Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/90cfa271-a36a-3e4e-852c-006b4d9a19be.roa
File:                     90cfa271-a36a-3e4e-852c-006b4d9a19be.roa (raw, json)
Hash identifier:          kwU5ML6xGhA++EUoxCNhVAtoFPE1eCDKDbqk4HTma+8=
Subject key identifier:   D1:38:4B:37:B5:5B:87:7F:AA:9A:E2:2B:14:62:A4:BC:51:E0:01:EA
Certificate issuer:       /CN=24fa05bf-5b46-4a55-bd55-4891d21cb24f
Certificate serial:       010D0C9F4328584B0CDC1CBCAF151D592022F700
Authority key identifier: F7:6F:8C:D8:57:DC:73:3D:90:CF:C1:F9:F3:DF:C0:38:A5:E8:74:80
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/90cfa271-a36a-3e4e-852c-006b4d9a19be.roa
Signing time:             Mon 01 Sep 2025 13:00:40 +0000
ROA not before:           Mon 01 Sep 2025 13:00:40 +0000
ROA not after:            Sun 30 Nov 2025 14:00:40 +0000
asID:                     394437
IP address blocks:        66.249.101.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/24fa05bf-5b46-4a55-bd55-4891d21cb24f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/24fa05bf-5b46-4a55-bd55-4891d21cb24f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 Oct 2025 05:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:0c:dc:1c:bc:af:15:1d:59:20:22:f7:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=24fa05bf-5b46-4a55-bd55-4891d21cb24f
        Validity
            Not Before: Sep  1 13:00:40 2025 GMT
            Not After : Nov 30 14:00:40 2025 GMT
        Subject: CN=e6be83a9-9e4e-4ee2-bb88-c5cc5984736c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:b7:94:44:39:19:ef:22:ed:74:92:9c:59:3b:
                    1d:65:6b:18:8d:3f:48:33:51:27:a4:6c:ff:20:37:
                    eb:bc:ca:eb:31:15:cc:f6:24:c7:78:41:2f:ea:7c:
                    56:e1:e9:30:ae:9e:11:a4:5d:76:5b:e7:72:5f:eb:
                    a1:f6:d3:fb:03:96:87:11:e2:26:cc:e3:4b:d1:36:
                    07:cb:59:2f:83:8a:d5:74:a5:7b:07:74:82:97:50:
                    d8:9e:26:0b:07:f3:35:92:2b:ed:20:6c:6e:17:50:
                    bb:14:48:a4:41:f6:02:41:11:c3:2c:0b:18:d6:45:
                    d2:eb:ab:9a:79:71:d7:c7:5f:91:43:87:75:c1:54:
                    9e:67:ab:de:34:72:e2:64:36:25:b7:0b:73:2e:08:
                    8e:73:68:35:a4:e0:4e:ea:4a:55:3f:1d:df:bb:e1:
                    4e:17:2b:81:fb:ea:44:44:91:f1:43:fa:3d:fe:54:
                    15:22:26:d1:4a:21:e3:e3:a7:ba:7a:cb:13:d7:94:
                    e1:3d:46:f0:b9:fa:c9:3e:5f:4a:11:15:22:93:df:
                    07:53:c0:e3:9b:6a:44:ec:09:76:0c:f0:77:d0:a4:
                    31:c8:8a:3e:a0:36:6a:06:4f:eb:0e:92:c6:9e:08:
                    d4:1c:39:fc:7e:ff:7e:6e:97:50:01:ed:19:39:f5:
                    23:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:38:4B:37:B5:5B:87:7F:AA:9A:E2:2B:14:62:A4:BC:51:E0:01:EA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/90cfa271-a36a-3e4e-852c-006b4d9a19be.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/24fa05bf-5b46-4a55-bd55-4891d21cb24f.crl

            X509v3 Authority Key Identifier:
                keyid:F7:6F:8C:D8:57:DC:73:3D:90:CF:C1:F9:F3:DF:C0:38:A5:E8:74:80

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.249.101.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         38:57:5b:9b:b4:f0:2c:1d:8b:19:cf:4b:3d:43:55:b5:67:19:
         83:ac:71:ce:c5:46:d6:28:e3:62:d3:c0:dc:48:41:75:88:88:
         e9:65:f1:68:e9:ee:4b:d3:6c:4d:e5:15:8d:c0:f5:31:18:5c:
         92:1f:f4:11:85:e3:5a:31:e4:d3:af:ac:82:5b:5d:9b:57:af:
         da:ef:01:8e:a5:71:04:e1:99:af:d0:77:46:51:16:2b:1b:39:
         9c:f1:98:68:ec:7b:00:91:80:53:6a:76:42:7e:e8:25:83:86:
         fe:e1:cd:a8:06:0f:d3:fa:80:2e:12:93:1b:27:a1:bd:35:30:
         54:83:70:fc:04:5b:46:29:b5:0e:f7:d6:b1:29:71:b7:7c:8e:
         7d:a6:ab:94:f5:8e:dd:62:ef:a1:4d:a2:15:77:44:19:b0:a2:
         b3:68:47:46:38:3a:e4:67:36:43:64:7d:91:eb:5d:82:04:0d:
         8b:88:98:5b:25:82:c4:02:92:ac:46:12:5b:ab:9e:98:b6:6f:
         94:83:b1:df:73:c1:a3:b2:79:a2:42:25:16:d5:b1:59:a0:63:
         15:a4:3d:e6:a9:f0:3d:a2:ea:5e:23:e5:f8:7f:c1:63:1d:4e:
         da:40:5c:cf:43:c5:f1:ef:92:6b:79:d4:8f:ca:17:46:cf:70:
         dc:e9:d1:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 11 05:06:23 2025 by rpki-client