Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/56cc9209-d09e-343f-823c-ff1c674006b0.roa
File:                     56cc9209-d09e-343f-823c-ff1c674006b0.roa (raw, json)
Hash identifier:          Fs2DLa15LsxGLlN0C29EgaJY2ijRF+9TTtnYI5hsSKM=
Subject key identifier:   1B:8C:80:56:38:4F:8C:5F:F7:B1:22:99:C1:08:30:F9:48:67:06:81
Certificate issuer:       /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial:       010D0C9F4328584B67977AFD832DB675F80C5F80
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/56cc9209-d09e-343f-823c-ff1c674006b0.roa
Signing time:             Sat 04 Oct 2025 01:00:33 +0000
ROA not before:           Sat 04 Oct 2025 01:00:33 +0000
ROA not after:            Fri 02 Jan 2026 02:00:33 +0000
asID:                     15169
IP address blocks:        66.102.3.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Oct 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:67:97:7a:fd:83:2d:b6:75:f8:0c:5f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
        Validity
            Not Before: Oct  4 01:00:33 2025 GMT
            Not After : Jan  2 02:00:33 2026 GMT
        Subject: CN=76596308-bb7e-484a-a8a9-4c9187587a10
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:5e:24:2d:36:dc:20:52:50:08:1f:2f:85:97:
                    6b:cb:c6:ca:f3:89:81:ff:4a:a8:97:98:2e:1a:51:
                    7a:ce:9e:b6:4a:14:b2:14:42:5e:5e:b3:96:82:36:
                    c3:cc:ce:f8:23:3a:9e:0f:9e:e3:00:e6:2f:f0:7e:
                    99:ab:a8:1d:ab:ef:cf:a3:6c:02:d3:dc:b7:a0:6a:
                    f9:ea:76:cc:74:b2:0f:64:4b:bc:9d:0b:7d:d8:bc:
                    a8:a2:df:73:c9:84:fd:23:0d:27:b6:3a:11:94:8a:
                    dd:23:19:21:82:e1:8a:c6:6d:a8:91:8e:40:da:3f:
                    7c:41:73:f1:61:9f:fd:a2:67:31:0d:d3:39:4b:a0:
                    f7:cf:cc:3e:d2:8c:d7:e8:2e:e9:f0:34:00:05:d9:
                    94:e3:40:9d:7b:ec:25:26:4b:20:61:89:f6:12:11:
                    37:9a:2f:53:5b:49:c6:6c:cb:9d:9f:73:87:4d:8f:
                    79:f9:6c:0c:d7:30:cf:cf:e4:a8:8f:cc:60:a8:ed:
                    a8:13:b9:20:04:6e:1c:74:5c:34:f9:c4:88:4b:46:
                    ac:71:9d:db:2a:bf:07:61:6b:64:86:49:8d:fa:0a:
                    a6:7d:1a:05:e2:e4:84:e1:cc:84:9e:27:9a:34:39:
                    25:55:57:1f:27:38:9a:d2:b3:48:2e:d1:a9:d9:df:
                    6d:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:8C:80:56:38:4F:8C:5F:F7:B1:22:99:C1:08:30:F9:48:67:06:81
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/56cc9209-d09e-343f-823c-ff1c674006b0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl

            X509v3 Authority Key Identifier:
                keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.102.3.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b5:1d:53:6b:d5:87:64:29:ad:23:c4:0a:30:7d:00:0e:de:42:
         2c:af:36:aa:f1:60:34:de:96:ae:cd:08:6b:47:30:05:78:ee:
         31:8e:ca:1f:64:db:08:4c:ad:d2:aa:ab:ad:08:00:1b:30:45:
         66:3f:a8:34:00:e6:d1:f2:e8:8c:e8:d6:0e:10:2e:ec:4d:ac:
         e6:8b:94:8a:49:28:9c:20:a7:c0:2a:ae:18:de:1c:1c:6a:3b:
         59:44:b8:bd:62:d4:a2:7a:e2:53:ac:5a:a1:ed:b8:1f:73:cc:
         8a:c9:27:00:0e:e5:be:39:5d:69:11:d4:05:25:83:33:63:a6:
         85:37:cd:39:29:5d:f9:69:36:70:a9:92:29:8b:f6:97:a1:ff:
         92:bc:44:ff:fe:3b:3b:f9:e0:2f:f0:9a:62:6f:ff:ec:2c:57:
         d9:50:c8:72:d4:78:8f:fb:dc:76:65:d8:8a:1d:ee:22:4e:a2:
         f2:21:64:a8:6d:5e:bf:d3:d6:fb:aa:ce:0b:57:3d:28:2f:10:
         d5:35:3b:73:e8:d9:bc:44:64:a5:28:71:c6:05:90:f4:6c:fc:
         0c:66:1e:4e:a8:df:75:db:17:16:09:13:66:be:f4:40:04:a9:
         e3:e0:5e:3b:d9:6d:61:9e:b1:c5:06:cb:80:7f:bf:9e:b7:b8:
         3c:34:45:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 17 08:42:08 2025 by rpki-client