Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a05c180d-6db0-4307-bc39-264e11bb765c/d5ed1c68-c170-38bc-a6ec-5f8c2987fe4f.roa
File:                     d5ed1c68-c170-38bc-a6ec-5f8c2987fe4f.roa (raw, json)
Hash identifier:          eYRp78CY2ygtgiB3iA+t6JU2ufK8N4DqBgSqYVeSQeU=
Subject key identifier:   69:C4:C3:5C:FB:A1:18:FB:F2:16:E4:67:DF:0E:C8:28:BE:E7:12:19
Certificate issuer:       /CN=a05c180d-6db0-4307-bc39-264e11bb765c
Certificate serial:       010D0C9F4328584B4BAC5F5A2463B28F56E67B40
Authority key identifier: FA:96:F4:82:9C:8D:63:83:5B:FB:C0:EA:74:85:60:F5:E9:31:65:58
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a05c180d-6db0-4307-bc39-264e11bb765c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a05c180d-6db0-4307-bc39-264e11bb765c/d5ed1c68-c170-38bc-a6ec-5f8c2987fe4f.roa
Signing time:             Wed 24 Sep 2025 01:00:31 +0000
ROA not before:           Wed 24 Sep 2025 01:00:31 +0000
ROA not after:            Tue 23 Dec 2025 02:00:31 +0000
asID:                     12956
IP address blocks:        66.119.64.0/19 maxlen: 19
                          66.201.160.0/19 maxlen: 19
                          66.249.192.0/19 maxlen: 19
                          198.52.248.0/21 maxlen: 21
                          216.184.96.0/19 maxlen: 19
                          2001:1820::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a05c180d-6db0-4307-bc39-264e11bb765c/a05c180d-6db0-4307-bc39-264e11bb765c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a05c180d-6db0-4307-bc39-264e11bb765c/a05c180d-6db0-4307-bc39-264e11bb765c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a05c180d-6db0-4307-bc39-264e11bb765c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:4b:ac:5f:5a:24:63:b2:8f:56:e6:7b:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a05c180d-6db0-4307-bc39-264e11bb765c
        Validity
            Not Before: Sep 24 01:00:31 2025 GMT
            Not After : Dec 23 02:00:31 2025 GMT
        Subject: CN=e6a7b3f5-ca16-44e6-a8e2-1804ae6624e6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:61:2f:e6:6f:c3:13:74:89:c0:70:3f:de:a6:
                    fc:8a:a7:56:ea:56:e9:03:00:ca:34:52:e4:ae:b5:
                    9d:74:f6:63:f4:7b:90:ad:cf:af:84:ba:ca:82:98:
                    0c:db:6f:0e:9d:53:4c:ba:bd:83:35:f8:2e:b4:e7:
                    39:a2:ca:db:b8:27:c5:87:88:41:53:1d:b5:1d:ed:
                    31:e8:55:cd:d0:89:38:62:73:f6:51:6e:c2:50:2e:
                    84:93:7b:38:17:05:99:de:05:6d:d2:58:35:ae:a1:
                    52:cc:a8:c6:b3:70:44:ce:72:30:ea:a5:37:2e:ae:
                    de:2b:23:76:17:14:16:17:6b:fa:8b:55:d2:f6:73:
                    c3:c9:ef:6d:19:c9:ec:8f:1d:1e:d3:2b:e1:78:fa:
                    58:00:95:e1:b3:0e:75:ee:33:36:30:1e:04:07:91:
                    d9:37:c7:58:f6:53:07:88:a7:9c:c4:be:1e:98:4c:
                    84:1f:8a:7e:4c:e6:93:d9:3c:1d:ee:4f:27:24:65:
                    84:71:05:86:e1:60:3e:25:d7:61:f3:2f:0f:b9:8f:
                    2f:c6:da:90:ca:93:92:ab:d5:d6:e3:de:02:b2:78:
                    24:a8:5c:5d:d2:64:5c:46:14:6f:f5:55:66:b6:f1:
                    7d:0a:14:d8:44:ef:6f:69:d3:91:74:0f:86:5d:20:
                    64:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:C4:C3:5C:FB:A1:18:FB:F2:16:E4:67:DF:0E:C8:28:BE:E7:12:19
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a05c180d-6db0-4307-bc39-264e11bb765c/d5ed1c68-c170-38bc-a6ec-5f8c2987fe4f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a05c180d-6db0-4307-bc39-264e11bb765c/a05c180d-6db0-4307-bc39-264e11bb765c.crl

            X509v3 Authority Key Identifier:
                keyid:FA:96:F4:82:9C:8D:63:83:5B:FB:C0:EA:74:85:60:F5:E9:31:65:58

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a05c180d-6db0-4307-bc39-264e11bb765c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.119.64.0/19
                  66.201.160.0/19
                  66.249.192.0/19
                  198.52.248.0/21
                  216.184.96.0/19
                IPv6:
                  2001:1820::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         30:4d:fc:98:0e:b4:61:fe:af:8f:d8:c2:db:c9:d2:67:c7:c6:
         57:06:e1:66:10:d4:c2:cb:71:bf:46:6d:fe:78:51:00:b2:95:
         74:1c:fa:a7:ea:3c:e9:86:e0:0d:b7:dc:6b:00:2b:79:b3:47:
         c2:06:82:3c:88:3d:eb:51:2c:fe:f6:b8:eb:90:82:69:1e:3c:
         ca:01:9d:3e:1c:17:b5:ce:8b:97:f5:45:06:76:ae:fc:83:3d:
         8e:29:ce:55:5e:be:a3:7c:99:4e:8b:c7:45:34:ff:0d:d4:6f:
         cb:57:ac:e4:7b:f7:5b:99:83:d2:f8:dc:44:f2:90:e7:03:8e:
         53:ab:eb:ac:35:65:4f:9b:ef:bf:e0:34:4e:df:bf:a2:20:a6:
         5f:56:e3:d3:0e:cc:3d:3c:05:23:ea:96:9a:f2:1b:26:0a:b3:
         55:0e:09:94:4c:59:48:b7:cd:e0:a5:85:d1:0a:5e:78:55:ae:
         93:77:86:fb:47:f7:c2:b2:4b:4e:fa:de:24:35:57:91:43:fd:
         57:26:cf:5c:f6:48:ad:68:1c:f5:a1:d7:3b:7f:86:2c:da:b7:
         0f:d6:95:83:77:58:98:58:f7:70:43:a4:c4:7c:d0:ea:af:a3:
         4e:4c:13:31:ee:d2:46:24:c6:1d:7e:29:80:f2:92:87:ec:f4:
         2a:b6:7c:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 10 21:32:49 2025 by rpki-client