Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b/6c9060f7-4b78-3517-b647-2fc3d6b2f17a.roa
File:                     6c9060f7-4b78-3517-b647-2fc3d6b2f17a.roa (raw, json)
Hash identifier:          hA87le4uylo6Wb+qJRFAPsUTQKsNfW4oQmsGWZMKDCE=
Subject key identifier:   CD:41:34:CF:2D:40:17:5B:D2:DD:52:35:B3:F2:0B:43:12:9F:A2:33
Certificate issuer:       /CN=e4bb5ad3-d823-4023-aace-329885f50c4b
Certificate serial:       010D0C9F4328584AFAB68A9EC4CE2274A15E8D00
Authority key identifier: DC:69:AA:B9:66:57:CC:BC:06:0C:8E:4F:6E:DB:01:2B:81:42:7F:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b/6c9060f7-4b78-3517-b647-2fc3d6b2f17a.roa
Signing time:             Tue 26 Aug 2025 01:00:32 +0000
ROA not before:           Tue 26 Aug 2025 01:00:32 +0000
ROA not after:            Mon 24 Nov 2025 02:00:32 +0000
asID:                     14618
IP address blocks:        136.245.66.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b/e4bb5ad3-d823-4023-aace-329885f50c4b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b/e4bb5ad3-d823-4023-aace-329885f50c4b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 10 Oct 2025 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:fa:b6:8a:9e:c4:ce:22:74:a1:5e:8d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e4bb5ad3-d823-4023-aace-329885f50c4b
        Validity
            Not Before: Aug 26 01:00:32 2025 GMT
            Not After : Nov 24 02:00:32 2025 GMT
        Subject: CN=4ed74c5e-c8bc-41de-91de-e050e9285c1c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:80:49:af:bb:3a:9b:ad:e8:f5:6e:b7:61:fe:
                    52:e4:82:31:f5:ac:cb:e1:11:f9:9d:a5:80:f9:bd:
                    26:d1:07:68:1c:b6:e1:f8:c5:73:d4:15:34:73:af:
                    da:5c:6a:72:51:7c:bd:3f:68:60:41:cd:bc:b9:45:
                    e5:f7:1f:0c:7e:6e:ff:fa:b0:76:66:84:0d:3f:48:
                    8b:db:88:f3:5d:fa:ee:f6:aa:e5:b7:7a:42:4f:8f:
                    97:18:fe:0a:97:79:81:6a:4b:b0:21:8d:b8:f2:67:
                    4f:85:12:73:63:9a:5e:b1:d8:88:8e:33:04:4e:30:
                    ac:60:aa:bf:53:dc:c6:c9:3e:a5:71:27:69:2b:be:
                    2c:31:26:20:4b:c7:0e:7c:14:50:26:e4:32:a9:cf:
                    1b:8f:21:39:46:ca:80:1c:3f:e7:cd:3d:02:7f:12:
                    cd:28:c3:4f:6f:7c:85:8a:42:5b:93:c7:9e:61:96:
                    4a:a4:7b:5c:d7:a4:a2:cb:14:c0:ad:4c:8b:2c:b0:
                    db:36:e5:f1:8e:86:1a:25:a5:58:98:31:62:27:08:
                    10:f5:39:66:b7:cd:3e:c4:41:64:27:45:87:bb:40:
                    27:a3:57:d4:8d:0a:8c:b4:fc:7d:f2:d2:7b:ea:4d:
                    2c:93:37:eb:13:ad:f1:78:72:24:9c:9a:2e:76:6e:
                    a5:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:41:34:CF:2D:40:17:5B:D2:DD:52:35:B3:F2:0B:43:12:9F:A2:33
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b/6c9060f7-4b78-3517-b647-2fc3d6b2f17a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b/e4bb5ad3-d823-4023-aace-329885f50c4b.crl

            X509v3 Authority Key Identifier:
                keyid:DC:69:AA:B9:66:57:CC:BC:06:0C:8E:4F:6E:DB:01:2B:81:42:7F:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.245.66.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1e:2c:6a:86:0a:c0:84:ab:87:0c:81:a4:2e:c2:c2:75:5d:19:
         58:7e:9c:46:d3:9c:00:ba:28:eb:cf:30:f6:50:9a:65:d2:6b:
         a8:0e:f6:45:00:de:82:89:d1:74:12:32:bf:10:b8:f4:66:ee:
         3d:59:99:50:7b:dc:cb:21:2e:23:fc:be:3c:09:6f:49:fb:9a:
         83:5b:a5:bc:10:13:1a:6f:0b:07:34:89:1c:c9:db:60:e6:c2:
         af:31:7a:72:69:c7:4c:23:41:d9:d5:a5:83:57:b8:60:7e:22:
         02:46:c1:71:2b:77:92:95:14:10:00:1c:c5:2e:12:d4:0f:f7:
         17:5b:ed:93:48:b1:dc:28:91:57:fa:01:8a:b9:4a:d0:59:7b:
         3e:ae:76:fe:b3:ef:08:4b:6e:84:21:b8:d3:78:10:6e:b3:1c:
         93:d0:eb:21:0d:93:bd:fa:94:8f:7b:51:95:4d:b7:8d:c6:e8:
         ba:53:13:c9:a8:3c:65:b0:55:9d:b7:85:bd:04:0d:62:79:a5:
         07:34:ea:94:29:9e:2a:af:d7:b8:38:a3:85:f6:81:ea:5c:26:
         15:7c:84:de:5b:42:88:6d:d0:b3:4d:69:02:b2:be:d8:a5:63:
         63:a1:fb:06:93:c0:bd:06:88:70:6b:5f:52:06:b0:be:23:78:
         03:2d:8a:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 8 21:17:20 2025 by rpki-client