Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/a3b766a9-d93f-3b59-aa9d-a1a74c81e879.roa
File:                     a3b766a9-d93f-3b59-aa9d-a1a74c81e879.roa (raw, json)
Hash identifier:          SJ48Xv1DSG5jF2zEmsuHMecEmnYqxCFst3DuzXw1lpI=
Subject key identifier:   33:28:E0:27:5A:9C:CF:D2:8E:5F:66:C5:80:46:C9:81:C9:8B:1C:9B
Certificate issuer:       /CN=da370214-1d61-48bf-84a0-a60096ccaae7
Certificate serial:       010D0C9F4328584B1D9C34D3E90D2D5A1B31111C
Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/a3b766a9-d93f-3b59-aa9d-a1a74c81e879.roa
Signing time:             Sun 07 Sep 2025 13:00:41 +0000
ROA not before:           Sun 07 Sep 2025 13:00:41 +0000
ROA not after:            Sat 06 Dec 2025 14:00:41 +0000
asID:                     151373
IP address blocks:        66.253.15.0/24 maxlen: 24
                          66.253.16.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:1d:9c:34:d3:e9:0d:2d:5a:1b:31:11:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7
        Validity
            Not Before: Sep  7 13:00:41 2025 GMT
            Not After : Dec  6 14:00:41 2025 GMT
        Subject: CN=b9526de6-59dc-4403-aae7-5cc3693a5952
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:41:d1:6c:e7:eb:a5:76:f9:1b:ae:bc:9c:d5:
                    62:22:84:a3:a6:f5:d1:6b:db:ad:37:6f:9e:1d:57:
                    10:b3:48:b0:0a:d3:e0:a0:96:0a:d7:04:43:84:62:
                    f4:0b:19:15:ac:5d:9c:7f:34:cd:aa:aa:5f:4c:6d:
                    ba:1e:4a:b1:ee:62:41:36:ee:ad:ab:d3:a7:fd:dc:
                    f8:1b:18:e6:1a:c8:78:31:80:29:fb:a6:58:4c:ef:
                    60:59:b4:c6:09:3d:36:0c:15:d9:3c:bd:9e:dd:a4:
                    37:25:ee:c5:10:b4:b0:a0:28:8a:c5:30:91:81:db:
                    46:46:fe:33:cf:d6:9d:14:54:82:93:7b:8b:e5:7a:
                    7f:23:55:7e:9d:be:c3:e3:17:1f:29:37:c8:61:75:
                    f3:58:e2:00:93:a7:4d:18:28:66:02:13:b0:2b:cd:
                    fc:bc:dc:29:98:e9:d1:71:d1:81:35:f0:bd:6f:5e:
                    c9:dd:6c:ed:7f:17:7f:91:2d:7b:7b:08:80:eb:c5:
                    ab:a6:12:9f:d9:11:9f:dd:f8:da:34:c6:58:23:e0:
                    5e:bb:9d:de:6a:78:7a:c8:9a:8f:a7:97:98:df:35:
                    fa:5f:2d:d5:6a:d1:ea:ff:75:36:69:32:aa:a6:30:
                    df:9b:f3:55:b2:ba:33:3f:9f:83:ab:c6:84:04:00:
                    d1:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:28:E0:27:5A:9C:CF:D2:8E:5F:66:C5:80:46:C9:81:C9:8B:1C:9B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/a3b766a9-d93f-3b59-aa9d-a1a74c81e879.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl

            X509v3 Authority Key Identifier:
                keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.253.15.0-66.253.16.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2a:9b:20:74:0d:6e:a6:84:9b:2b:ef:67:e7:dd:40:ef:15:66:
         a4:e0:e2:ae:09:a1:0e:14:e0:6d:cc:af:09:93:9a:2a:a4:fa:
         1d:a0:9d:84:2e:0e:ce:e2:04:70:8c:c0:b4:be:c3:6c:16:29:
         f7:d1:b8:c5:f6:b4:83:fd:33:cc:b5:6d:4b:98:23:c8:f7:09:
         ef:5f:6d:91:bf:60:3e:c7:15:94:47:2c:b0:66:e6:c9:e1:9d:
         48:48:6b:32:68:60:8e:74:d8:93:f5:47:02:d6:76:f1:0a:5f:
         3a:cb:f9:e5:46:6a:df:41:71:4d:cb:4c:77:e9:76:96:6c:f2:
         3a:77:59:b7:8f:ad:90:15:64:4e:2e:15:65:5c:6f:9f:12:05:
         37:b3:16:85:ce:32:32:4b:a0:cd:3a:b1:3a:72:95:b4:d0:ac:
         c0:a2:d1:38:cd:75:4e:12:ff:89:a2:f7:f6:82:b1:99:c4:14:
         d4:85:c2:f6:b8:3c:e5:0a:fc:11:d6:3d:1a:25:a9:c7:89:9f:
         63:8e:88:0c:07:3e:f9:87:87:15:e2:0c:37:ba:81:65:31:39:
         e0:71:8f:fe:35:12:4f:9c:a0:54:54:31:64:90:ec:a9:e6:ea:
         16:2d:18:f3:5b:c5:21:ef:b6:e9:87:3d:9f:86:19:bb:1a:99:
         16:b3:e1:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 11 08:53:22 2025 by rpki-client