Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ad6d9c2-d380-4f1f-8f6c-ebc2e503c4a8/d54ddcb1-6f05-32ca-8e4d-51fe41627c61.roa
File:                     d54ddcb1-6f05-32ca-8e4d-51fe41627c61.roa (raw, json)
Hash identifier:          7nG/C8Fw4bPs6HfN9oZJrECHTNvpq6VvNgXNfOuHIzQ=
Subject key identifier:   02:DA:2B:3C:2B:83:7D:5B:F9:FF:2C:DE:6E:A4:57:E1:0D:30:B9:F6
Certificate issuer:       /CN=5ad6d9c2-d380-4f1f-8f6c-ebc2e503c4a8
Certificate serial:       010D0C9F4328584B1AD176E13AD393E80F471A00
Authority key identifier: 92:9F:B9:15:00:7A:DA:95:56:D3:15:81:73:8D:42:02:1C:CA:3A:87
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ad6d9c2-d380-4f1f-8f6c-ebc2e503c4a8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ad6d9c2-d380-4f1f-8f6c-ebc2e503c4a8/d54ddcb1-6f05-32ca-8e4d-51fe41627c61.roa
Signing time:             Sat 06 Sep 2025 13:00:41 +0000
ROA not before:           Sat 06 Sep 2025 13:00:41 +0000
ROA not after:            Fri 05 Dec 2025 14:00:41 +0000
asID:                     26677
IP address blocks:        66.97.16.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ad6d9c2-d380-4f1f-8f6c-ebc2e503c4a8/5ad6d9c2-d380-4f1f-8f6c-ebc2e503c4a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ad6d9c2-d380-4f1f-8f6c-ebc2e503c4a8/5ad6d9c2-d380-4f1f-8f6c-ebc2e503c4a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ad6d9c2-d380-4f1f-8f6c-ebc2e503c4a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:1a:d1:76:e1:3a:d3:93:e8:0f:47:1a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5ad6d9c2-d380-4f1f-8f6c-ebc2e503c4a8
        Validity
            Not Before: Sep  6 13:00:41 2025 GMT
            Not After : Dec  5 14:00:41 2025 GMT
        Subject: CN=82c4447d-4d32-42fb-9b48-b260c968b2a3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:36:dc:88:5f:9c:b9:55:e5:48:6a:20:10:3c:
                    3d:9e:88:5c:d7:14:66:6e:2f:c5:b1:c6:17:73:25:
                    fc:75:05:a2:3f:32:88:08:9b:1f:31:44:af:e3:fb:
                    ef:4b:3b:0a:5c:31:34:ad:8a:0e:fd:94:29:22:39:
                    d9:d3:31:29:77:92:b8:dd:7a:da:ed:80:3e:8a:10:
                    75:46:dc:a1:19:7c:03:40:75:a5:1b:c7:51:05:60:
                    b3:4e:b4:8a:4d:84:d6:eb:38:01:8d:b0:58:45:60:
                    81:4f:89:c8:e8:68:28:be:e5:82:19:ab:13:d5:bb:
                    ec:0c:2f:20:46:7e:e2:ca:3a:5b:f4:6b:ae:ba:29:
                    a9:5f:3b:e4:a5:94:79:0f:e8:8d:83:aa:0b:5d:d9:
                    d1:49:06:c3:c6:56:06:1e:10:33:06:f4:d2:54:c3:
                    8a:9b:3b:b2:85:57:15:fc:40:aa:1c:47:3d:4d:9f:
                    6a:6e:09:05:30:83:cb:0c:22:a4:33:3d:89:59:48:
                    a2:6b:88:ee:79:0d:83:5b:96:b1:70:a7:4d:99:d5:
                    35:41:8f:f3:5a:54:0e:84:ab:06:15:a3:2a:09:94:
                    33:97:99:d1:63:7e:31:ab:5f:a3:25:0e:35:34:f7:
                    5b:d0:36:22:77:6a:22:68:39:19:03:84:a3:5f:13:
                    28:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:DA:2B:3C:2B:83:7D:5B:F9:FF:2C:DE:6E:A4:57:E1:0D:30:B9:F6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ad6d9c2-d380-4f1f-8f6c-ebc2e503c4a8/d54ddcb1-6f05-32ca-8e4d-51fe41627c61.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ad6d9c2-d380-4f1f-8f6c-ebc2e503c4a8/5ad6d9c2-d380-4f1f-8f6c-ebc2e503c4a8.crl

            X509v3 Authority Key Identifier:
                keyid:92:9F:B9:15:00:7A:DA:95:56:D3:15:81:73:8D:42:02:1C:CA:3A:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ad6d9c2-d380-4f1f-8f6c-ebc2e503c4a8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.97.16.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a5:c9:d0:97:c0:48:2a:ee:35:7e:b2:0a:c2:64:32:2a:5f:b8:
         cd:4c:20:4d:f3:df:38:60:60:bf:00:a8:22:de:62:30:c7:84:
         51:40:bd:5a:09:05:48:1c:ad:f9:73:d1:f8:b5:87:85:bf:8d:
         84:f8:10:7c:6b:47:44:58:7d:e6:15:76:30:7d:59:f8:bb:b9:
         f1:d2:3f:07:95:71:b1:55:08:dd:1f:8f:e4:56:3c:90:9e:94:
         2c:64:a5:f1:e6:32:ff:5e:56:59:97:65:94:dc:5f:ca:2d:bf:
         2b:10:73:19:c7:8a:c7:6e:e9:34:f2:35:77:9d:4c:de:30:e0:
         f7:b8:38:d9:e1:5b:40:20:6f:3a:48:60:7c:22:ac:80:d4:34:
         0c:23:47:aa:7c:b0:ac:61:47:1d:58:ba:54:c7:56:ec:4b:ab:
         90:b3:5a:67:51:00:91:18:35:70:a3:05:85:7d:da:90:f8:be:
         34:22:85:3e:cd:73:09:70:c2:05:70:9d:07:d0:b6:f5:12:18:
         eb:cf:8d:7a:17:f9:cd:29:be:70:5e:49:37:b9:2a:aa:78:cf:
         b6:21:72:21:88:56:6b:58:18:cd:20:56:29:c3:e7:67:ef:a9:
         1f:01:6c:33:1d:8d:93:7c:24:c3:f4:af:71:28:50:34:c6:4d:
         56:ea:a7:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 10 14:12:40 2025 by rpki-client