Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/51b7e3a5-39e2-3728-b955-fbf00d7212c7.roa
File:                     51b7e3a5-39e2-3728-b955-fbf00d7212c7.roa (raw, json)
Hash identifier:          6EYUWqAG+GYi7zn6zfouQlxxjYiQZcDzF8swgOw3rk0=
Subject key identifier:   E8:5A:91:95:E5:1B:32:03:49:14:DC:84:1F:83:74:5E:9B:4E:50:45
Certificate issuer:       /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
Certificate serial:       010D0C9F4328584B004BF60659742516B48BB300
Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/51b7e3a5-39e2-3728-b955-fbf00d7212c7.roa
Signing time:             Thu 28 Aug 2025 01:00:33 +0000
ROA not before:           Thu 28 Aug 2025 01:00:33 +0000
ROA not after:            Wed 26 Nov 2025 02:00:33 +0000
asID:                     198335
IP address blocks:        66.250.23.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:00:4b:f6:06:59:74:25:16:b4:8b:b3:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
        Validity
            Not Before: Aug 28 01:00:33 2025 GMT
            Not After : Nov 26 02:00:33 2025 GMT
        Subject: CN=8733f715-67b6-43f1-9ae2-a4b9c105bee1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:01:67:60:67:21:58:cd:c4:26:d8:14:b1:41:
                    83:10:33:1f:ec:eb:10:72:ca:c3:ed:64:14:3d:33:
                    f5:bb:02:4f:12:df:e8:05:6e:87:5b:c9:85:e3:8f:
                    3b:d9:9a:c0:75:b5:c4:b3:1c:c9:5e:80:66:4f:b7:
                    0b:75:82:01:4d:65:9c:53:37:38:27:45:3a:34:b5:
                    19:fd:7e:f9:ef:6e:5f:af:48:3c:56:ea:d7:c2:33:
                    b2:62:df:c0:b7:ef:56:32:75:8f:4c:31:0e:f7:86:
                    d7:d2:96:e4:dc:83:ce:23:17:70:18:73:84:90:9f:
                    15:7d:2c:ab:82:9f:ab:2a:10:d4:00:2a:f6:c1:ea:
                    91:bb:bc:11:f3:52:1f:c0:2f:7f:b2:de:cd:3f:15:
                    cf:36:c9:d0:3a:6f:6d:c2:0a:d3:72:c8:fa:18:60:
                    9a:d1:da:f8:87:bb:80:33:98:c8:70:af:cb:c6:e8:
                    dd:52:3a:74:4a:b2:9d:76:a2:d0:5b:1a:68:5d:4e:
                    85:e2:a6:2d:95:53:31:e8:4f:57:30:e0:93:38:20:
                    f8:d4:43:8b:26:8f:ea:ce:88:cf:81:cb:63:e4:0f:
                    3a:2d:32:af:fe:f7:1f:bd:98:c7:8c:3a:fb:01:53:
                    c5:dc:fe:44:49:3d:a2:6e:13:70:10:06:5f:7e:e5:
                    af:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:5A:91:95:E5:1B:32:03:49:14:DC:84:1F:83:74:5E:9B:4E:50:45
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/51b7e3a5-39e2-3728-b955-fbf00d7212c7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl

            X509v3 Authority Key Identifier:
                keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.250.23.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9a:6e:4a:fd:b3:08:d7:60:70:1e:fb:87:3b:69:30:7d:b7:f0:
         9a:1c:94:43:ae:fe:4a:4b:bc:c1:fb:99:5c:4d:5d:4b:be:7e:
         ee:53:28:ee:f9:c3:d5:39:ab:ac:7c:09:84:16:67:cb:7d:88:
         fa:37:de:2b:ef:f0:38:0e:20:48:9f:bd:26:3c:30:fe:fb:0d:
         47:c6:35:d3:10:b0:fe:bc:aa:f7:af:81:0e:81:ec:f4:d6:1b:
         86:1f:ef:c7:4e:98:7d:18:fc:67:a1:f6:dd:64:a2:3d:eb:81:
         d0:82:c6:0d:03:64:01:ff:b4:7e:11:5b:86:7c:d0:5a:a2:a4:
         4f:90:b1:7c:f0:a6:93:a6:52:d5:8a:b0:a0:b9:c2:ca:7e:bb:
         7d:d8:f5:f2:36:c6:8a:30:a8:fd:c1:1c:d2:9a:2c:b0:fc:3a:
         65:7d:19:ba:de:31:61:54:80:4c:63:1e:cd:49:54:22:b1:e7:
         38:f0:cc:ce:44:e7:e0:da:97:bf:61:ed:8d:c3:0d:98:30:b6:
         f2:68:d0:de:a5:bd:44:2f:7d:23:38:59:7f:3e:69:b6:7c:fc:
         d4:38:e4:9f:fc:38:01:ff:c3:07:af:13:66:65:14:01:9e:37:
         58:19:a8:4b:28:8d:77:4c:c6:92:d9:31:b0:1a:00:ac:00:05:
         57:60:0c:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 11 12:14:35 2025 by rpki-client