Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/c63341d1-6cda-433e-9220-8eb860d0f1d5/2bc97889-4b58-3152-a8e2-7cb630adc243.roa
File:                     2bc97889-4b58-3152-a8e2-7cb630adc243.roa (raw, json)
Hash identifier:          jAdQ4GvC9g2RkUbvmoDLJ6nQ50c0ZHip8XaNejkgMDc=
Subject key identifier:   95:C9:D2:F5:E1:B0:21:05:BF:A8:21:4D:25:7B:1D:40:59:6E:9A:56
Certificate issuer:       /CN=c63341d1-6cda-433e-9220-8eb860d0f1d5
Certificate serial:       010D0C9F4328584B5F3725B21095DB14B324DD80
Authority key identifier: 30:8E:63:48:1C:3A:A3:59:5B:A4:2F:67:BC:4B:84:13:B1:61:B0:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/c63341d1-6cda-433e-9220-8eb860d0f1d5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/c63341d1-6cda-433e-9220-8eb860d0f1d5/2bc97889-4b58-3152-a8e2-7cb630adc243.roa
Signing time:             Wed 01 Oct 2025 01:00:32 +0000
ROA not before:           Wed 01 Oct 2025 01:00:32 +0000
ROA not after:            Tue 30 Dec 2025 02:00:32 +0000
asID:                     400946
IP address blocks:        66.45.74.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/c63341d1-6cda-433e-9220-8eb860d0f1d5/c63341d1-6cda-433e-9220-8eb860d0f1d5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/c63341d1-6cda-433e-9220-8eb860d0f1d5/c63341d1-6cda-433e-9220-8eb860d0f1d5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/c63341d1-6cda-433e-9220-8eb860d0f1d5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:5f:37:25:b2:10:95:db:14:b3:24:dd:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c63341d1-6cda-433e-9220-8eb860d0f1d5
        Validity
            Not Before: Oct  1 01:00:32 2025 GMT
            Not After : Dec 30 02:00:32 2025 GMT
        Subject: CN=8e04860c-de8d-404b-94c4-dd15b2587c66
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:94:ec:05:9e:0c:f6:4f:03:4e:77:cb:5a:60:
                    e2:8a:41:6c:13:5b:7b:29:05:15:8a:de:29:7c:fd:
                    51:11:a2:89:7a:9c:eb:07:7a:de:7e:f2:82:c0:c7:
                    ef:b6:8d:c6:d5:53:64:79:7a:65:3b:e3:c4:49:d9:
                    40:dc:9d:c4:79:e6:2d:1e:8e:ee:eb:a2:43:a3:a5:
                    f2:cb:36:9b:02:83:bd:e6:50:eb:63:98:e5:de:22:
                    af:43:c1:02:2e:f5:68:a8:bd:8a:7c:f5:d9:bc:59:
                    24:75:55:3d:ac:59:97:50:4f:cd:63:fb:97:de:8c:
                    8f:fc:9b:a5:89:3c:51:96:1d:4b:bc:44:ad:4d:d3:
                    22:e7:ce:63:43:3e:fd:fb:ec:1d:dd:72:b2:7e:f9:
                    52:5f:e9:85:4a:a8:db:d3:bc:1a:90:b9:ab:94:4d:
                    40:78:9d:8d:5e:7b:77:f5:f4:93:e5:6b:4d:50:25:
                    92:6b:27:e8:d9:ca:be:87:bd:32:48:da:24:4e:a1:
                    dc:34:83:09:23:51:8f:73:fe:c8:e5:72:fc:18:46:
                    c6:40:c9:ca:61:ff:b3:17:a8:a7:37:39:54:8e:d3:
                    48:2f:f1:2b:0b:35:bb:1b:c8:c1:f8:93:a1:ed:f9:
                    f6:ad:77:c9:23:98:6d:18:72:e1:9d:35:81:10:38:
                    c9:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:C9:D2:F5:E1:B0:21:05:BF:A8:21:4D:25:7B:1D:40:59:6E:9A:56
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/c63341d1-6cda-433e-9220-8eb860d0f1d5/2bc97889-4b58-3152-a8e2-7cb630adc243.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/c63341d1-6cda-433e-9220-8eb860d0f1d5/c63341d1-6cda-433e-9220-8eb860d0f1d5.crl

            X509v3 Authority Key Identifier:
                keyid:30:8E:63:48:1C:3A:A3:59:5B:A4:2F:67:BC:4B:84:13:B1:61:B0:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/c63341d1-6cda-433e-9220-8eb860d0f1d5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.45.74.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         43:64:b9:8c:b7:b6:34:7e:b8:f2:23:a8:90:13:03:58:7c:de:
         37:9a:a4:d2:0e:36:b6:54:82:51:b3:05:92:8d:b2:8c:b9:4a:
         1d:a9:d7:32:14:37:e9:8e:a5:e8:0f:21:fe:3b:f1:9f:d0:03:
         07:eb:f8:96:e4:ad:5f:d5:05:6d:f9:7b:05:37:d2:54:59:6d:
         6d:20:da:f6:df:ea:17:f1:3e:ef:bc:37:4c:a6:7d:a7:df:18:
         99:e2:74:45:68:53:fb:99:cf:05:75:f5:ce:1c:e9:ae:15:1e:
         6d:92:cc:1d:0a:f9:85:2d:d0:26:d1:bf:78:47:b9:80:3b:b6:
         03:ae:31:2c:a3:af:11:85:51:03:31:87:94:14:b8:07:e4:21:
         25:8d:2d:05:ed:d8:28:14:f1:33:b4:d6:de:21:ac:aa:99:20:
         09:3b:b1:cb:97:cf:48:7b:90:25:ba:c7:d3:8a:e6:9e:16:64:
         7b:e3:b6:59:d8:10:44:9a:7e:d4:d9:a8:9d:0e:4f:83:b4:5e:
         a6:b8:1d:8e:c6:3e:58:8a:59:f7:73:de:a9:65:ca:b3:2b:1e:
         7e:86:2d:75:8a:ed:49:cf:64:7a:07:ed:f4:3a:95:d6:a0:53:
         84:1a:28:6e:ba:bd:04:fb:12:51:f9:d6:bb:a6:fa:a9:e6:19:
         a4:a1:c5:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 10 22:30:37 2025 by rpki-client