Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/46a50e31-3c52-3ac0-a8d7-56fc1bf0157c.roa
File:                     46a50e31-3c52-3ac0-a8d7-56fc1bf0157c.roa (raw, json)
Hash identifier:          8bK7++Oqbq+CcS+qX0O52LrFusLvDQNPtMoo2Vql3No=
Subject key identifier:   88:25:5D:E9:E3:8F:6A:57:86:54:59:EF:96:82:21:29:D9:08:CF:4B
Certificate issuer:       /CN=d70d8b7e-aada-4cdc-920d-dda617bdd989
Certificate serial:       010D0C9F4328584B0B76D2A0A5BD99CEFF4C8780
Authority key identifier: 58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/46a50e31-3c52-3ac0-a8d7-56fc1bf0157c.roa
Signing time:             Mon 01 Sep 2025 01:00:33 +0000
ROA not before:           Mon 01 Sep 2025 01:00:33 +0000
ROA not after:            Sun 30 Nov 2025 02:00:33 +0000
asID:                     54858
IP address blocks:        66.235.0.0/18 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:0b:76:d2:a0:a5:bd:99:ce:ff:4c:87:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d70d8b7e-aada-4cdc-920d-dda617bdd989
        Validity
            Not Before: Sep  1 01:00:33 2025 GMT
            Not After : Nov 30 02:00:33 2025 GMT
        Subject: CN=abac104e-718f-4971-8791-fcb21b8d3c21
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:fc:02:cd:41:1b:a4:5c:7b:d2:28:47:cb:21:
                    c1:ab:df:8d:5a:7a:de:27:2c:0d:32:27:e8:c4:2e:
                    be:b7:d3:d5:a2:89:5c:da:17:22:5e:62:65:a4:6f:
                    22:38:fc:7b:cb:fe:20:47:dc:9d:5b:65:51:c7:16:
                    b2:8f:69:a2:48:f9:cf:2b:e8:b7:02:ff:47:cf:9b:
                    f7:eb:36:ab:af:f6:8f:a3:dd:dc:3e:8a:53:70:25:
                    6a:a5:3d:3c:37:9a:4d:e9:bf:08:ce:f6:4f:d3:a6:
                    b7:14:48:09:8d:1d:76:10:61:35:50:7c:07:af:b0:
                    68:74:f4:d3:0b:15:89:07:93:7a:e7:8e:16:7e:ad:
                    13:39:7a:c6:b4:02:9d:2c:0c:5f:a9:08:d2:9b:d2:
                    74:d9:b2:37:ce:7a:73:f4:a0:ae:2b:65:5c:c1:c0:
                    9c:4c:0c:4f:33:5d:f7:95:6a:a0:76:6f:a3:8f:ba:
                    57:f2:27:7c:44:f5:63:1d:6a:b6:db:44:e0:76:1d:
                    89:d0:7b:ab:95:94:94:9a:c0:5d:50:b9:43:64:64:
                    6c:f9:5d:7a:f9:0d:a8:b5:5f:97:4d:bd:51:76:b1:
                    70:0e:3d:96:2c:f0:d5:e1:08:37:e9:f0:81:d2:5b:
                    56:41:e0:ac:f3:57:c4:28:f1:f2:42:63:76:74:a7:
                    81:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:25:5D:E9:E3:8F:6A:57:86:54:59:EF:96:82:21:29:D9:08:CF:4B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/46a50e31-3c52-3ac0-a8d7-56fc1bf0157c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl

            X509v3 Authority Key Identifier:
                keyid:58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.235.0.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         80:ce:1c:60:1f:d8:58:37:32:e7:d9:7c:c7:d4:53:28:f1:e5:
         8b:5f:51:a7:ad:2b:e6:e4:59:0a:0d:12:5d:04:1e:8c:18:8e:
         95:49:c5:56:6e:45:59:e9:aa:e9:44:12:d5:72:f1:b7:d1:29:
         e6:3d:e6:cf:00:8d:07:1a:bf:0e:dd:83:ff:9d:be:be:66:ae:
         d5:10:f8:c0:3a:06:61:7e:8c:11:69:27:b9:5b:50:a8:84:e4:
         7f:b0:87:64:0d:e0:12:69:8b:b0:fe:ba:b5:2b:66:0a:6a:4e:
         e6:57:cd:72:36:08:d1:c7:1f:a1:e1:b7:68:7c:d3:54:ed:89:
         a4:c6:39:e8:74:3b:9c:b1:04:bc:f5:d4:16:04:d3:4b:77:3a:
         88:f2:7c:16:88:a3:56:4d:63:09:ff:80:ae:4c:30:2f:62:5d:
         e1:56:42:d6:dd:b2:85:3c:3d:e7:e3:f1:0d:8a:53:f0:29:fe:
         94:3c:cc:e3:ec:7c:d3:83:53:4b:81:65:8e:a0:64:38:e8:f8:
         69:c2:d2:a0:a1:97:fb:f4:67:c1:a2:95:a2:02:d0:24:ab:e3:
         77:67:f0:1e:16:fe:b5:03:55:48:9e:ef:e8:b8:1e:8b:fa:b7:
         9b:7a:75:26:13:65:5f:82:a2:dc:2e:e2:2e:1f:a7:85:a9:90:
         f5:7a:fa:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 10 21:31:11 2025 by rpki-client