Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842/b5378acf-7548-3e56-8626-ae1f7d6c1241.roa
File:                     b5378acf-7548-3e56-8626-ae1f7d6c1241.roa (raw, json)
Hash identifier:          mm215h0TSaPmdmEkjPCVA0O+tH10nkQuLGcnm5OvfmM=
Subject key identifier:   F1:2C:45:11:9E:A5:4C:6A:49:E5:AD:66:D5:61:07:08:A1:84:BE:E8
Certificate issuer:       /CN=4e06497e-e9cc-45cb-85d6-cf2e58e51842
Certificate serial:       010D0C9F4328584B0E4155B2C7C0125ADB03BA28
Authority key identifier: 57:6F:9F:C6:66:F6:D1:29:CC:7F:C8:0E:E5:F8:47:B4:CB:F4:D1:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842/b5378acf-7548-3e56-8626-ae1f7d6c1241.roa
Signing time:             Tue 02 Sep 2025 01:00:32 +0000
ROA not before:           Tue 02 Sep 2025 01:00:32 +0000
ROA not after:            Mon 01 Dec 2025 02:00:32 +0000
asID:                     2559
IP address blocks:        66.185.184.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842/4e06497e-e9cc-45cb-85d6-cf2e58e51842.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842/4e06497e-e9cc-45cb-85d6-cf2e58e51842.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 10 Oct 2025 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:0e:41:55:b2:c7:c0:12:5a:db:03:ba:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e06497e-e9cc-45cb-85d6-cf2e58e51842
        Validity
            Not Before: Sep  2 01:00:32 2025 GMT
            Not After : Dec  1 02:00:32 2025 GMT
        Subject: CN=f021ac6e-287c-41db-af66-7f4f51ee9e30
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:a6:1a:eb:f9:dc:58:16:dc:1e:d6:61:4a:dc:
                    b5:df:85:7e:99:1f:bd:01:1e:a4:8e:5c:1d:2d:06:
                    bb:e6:11:1b:c0:8f:a5:fa:bc:d6:e4:48:d1:dc:b6:
                    68:83:c2:ac:a7:90:e9:dc:3e:36:24:46:f6:f3:cf:
                    0b:a7:b1:fb:01:6c:37:42:c2:33:b8:7f:83:fb:ba:
                    a2:6e:e4:e3:21:3e:bd:a6:b3:49:f9:b7:0e:59:e3:
                    34:99:36:ac:1d:19:df:12:ac:28:29:da:83:a2:34:
                    0f:5f:d1:67:8e:2d:f9:b8:eb:3b:39:12:54:62:09:
                    a3:09:8b:6c:75:1b:2b:ab:43:2c:0f:86:13:0b:8f:
                    5d:b5:9f:f3:ba:41:d3:d8:c4:d9:1a:6a:37:8c:97:
                    b1:5a:63:16:4f:4a:05:38:97:f0:dd:92:5f:bd:0b:
                    a4:cc:0b:06:1d:2e:44:fc:96:60:2c:2c:e4:9c:7d:
                    14:24:73:ac:b2:c2:09:54:3e:62:cf:f4:7c:3f:91:
                    de:d5:04:a7:f9:55:2a:d8:9f:4c:19:8e:97:51:73:
                    e2:88:83:c2:ec:61:e8:1c:c7:af:aa:d1:96:85:0c:
                    a1:1d:a4:5b:8c:98:00:a3:36:34:20:0e:7a:f5:be:
                    cd:22:51:3b:96:fa:6c:7b:46:e6:d9:85:da:6d:5d:
                    c3:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:2C:45:11:9E:A5:4C:6A:49:E5:AD:66:D5:61:07:08:A1:84:BE:E8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842/b5378acf-7548-3e56-8626-ae1f7d6c1241.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842/4e06497e-e9cc-45cb-85d6-cf2e58e51842.crl

            X509v3 Authority Key Identifier:
                keyid:57:6F:9F:C6:66:F6:D1:29:CC:7F:C8:0E:E5:F8:47:B4:CB:F4:D1:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.185.184.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ba:f4:4f:f2:88:17:24:e3:34:95:53:ea:bf:48:ea:e5:d9:59:
         85:6c:f7:eb:2d:9c:cb:07:54:ef:55:d5:8f:28:48:2d:d1:87:
         f4:ec:fb:32:39:fd:2e:97:11:aa:6b:24:47:b2:22:be:19:e1:
         52:74:52:04:81:b6:4f:20:9e:e7:80:1d:62:3b:69:1c:c2:45:
         a5:15:e7:c9:83:a3:e4:70:54:e1:bb:9b:38:12:f3:ab:a3:84:
         8c:52:94:53:c6:7a:a4:40:b9:2f:be:d0:99:fa:23:ca:57:1b:
         04:06:d9:fc:93:b2:9d:7d:d9:4e:d6:e5:ee:65:02:6d:ea:8e:
         54:da:f0:e2:94:31:d3:59:0e:70:59:4f:26:be:d7:e9:67:cc:
         79:18:20:40:a3:11:66:44:e9:df:42:6c:65:4a:2b:4e:30:4a:
         64:82:44:fa:4a:76:ec:f4:f0:0b:07:5c:5c:40:ca:cf:6a:9d:
         c1:c0:eb:a4:d7:d3:21:90:87:e4:f2:1d:a6:61:0c:5d:12:36:
         a9:e7:41:f2:1f:4b:c1:df:1d:3e:f8:e4:4f:92:d1:13:cc:46:
         8a:8c:78:07:db:16:29:2e:98:1d:d2:59:f7:19:61:23:f9:c8:
         ff:bd:a1:79:d6:0a:5d:de:07:b9:36:66:e7:e7:c0:ba:29:48:
         2d:e0:0a:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 8 21:17:14 2025 by rpki-client