Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/66c7e53a-035c-39e0-ad38-6f9f239a4d9b.roa
File:                     66c7e53a-035c-39e0-ad38-6f9f239a4d9b.roa (raw, json)
Hash identifier:          jo6IbGc0oYxfdfKO5+4cqY+gSmDPVcQVjrDLxx62XrA=
Subject key identifier:   7C:32:96:B0:95:86:37:42:BE:9D:24:B3:17:A9:54:5E:A3:B9:88:14
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584B95A9B42F449DA721375DC1D0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/66c7e53a-035c-39e0-ad38-6f9f239a4d9b.roa
Signing time:             Mon 20 Oct 2025 13:00:38 +0000
ROA not before:           Mon 20 Oct 2025 13:00:38 +0000
ROA not after:            Sun 18 Jan 2026 14:00:38 +0000
asID:                     7015
IP address blocks:        66.30.160.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Oct 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:95:a9:b4:2f:44:9d:a7:21:37:5d:c1:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Oct 20 13:00:38 2025 GMT
            Not After : Jan 18 14:00:38 2026 GMT
        Subject: CN=aed4673c-c03f-4c61-a110-4afb0923403a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:eb:1b:9b:40:9d:5c:da:02:96:70:e4:9b:6b:
                    97:8e:a8:7f:01:b7:05:e5:46:24:77:1b:87:4b:9d:
                    30:04:3e:39:47:cf:64:91:fb:b6:bf:ee:ae:1f:eb:
                    a1:fc:13:7d:c9:50:94:a6:d2:09:c9:c9:da:8e:42:
                    5f:57:2a:b4:81:7d:16:c0:17:68:07:c5:b4:ae:f0:
                    60:5b:a2:40:be:35:07:17:bf:f3:2e:b2:f3:47:82:
                    85:62:28:92:dd:e1:23:8b:43:42:3f:2f:cd:4f:b7:
                    6a:8a:ce:da:56:7b:a6:cc:67:4b:c8:61:1c:3d:5b:
                    67:a5:40:6c:d7:bb:14:2f:dc:b2:77:2f:3d:84:91:
                    3a:8e:50:1f:30:6c:1f:f6:55:05:52:31:63:96:b8:
                    d8:6e:46:f8:4a:04:f4:3c:c7:f7:8b:9a:fb:00:b5:
                    30:8f:86:7d:99:47:00:f0:93:77:11:7e:8f:2a:cd:
                    96:4e:84:a4:91:e5:80:90:38:f1:20:84:44:f2:d7:
                    e2:5d:b5:00:13:4e:04:9a:e8:bb:4f:b4:69:6d:b3:
                    29:aa:b7:38:bd:21:e6:d1:97:ed:6b:ea:f7:9d:b5:
                    ec:da:52:3d:bd:40:4b:06:c3:a2:47:c7:12:70:a3:
                    8e:36:2d:0d:6d:0d:63:68:e7:95:ff:8a:fd:52:cd:
                    14:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:32:96:B0:95:86:37:42:BE:9D:24:B3:17:A9:54:5E:A3:B9:88:14
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/66c7e53a-035c-39e0-ad38-6f9f239a4d9b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.30.160.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         26:2d:cb:02:13:18:56:24:db:ac:c4:f3:c3:6b:78:bc:88:87:
         f1:00:42:39:f4:35:26:4e:aa:40:cf:dd:51:d9:d5:34:73:5c:
         ea:88:03:f4:7b:0b:5a:65:7e:41:7b:82:81:ac:f6:28:32:f4:
         49:c5:96:52:05:20:47:da:4b:be:5b:a0:b6:5b:7e:f5:29:02:
         40:70:03:50:6c:ff:12:75:37:81:7e:5c:5c:cb:8d:4a:3a:92:
         3b:0e:72:5c:91:51:e6:29:0f:f7:52:46:5e:66:a9:ad:d4:0c:
         a6:b8:05:f8:f5:3f:36:65:8f:51:d5:8c:c4:bf:56:03:22:5f:
         90:45:ba:37:a5:0c:1b:24:e2:89:7a:13:5a:18:be:49:25:9c:
         9a:01:48:18:33:6d:21:30:b8:1f:df:43:dd:09:1b:3e:40:0a:
         3f:07:04:eb:9d:df:04:3e:bf:f7:ad:02:2f:fc:d7:72:7b:98:
         c6:22:c3:83:d3:ce:5e:90:73:38:58:ad:33:5f:23:2c:ec:88:
         73:e4:fc:5f:b8:cf:15:8f:aa:74:32:f3:74:fe:38:63:ca:54:
         93:60:24:86:f4:c6:ce:bf:95:5c:61:7d:b6:3d:d8:37:6b:bc:
         47:d7:f0:48:87:00:fb:74:93:28:c3:11:2a:3f:8c:e7:75:96:
         66:61:39:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 19:23:17 2025 by rpki-client