f0:d4:
                    7a:ec:9a:b9:54:34:00:bb:b3:1e:70:cc:b4:c7:12:
                    61:d2:0e:11:57:e0:11:b9:e3:28:c7:a7:3a:a6:2d:
                    92:72:48:07:0f:fe:27:93:d0:1b:a7:1a:bb:cf:a2:
                    d9:3d:ca:d8:f1:6c:50:15:cd:32:26:80:e0:0b:df:
                    89:22:aa:6a:2b:62:33:c2:2e:76:48:d1:64:bc:61:
                    41:30:49:2d:45:ba:34:f7:be:cd:00:34:15:a2:35:
                    7e:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:52:5E:20:D6:B0:86:DB:75:AE:27:C5:66:B7:55:BE:68:1A:45:36
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/74c66e80-7073-3988-a63b-86cdc1e03230.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.crl

            X509v3 Authority Key Identifier:
                keyid:D7:F3:DF:A9:F7:40:F0:2B:51:D8:42:27:F2:DC:C2:E1:DF:60:75:0E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.187.112.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         bf:da:6a:57:03:f6:10:d3:50:5b:83:b9:48:b4:70:64:da:25:
         0a:94:a4:16:d4:c0:6b:3f:f2:f7:aa:c4:ae:7f:93:37:01:3c:
         a6:a3:e3:91:18:2f:ea:70:d5:99:c3:81:5b:8e:c5:30:9d:ee:
         90:1a:94:5d:b7:3a:f3:fa:ef:27:63:3d:b0:dd:95:3b:04:f8:
         af:62:3d:b7:cd:7b:6c:2e:37:a3:b7:97:ee:49:6b:46:19:e1:
         e4:43:ff:03:61:3a:d6:e6:ca:03:c5:e1:8f:d2:80:e6:8c:43:
         21:fa:67:c2:82:39:0c:b5:15:d1:4b:00:63:fd:c1:11:58:8a:
         c2:8c:71:81:f2:48:96:04:f8:63:27:1f:5a:63:88:b7:32:06:
         38:67:7f:96:46:a1:5b:98:f3:e9:1a:d4:86:11:1c:60:f4:f3:
         15:72:b4:96:75:d8:45:9a:6c:06:38:86:cf:10:83:ad:3d:27:
         e7:48:fa:4a:41:ee:9b:92:0d:cf:dd:f7:0e:69:ba:58:76:72:
         9a:ae:ab:c9:9d:1b:f1:0a:12:09:a7:ec:36:da:95:2e:51:b4:
         04:bf:63:49:1f:69:5a:fd:87:2a:23:bd:f4:9c:d9:a2:71:3e:
         c1:f6:c7:31:c9:a4:78:0a:c7:93:5a:2e:a6:58:26:4d:e1:c6:
         52:13:6b:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 10 22:32:44 2025 by rpki-client