Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/72a39293-5ddb-4cc0-8353-2b258e2e78ea/9ab65be5-0f24-31ad-9d4c-aff8d3ca6739.roa
File:                     9ab65be5-0f24-31ad-9d4c-aff8d3ca6739.roa (raw, json)
Hash identifier:          ytIrL7/lSWbvZ62Rx6/QJOrXSVCHIB+WEKGHw62ZPpo=
Subject key identifier:   0F:9D:A8:13:0D:83:D9:C6:B8:66:0F:F6:D3:CB:6C:54:18:44:76:32
Certificate issuer:       /CN=72a39293-5ddb-4cc0-8353-2b258e2e78ea
Certificate serial:       010D0C9F4328584B4E7747713C0521E13FEA2F80
Authority key identifier: 54:EA:23:CA:05:20:B8:CA:42:80:7D:29:67:F8:3E:A1:F9:EE:DB:C3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/72a39293-5ddb-4cc0-8353-2b258e2e78ea.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/72a39293-5ddb-4cc0-8353-2b258e2e78ea/9ab65be5-0f24-31ad-9d4c-aff8d3ca6739.roa
Signing time:             Thu 25 Sep 2025 01:00:33 +0000
ROA not before:           Thu 25 Sep 2025 01:00:33 +0000
ROA not after:            Wed 24 Dec 2025 02:00:33 +0000
asID:                     10753
IP address blocks:        66.128.196.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/72a39293-5ddb-4cc0-8353-2b258e2e78ea/72a39293-5ddb-4cc0-8353-2b258e2e78ea.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/72a39293-5ddb-4cc0-8353-2b258e2e78ea/72a39293-5ddb-4cc0-8353-2b258e2e78ea.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/72a39293-5ddb-4cc0-8353-2b258e2e78ea.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 Oct 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:4e:77:47:71:3c:05:21:e1:3f:ea:2f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72a39293-5ddb-4cc0-8353-2b258e2e78ea
        Validity
            Not Before: Sep 25 01:00:33 2025 GMT
            Not After : Dec 24 02:00:33 2025 GMT
        Subject: CN=7b7d0d91-8031-416c-9ae6-873394e30ddd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:16:87:df:37:f0:9f:bd:8e:82:f8:36:c3:45:
                    9c:71:f4:1e:f1:c0:61:75:8f:d7:91:19:7e:95:3f:
                    67:ca:a2:a0:3a:6c:14:0e:50:09:d1:b9:bf:50:17:
                    7c:a0:de:2e:24:94:9b:dc:f2:33:8d:f8:bb:61:8a:
                    81:56:a0:13:21:3e:99:c7:e6:cb:2e:50:21:ce:8c:
                    cd:2a:f5:18:ba:b7:09:79:c1:cb:3a:73:cf:7b:86:
                    c3:79:40:05:e9:fb:c7:7a:d5:d0:16:c6:bf:2c:b5:
                    2b:42:ec:bd:99:29:70:a0:89:c2:7b:26:be:c3:e2:
                    88:fc:2c:9c:ac:14:73:98:8c:a4:bb:fb:56:37:dd:
                    15:37:72:53:95:54:24:f3:3d:e7:1f:e3:a0:68:ba:
                    ff:4a:4c:9a:52:ec:5e:2e:16:87:70:ae:ac:0b:dc:
                    77:94:34:96:47:97:80:43:45:b2:73:3b:47:e7:43:
                    a9:b6:04:46:78:16:4e:77:4d:5b:c2:a9:84:4f:4e:
                    23:e8:d3:90:b3:bb:d7:07:32:c9:66:15:b9:27:06:
                    2d:c1:8b:94:31:ce:dd:38:45:2b:dc:cb:50:e5:6c:
                    ef:4d:33:a4:07:ca:fa:94:06:71:6e:bd:c0:09:d4:
                    37:d7:d0:01:78:6f:a6:9c:11:17:93:d6:d9:4e:fb:
                    7a:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:9D:A8:13:0D:83:D9:C6:B8:66:0F:F6:D3:CB:6C:54:18:44:76:32
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/72a39293-5ddb-4cc0-8353-2b258e2e78ea/9ab65be5-0f24-31ad-9d4c-aff8d3ca6739.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/72a39293-5ddb-4cc0-8353-2b258e2e78ea/72a39293-5ddb-4cc0-8353-2b258e2e78ea.crl

            X509v3 Authority Key Identifier:
                keyid:54:EA:23:CA:05:20:B8:CA:42:80:7D:29:67:F8:3E:A1:F9:EE:DB:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/72a39293-5ddb-4cc0-8353-2b258e2e78ea.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.128.196.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         64:8d:43:93:4f:6d:cf:8d:81:8a:a3:c4:d1:3d:4a:7a:29:45:
         82:70:42:97:f4:20:75:bc:75:8f:27:e8:be:cd:76:ec:6d:ec:
         0f:6d:a6:3d:95:a1:84:71:85:f2:d6:3b:13:6d:2f:24:88:d0:
         61:be:ce:b3:14:85:38:e0:3c:88:72:75:8a:ca:13:a2:87:c0:
         9a:37:18:8b:3c:33:39:e0:ac:bd:77:87:00:a7:86:0e:86:88:
         97:9f:a5:10:f1:05:ef:d2:f2:04:32:43:2a:50:2f:2e:56:6c:
         83:35:b4:cb:b1:c5:41:57:c2:28:ed:5c:0c:ef:3a:48:c3:60:
         26:c2:cc:93:8a:4e:5c:f2:ba:3b:a0:93:8f:f6:28:53:91:a4:
         53:60:36:4b:9b:65:a4:25:65:46:d1:c0:7b:e6:95:80:68:95:
         7f:b6:ce:7a:ac:f0:d1:4b:b9:1b:c6:9a:77:44:7b:69:13:aa:
         c3:a6:44:64:89:9e:a5:98:ca:d8:be:c0:af:5e:e1:b0:48:2d:
         71:d2:7a:71:fe:ab:a0:66:60:cb:49:b4:98:c1:91:5d:50:d8:
         b3:d6:5c:1f:3a:5c:7a:28:b0:b6:11:47:a3:49:65:fc:27:f7:
         cd:50:87:99:79:52:93:16:f4:50:54:47:75:c8:48:cc:f8:9a:
         5a:30:da:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 11 19:08:43 2025 by rpki-client