Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/b97db266-9fee-346f-b732-032606f5100c.roa
File:                     b97db266-9fee-346f-b732-032606f5100c.roa (raw, json)
Hash identifier:          1C1v9twG6rLey10gw19I0jMkoGaXsC5lr3DFFaBbr0w=
Subject key identifier:   D8:B4:4F:24:52:F7:0D:06:29:35:0F:D7:D8:11:E8:6E:FA:20:8E:F3
Certificate issuer:       /CN=da370214-1d61-48bf-84a0-a60096ccaae7
Certificate serial:       010D0C9F4328584B0F362C0FB08E3D9BC7AF4540
Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/b97db266-9fee-346f-b732-032606f5100c.roa
Signing time:             Tue 02 Sep 2025 09:13:59 +0000
ROA not before:           Tue 02 Sep 2025 09:13:59 +0000
ROA not after:            Mon 01 Dec 2025 10:13:59 +0000
asID:                     39618
IP address blocks:        64.51.240.0/20 maxlen: 24
                          66.92.65.0/24 maxlen: 24
                          66.92.66.0/23 maxlen: 24
                          66.92.156.0/23 maxlen: 24
                          66.92.158.0/24 maxlen: 24
                          69.17.106.0/23 maxlen: 24
                          72.245.80.0/22 maxlen: 24
                          72.245.168.0/21 maxlen: 24
                          72.245.188.0/22 maxlen: 24
                          216.132.149.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:0f:36:2c:0f:b0:8e:3d:9b:c7:af:45:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7
        Validity
            Not Before: Sep  2 09:13:59 2025 GMT
            Not After : Dec  1 10:13:59 2025 GMT
        Subject: CN=f169e5f6-bd9f-4cfe-b2f3-f52455772c8b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:54:f8:5d:03:c9:74:a8:25:88:81:5a:e2:0c:
                    bb:21:d5:0d:5a:3c:5a:f4:f8:3d:67:b0:b4:7d:d9:
                    9d:c1:4c:a4:1d:ac:8d:80:24:55:16:44:2f:1e:ae:
                    92:c6:e0:75:55:11:5d:b2:10:b3:b8:63:b6:7d:66:
                    25:71:47:f2:b9:0e:a8:ff:28:98:2a:55:7e:29:87:
                    3e:b9:c8:ed:9d:48:b5:fb:96:6e:ab:f6:80:eb:af:
                    be:2d:10:0c:54:aa:f4:aa:b3:64:5c:2d:be:c7:9e:
                    e2:5a:a8:b7:f1:d9:75:5a:4c:e5:f6:72:bd:45:69:
                    27:56:60:65:94:8a:e3:79:1c:64:da:75:49:72:4c:
                    64:10:e7:b3:d2:48:1e:bd:18:12:2d:d8:82:02:66:
                    b9:ad:a1:c3:26:23:5c:19:2e:d5:52:ac:ff:81:7e:
                    08:3d:69:37:d5:1e:36:5b:91:33:81:c1:32:5e:3a:
                    8b:dd:3c:a3:cc:c7:6d:1d:fd:ce:50:c1:48:fe:77:
                    c2:98:70:f8:da:d8:09:22:e1:30:db:f7:38:f6:a6:
                    50:33:97:49:64:78:8a:df:80:48:f9:98:be:93:cf:
                    5e:a6:42:cc:7b:db:39:cc:ac:e2:32:e0:12:88:af:
                    14:d8:08:c3:0d:fd:df:b4:36:78:1a:49:0b:5e:7b:
                    2c:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:B4:4F:24:52:F7:0D:06:29:35:0F:D7:D8:11:E8:6E:FA:20:8E:F3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/b97db266-9fee-346f-b732-032606f5100c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl

            X509v3 Authority Key Identifier:
                keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.51.240.0/20
                  66.92.65.0-66.92.67.255
                  66.92.156.0-66.92.158.255
                  69.17.106.0/23
                  72.245.80.0/22
                  72.245.168.0/21
                  72.245.188.0/22
                  216.132.149.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c7:3a:86:03:8c:a7:d2:22:9e:ce:9c:78:09:41:40:f9:5a:76:
         f8:32:71:57:1c:bb:33:5e:47:7f:28:2e:40:41:1f:c8:9b:38:
         41:50:13:82:ca:29:46:41:a9:0f:a7:da:59:60:de:bf:88:78:
         f5:fb:9b:7b:1e:a2:b8:e0:e9:b5:f1:49:b3:af:c0:30:26:f2:
         76:15:d6:9e:eb:66:56:e6:3e:ff:60:30:e1:44:7a:67:88:2a:
         d1:cb:b7:b2:f4:e6:c5:44:7e:ea:63:f5:23:48:6d:0a:30:a2:
         55:1f:35:84:82:23:b2:cb:69:be:3f:5e:17:a1:fb:60:16:1f:
         fb:95:c3:87:95:26:78:ac:52:fa:36:51:8b:a5:63:ea:07:ce:
         f0:05:ac:83:f7:e4:1a:c8:83:67:87:ee:7d:42:3e:88:6a:33:
         a5:d6:39:06:5a:08:12:f0:9b:11:4c:91:34:c1:b6:21:e2:77:
         6c:ad:ab:54:bf:00:bc:7d:04:71:4f:11:53:74:d8:9a:42:f1:
         9f:1f:c1:48:92:40:fa:b8:5d:e5:1f:0c:fb:7c:e9:b4:fb:7e:
         d7:6d:54:13:44:bc:5f:a3:a3:a1:d5:75:bf:d9:dc:d8:d6:9e:
         92:79:dc:6d:50:d4:32:d6:c2:8a:4d:4c:4c:4c:18:dc:34:c4:
         12:f6:45:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 11 04:20:32 2025 by rpki-client