Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/c63341d1-6cda-433e-9220-8eb860d0f1d5/24cb6931-6f99-3dcb-90a7-004a047b98c2.roa
File:                     24cb6931-6f99-3dcb-90a7-004a047b98c2.roa (raw, json)
Hash identifier:          28yWuM+ClfDAd6Jpq3VpfEf9wgrGf9o8O7k0AoZWsok=
Subject key identifier:   0E:6F:92:18:6F:04:38:50:45:1E:EB:84:89:B9:C8:AA:F4:6E:40:0F
Certificate issuer:       /CN=c63341d1-6cda-433e-9220-8eb860d0f1d5
Certificate serial:       010D0C9F4328584B5F37258488529A69F3BAD700
Authority key identifier: 30:8E:63:48:1C:3A:A3:59:5B:A4:2F:67:BC:4B:84:13:B1:61:B0:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/c63341d1-6cda-433e-9220-8eb860d0f1d5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/c63341d1-6cda-433e-9220-8eb860d0f1d5/24cb6931-6f99-3dcb-90a7-004a047b98c2.roa
Signing time:             Wed 01 Oct 2025 01:00:32 +0000
ROA not before:           Wed 01 Oct 2025 01:00:32 +0000
ROA not after:            Tue 30 Dec 2025 02:00:32 +0000
asID:                     16509
IP address blocks:        66.45.74.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/c63341d1-6cda-433e-9220-8eb860d0f1d5/c63341d1-6cda-433e-9220-8eb860d0f1d5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/c63341d1-6cda-433e-9220-8eb860d0f1d5/c63341d1-6cda-433e-9220-8eb860d0f1d5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/c63341d1-6cda-433e-9220-8eb860d0f1d5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:5f:37:25:84:88:52:9a:69:f3:ba:d7:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c63341d1-6cda-433e-9220-8eb860d0f1d5
        Validity
            Not Before: Oct  1 01:00:32 2025 GMT
            Not After : Dec 30 02:00:32 2025 GMT
        Subject: CN=3b1b2a41-09c2-477a-8378-39c94f4a4580
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:76:d5:2f:87:15:b0:f6:2a:6e:7b:5a:85:a3:
                    57:69:7d:c2:a8:28:7d:0e:af:0f:d9:01:54:37:4e:
                    e9:f4:95:9f:e4:5d:58:82:61:81:fd:d6:ce:d5:a8:
                    95:a4:f7:66:c2:38:11:ae:c9:30:d6:cb:da:55:22:
                    a6:d9:3a:5d:e8:61:d9:7a:3c:fc:29:fc:f0:66:03:
                    32:e4:e1:ee:f5:51:5c:e4:64:88:82:37:d8:8c:0d:
                    a0:ff:64:02:ca:3e:42:fd:5c:38:c6:4d:08:36:05:
                    ef:ca:6c:02:54:94:7e:38:12:bd:ce:c1:da:a8:46:
                    e3:bf:71:69:f9:6d:1a:56:f6:96:ff:86:26:b4:21:
                    32:64:83:4b:08:62:be:97:b8:a1:23:d2:6d:87:b2:
                    a1:01:fa:ce:9a:7a:b6:b8:07:e2:09:e3:f2:aa:f2:
                    f3:65:90:25:84:6e:53:a7:d2:de:53:b9:e0:26:40:
                    41:a7:10:f8:61:f5:a0:b8:4e:f1:8c:c8:e9:0e:8b:
                    34:50:c6:27:e6:97:31:2b:a4:15:2b:36:c4:d4:94:
                    d5:b5:eb:1d:05:58:09:ee:bc:38:ac:49:ef:61:e3:
                    b2:77:02:93:9d:ef:be:eb:fa:f6:09:ea:aa:83:d8:
                    24:03:f6:bc:1b:49:82:b0:95:c0:b4:63:f0:2a:ae:
                    a7:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:6F:92:18:6F:04:38:50:45:1E:EB:84:89:B9:C8:AA:F4:6E:40:0F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/c63341d1-6cda-433e-9220-8eb860d0f1d5/24cb6931-6f99-3dcb-90a7-004a047b98c2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/c63341d1-6cda-433e-9220-8eb860d0f1d5/c63341d1-6cda-433e-9220-8eb860d0f1d5.crl

            X509v3 Authority Key Identifier:
                keyid:30:8E:63:48:1C:3A:A3:59:5B:A4:2F:67:BC:4B:84:13:B1:61:B0:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/c63341d1-6cda-433e-9220-8eb860d0f1d5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.45.74.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7d:e0:c4:43:ae:93:a9:80:23:97:b6:36:98:9b:29:68:f8:9c:
         93:e7:57:97:70:e3:7a:4a:01:07:58:dd:eb:ed:b8:be:8d:4c:
         16:07:40:40:a4:67:54:47:b7:7d:44:df:48:cb:61:ed:11:c8:
         71:3c:37:57:80:4c:d5:f3:eb:7a:41:70:ba:1f:b5:65:3c:51:
         4a:a6:db:76:26:41:c2:7b:5a:36:fd:4f:cc:ae:53:3e:4f:f4:
         dc:76:76:e2:a4:60:1e:3c:2d:5b:49:bc:fa:bc:2a:b2:20:14:
         4a:60:a7:94:f2:13:a2:a9:96:e2:30:b4:ca:61:6a:01:51:e7:
         f2:a3:bf:9a:e2:ea:43:25:2e:e2:fe:74:76:5d:8f:77:60:9e:
         75:6c:36:80:02:d5:7e:b1:5a:e2:9b:be:3e:77:d3:f5:dd:67:
         4b:26:d9:c0:2f:b1:78:28:41:14:52:41:2a:c5:13:7c:d1:0e:
         99:3c:86:2a:c7:3b:a3:c8:f5:8e:0d:9f:d0:79:f5:31:91:fe:
         fb:fc:c1:df:b0:7b:74:86:47:79:61:5a:d3:5c:02:14:c9:43:
         61:4d:7c:c3:2e:2d:57:f2:f9:d7:77:82:83:d7:46:36:ea:19:
         43:e3:aa:2c:60:2b:1c:49:66:63:bd:53:05:0c:0a:fe:e9:ee:
         02:eb:7c:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 10 22:25:32 2025 by rpki-client