Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/cf562e31-f126-34a5-8ff4-6db7c911d9f2.roa
File:                     cf562e31-f126-34a5-8ff4-6db7c911d9f2.roa (raw, json)
Hash identifier:          Z7FHXv/vrMqpC5KYsoCXPB1IG74CTjLouxUBr7Uw6ZY=
Subject key identifier:   6B:6C:48:17:73:2C:C4:76:05:BD:54:FA:4C:AC:60:ED:3F:C1:C2:46
Certificate issuer:       /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial:       010D0C9F4328584B679778C791557817A697F600
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/cf562e31-f126-34a5-8ff4-6db7c911d9f2.roa
Signing time:             Sat 04 Oct 2025 01:00:33 +0000
ROA not before:           Sat 04 Oct 2025 01:00:33 +0000
ROA not after:            Fri 02 Jan 2026 02:00:33 +0000
asID:                     15169
IP address blocks:        66.249.64.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Oct 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:67:97:78:c7:91:55:78:17:a6:97:f6:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
        Validity
            Not Before: Oct  4 01:00:33 2025 GMT
            Not After : Jan  2 02:00:33 2026 GMT
        Subject: CN=6a9c6766-f04a-4e11-b260-1c7473883e5b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:38:da:6c:9b:d2:6b:2d:ba:ad:f7:c8:74:48:
                    02:b0:45:76:72:ee:97:3a:1f:1f:92:a2:a7:3a:42:
                    05:b9:42:2b:27:4e:b9:64:5d:6d:54:e6:a7:c5:29:
                    cb:dc:76:04:1c:d8:92:a2:18:2c:b7:e1:d4:4f:28:
                    63:d2:d4:08:b2:50:e9:59:9b:c7:51:32:f0:ea:f0:
                    7e:63:3e:45:0c:e9:2d:3d:21:ff:22:9e:e5:1f:7d:
                    e3:06:f5:3f:86:16:af:7c:16:ea:6b:7f:4b:c4:cf:
                    97:84:d3:54:0e:57:09:8a:45:62:11:4e:9e:fb:80:
                    38:8b:f7:34:ad:f3:a8:15:93:2d:e4:45:d6:fa:b4:
                    1d:ef:b5:65:32:9e:ee:9e:f8:d3:b2:93:15:bc:00:
                    75:f9:24:bd:1f:66:c2:f2:91:30:c0:d3:d7:4c:23:
                    2f:3f:3b:3d:8b:74:31:61:8e:80:c7:bc:45:b7:e2:
                    2d:95:0d:8c:84:bb:11:41:31:42:2f:c7:cb:aa:c3:
                    f5:ae:74:ba:ca:40:41:ef:82:78:34:72:1a:ce:45:
                    d0:5f:f4:d0:e6:16:33:81:48:d6:d4:8e:41:17:46:
                    ad:9c:9b:ff:04:86:13:d3:a3:ae:d8:34:82:26:80:
                    ed:a2:90:ca:2f:1a:70:f3:b4:8d:9c:d8:60:1c:33:
                    01:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:6C:48:17:73:2C:C4:76:05:BD:54:FA:4C:AC:60:ED:3F:C1:C2:46
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/cf562e31-f126-34a5-8ff4-6db7c911d9f2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl

            X509v3 Authority Key Identifier:
                keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.249.64.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         78:3f:42:de:a0:5d:1d:d9:25:04:b7:53:83:00:67:9e:d9:a0:
         74:b3:70:80:0e:6a:01:f7:93:ae:b6:08:a5:ae:c9:3f:41:25:
         b3:d0:d2:e5:70:be:c4:c2:b8:85:e5:bc:60:e2:68:c5:21:fc:
         01:91:82:77:42:f9:c6:16:8d:2a:40:73:ac:f3:18:88:aa:94:
         ef:9d:93:9d:63:01:ed:00:a9:54:f5:99:ba:46:28:30:db:39:
         6b:f7:99:d4:a6:51:2e:2f:ef:1b:e0:f7:bf:4f:72:ee:4e:56:
         a5:91:a9:4d:df:0f:9a:d7:d7:3d:1b:e2:a8:b0:cf:b0:4d:8e:
         60:6d:be:d8:f7:d6:b1:98:c7:f1:91:9d:4e:e6:0d:5a:35:4f:
         85:8b:f1:0c:07:80:13:55:03:36:98:50:27:27:04:3f:a9:4b:
         4b:c7:75:4a:1b:25:54:d5:8e:06:df:61:fc:30:43:50:f8:a7:
         d0:70:ca:e0:f2:6a:4a:d3:6a:89:c6:12:56:28:f0:b4:fe:14:
         db:de:c8:b0:01:81:4e:a8:6f:7a:cd:ce:88:90:8f:2a:68:fa:
         9a:b5:ff:b0:5d:53:0e:6e:1e:94:03:fb:02:dd:f8:92:f9:f3:
         5e:49:52:ab:77:de:55:95:15:d3:bc:d8:5f:77:79:9d:ed:51:
         51:39:27:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 17 08:44:56 2025 by rpki-client