Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/f5903ded-0596-4674-94c8-856dc82e8cbf/86bf25bf-90f6-30e8-b6e1-f6e6f4dea33b.roa
File:                     86bf25bf-90f6-30e8-b6e1-f6e6f4dea33b.roa (raw, json)
Hash identifier:          teLlcnkXWOd8eIBzBpvXB9rW9eYr92cyaN0Y/Bd342Q=
Subject key identifier:   BA:53:2A:F2:84:63:C4:31:21:3F:5C:44:38:AF:FA:8B:D1:D1:68:82
Certificate issuer:       /CN=f5903ded-0596-4674-94c8-856dc82e8cbf
Certificate serial:       010D0C9F4328584B69009EC6EF79FD968251C890
Authority key identifier: 4D:B7:BF:96:97:9B:9D:62:73:B1:CC:01:5F:FE:4A:04:C5:4B:21:8A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/f5903ded-0596-4674-94c8-856dc82e8cbf.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/f5903ded-0596-4674-94c8-856dc82e8cbf/86bf25bf-90f6-30e8-b6e1-f6e6f4dea33b.roa
Signing time:             Sat 04 Oct 2025 13:08:50 +0000
ROA not before:           Sat 04 Oct 2025 13:08:50 +0000
ROA not after:            Fri 02 Jan 2026 14:08:50 +0000
asID:                     18692
IP address blocks:        66.119.126.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/f5903ded-0596-4674-94c8-856dc82e8cbf/f5903ded-0596-4674-94c8-856dc82e8cbf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/f5903ded-0596-4674-94c8-856dc82e8cbf/f5903ded-0596-4674-94c8-856dc82e8cbf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/f5903ded-0596-4674-94c8-856dc82e8cbf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 Oct 2025 09:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:69:00:9e:c6:ef:79:fd:96:82:51:c8:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f5903ded-0596-4674-94c8-856dc82e8cbf
        Validity
            Not Before: Oct  4 13:08:50 2025 GMT
            Not After : Jan  2 14:08:50 2026 GMT
        Subject: CN=85f2fe40-74a8-4992-89ca-b964ff590614
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:44:25:27:aa:ac:c7:19:c7:6f:d8:8a:1e:04:
                    73:5f:7d:27:ab:1b:fa:1e:a2:87:0e:57:da:25:2a:
                    67:0d:b2:f3:df:b2:f9:ff:c9:44:d9:9f:43:4e:23:
                    06:96:29:2b:b1:0d:67:a7:0b:dd:f8:fa:f3:c7:37:
                    aa:28:3b:fa:d5:85:24:8f:e5:54:c8:d6:6d:3f:f2:
                    7e:63:61:a3:a1:3e:71:5b:4c:19:f1:55:73:6e:58:
                    71:b1:8f:ab:46:b8:d2:86:d4:ea:81:81:60:48:db:
                    81:7e:8e:f0:91:9b:12:57:62:d3:64:4c:be:2a:1d:
                    c2:19:f2:c0:a3:01:a9:6c:6d:79:53:2b:88:69:5d:
                    38:51:b3:08:2e:3e:c0:53:8a:dd:22:2b:7d:ed:68:
                    ce:48:bc:e5:4d:be:98:6c:9c:14:47:12:52:67:33:
                    41:c0:bf:01:14:96:cd:be:44:89:72:1b:d8:76:ac:
                    ac:61:56:29:58:2f:c7:38:f1:e1:24:d5:68:09:cd:
                    dc:f3:c4:24:77:99:94:ff:75:46:88:b0:4e:c1:00:
                    85:73:fb:77:43:ef:06:07:eb:be:f9:43:b2:85:86:
                    3e:d0:36:ed:dd:f0:55:06:10:1f:fa:82:8d:52:19:
                    64:3f:ab:7e:a8:5d:0d:d5:b7:01:d5:0e:70:f7:3a:
                    f0:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:53:2A:F2:84:63:C4:31:21:3F:5C:44:38:AF:FA:8B:D1:D1:68:82
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/f5903ded-0596-4674-94c8-856dc82e8cbf/86bf25bf-90f6-30e8-b6e1-f6e6f4dea33b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/f5903ded-0596-4674-94c8-856dc82e8cbf/f5903ded-0596-4674-94c8-856dc82e8cbf.crl

            X509v3 Authority Key Identifier:
                keyid:4D:B7:BF:96:97:9B:9D:62:73:B1:CC:01:5F:FE:4A:04:C5:4B:21:8A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/f5903ded-0596-4674-94c8-856dc82e8cbf.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.119.126.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         48:03:d0:94:b7:34:5d:e9:61:c7:8c:85:3f:55:c2:81:8e:2b:
         ec:f0:11:63:25:21:08:6c:9b:07:d3:4b:87:43:58:4d:41:88:
         6e:e3:7a:3b:41:da:c9:25:b1:4f:35:fa:76:ff:32:63:bc:a9:
         a6:0f:b3:70:cf:58:d8:0f:b6:21:f0:d5:15:01:04:43:18:f0:
         53:7f:7a:7a:f8:29:18:e1:eb:a7:c5:43:67:0a:bc:eb:3e:69:
         57:64:84:17:10:4c:b7:bd:7e:79:e5:1c:8f:8f:8c:bd:2b:ca:
         69:da:16:ba:0e:80:22:62:2f:97:eb:88:c4:1a:17:7b:bc:4a:
         3b:6e:f3:ef:31:ae:62:59:f5:20:5c:d4:81:75:76:20:22:c6:
         74:c8:30:c3:3c:d6:7a:f1:98:a3:1a:dc:72:00:2b:b1:80:14:
         09:ea:5d:ce:6d:a6:31:15:e0:34:d0:ef:20:34:d7:e3:e5:5d:
         f8:95:69:62:5a:a5:29:fc:73:fb:1f:14:a7:bb:5f:6c:06:2a:
         f6:8b:5d:d2:bd:60:c9:ed:23:e4:d4:b1:b1:66:ce:5d:51:9f:
         54:15:47:20:15:47:8e:79:63:ad:3a:34:5b:88:f7:6c:00:dc:
         65:60:fc:c6:5c:a1:40:0f:a6:ed:b3:e2:e1:ee:58:7b:5a:34:
         2d:2e:bc:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 8 22:55:39 2025 by rpki-client