Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2a29d871-a08a-4114-af86-3cc6d04de0e1/3fad941b-d30c-3ceb-9abe-73b65d3933b0.roa
File:                     3fad941b-d30c-3ceb-9abe-73b65d3933b0.roa (raw, json)
Hash identifier:          Ff4sVDOrFZ+xtV92AuvL1hkoUG58Km7vF5fyxu9Ln1s=
Subject key identifier:   BC:89:63:45:51:74:D5:BD:A8:BA:A3:97:3A:EF:A8:45:FC:28:EB:9D
Certificate issuer:       /CN=2a29d871-a08a-4114-af86-3cc6d04de0e1
Certificate serial:       010D0C9F4328584B6107951406E6614AB0943700
Authority key identifier: 36:A1:02:0F:7A:87:90:CE:CA:16:13:0F:0B:A6:AF:B8:47:96:F6:31
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2a29d871-a08a-4114-af86-3cc6d04de0e1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2a29d871-a08a-4114-af86-3cc6d04de0e1/3fad941b-d30c-3ceb-9abe-73b65d3933b0.roa
Signing time:             Wed 01 Oct 2025 16:36:23 +0000
ROA not before:           Wed 01 Oct 2025 16:36:23 +0000
ROA not after:            Tue 30 Dec 2025 17:36:23 +0000
asID:                     11850
IP address blocks:        66.181.192.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2a29d871-a08a-4114-af86-3cc6d04de0e1/2a29d871-a08a-4114-af86-3cc6d04de0e1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2a29d871-a08a-4114-af86-3cc6d04de0e1/2a29d871-a08a-4114-af86-3cc6d04de0e1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2a29d871-a08a-4114-af86-3cc6d04de0e1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 10 Oct 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:61:07:95:14:06:e6:61:4a:b0:94:37:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a29d871-a08a-4114-af86-3cc6d04de0e1
        Validity
            Not Before: Oct  1 16:36:23 2025 GMT
            Not After : Dec 30 17:36:23 2025 GMT
        Subject: CN=2da0b08e-035b-45cf-97bb-62e849f01bdc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:a3:b2:a1:25:28:5e:da:7e:a8:a4:75:07:60:
                    0c:3c:6a:64:4c:6c:ff:82:4a:c7:d2:ab:f1:84:e3:
                    03:a4:6f:04:bd:3b:6e:1a:ca:12:6c:b0:d9:8e:35:
                    55:cc:72:c1:af:e7:df:33:ed:62:c0:cf:b8:a8:c3:
                    92:95:5b:99:e2:6d:5e:a7:dc:ea:dd:0f:3f:fe:46:
                    a7:5e:30:63:41:e7:54:e7:c4:51:50:08:63:f3:86:
                    01:bd:83:7f:86:67:61:46:48:af:9e:ce:a1:da:72:
                    f2:df:62:f1:fb:e0:41:17:80:0e:41:b9:cc:b7:34:
                    72:bf:b6:53:8a:cb:42:c3:ac:29:8f:fd:82:a9:17:
                    90:07:04:5a:dc:7e:e8:d0:22:05:9c:9b:26:7c:28:
                    fe:ee:c9:66:1a:1e:d9:d9:40:f0:40:71:44:60:2b:
                    81:04:0b:da:93:31:69:13:70:54:1a:90:ef:d5:4c:
                    b0:8d:88:9f:41:7b:aa:f1:97:bb:80:1f:64:54:df:
                    26:f3:55:cc:29:b1:15:af:9e:87:62:00:10:41:7f:
                    fe:a5:ca:39:05:84:12:6a:cc:ce:8b:7e:78:81:30:
                    90:fa:66:ee:79:a0:b5:0d:5f:88:04:09:b9:af:f6:
                    8f:10:47:ca:60:7e:be:25:92:b2:44:e9:f7:f2:73:
                    a8:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:89:63:45:51:74:D5:BD:A8:BA:A3:97:3A:EF:A8:45:FC:28:EB:9D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2a29d871-a08a-4114-af86-3cc6d04de0e1/3fad941b-d30c-3ceb-9abe-73b65d3933b0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2a29d871-a08a-4114-af86-3cc6d04de0e1/2a29d871-a08a-4114-af86-3cc6d04de0e1.crl

            X509v3 Authority Key Identifier:
                keyid:36:A1:02:0F:7A:87:90:CE:CA:16:13:0F:0B:A6:AF:B8:47:96:F6:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2a29d871-a08a-4114-af86-3cc6d04de0e1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.181.192.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         29:74:22:75:db:1e:e6:ad:48:2e:d4:38:97:77:14:d1:7b:e2:
         5a:8f:5c:d3:8d:db:bc:0e:c3:43:9d:24:88:74:76:f5:1e:83:
         80:0f:81:cb:4d:9d:11:60:83:48:95:99:f0:f0:9f:ff:23:ff:
         6b:36:19:1e:88:04:5e:59:d7:5a:24:3c:8d:c3:00:ba:4c:c4:
         de:ec:ed:9d:c8:e2:00:3c:3b:c2:75:2e:91:be:38:b3:ab:5e:
         92:7d:69:4c:f4:dc:b5:00:5b:1f:67:52:68:db:24:7d:43:ef:
         8c:c5:9b:25:4d:4d:89:a8:80:cd:42:a8:d0:5c:64:8d:e6:87:
         ed:29:ec:7b:ba:f2:c2:89:64:e2:1b:15:64:44:92:bb:bf:50:
         41:34:b9:86:f6:db:eb:c9:fe:b7:f3:de:ab:4e:99:29:ed:1f:
         86:97:4a:e3:0d:e2:cb:e7:9c:f0:d5:7a:5e:10:c4:e5:17:49:
         56:b9:a5:39:c9:a7:91:74:ee:50:05:91:52:0c:0b:19:fc:98:
         dc:3b:0e:5a:cc:f1:54:85:cd:f9:95:61:49:ca:83:54:db:cc:
         06:7d:5d:1e:b0:51:6f:f7:af:13:e5:e5:eb:47:3f:21:cc:83:
         c8:2a:29:52:3e:b7:2b:5e:47:45:14:24:2b:a0:b3:3e:6d:6b:
         b3:0d:a1:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 8 20:57:30 2025 by rpki-client