Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fc9a95e-53c1-4e1e-9c7b-39f8f242418e/eae5264b-bfc1-335c-bf7a-3cd39f9d4fc9.roa
File:                     eae5264b-bfc1-335c-bf7a-3cd39f9d4fc9.roa (raw, json)
Hash identifier:          hg4oD8SVa1U8PgEtR4J5NgkNoE2lBSioOvhfRjlnPMQ=
Subject key identifier:   11:D2:44:24:81:28:0B:74:7D:B6:F9:B4:C9:CF:FF:35:46:DF:BD:75
Certificate issuer:       /CN=1fc9a95e-53c1-4e1e-9c7b-39f8f242418e
Certificate serial:       010D0C9F4328584AC5067E6C800D7D49AFE1F800
Authority key identifier: BF:B8:47:5A:5F:33:6D:B7:0B:DE:C4:4B:99:00:36:AC:67:40:D0:DE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fc9a95e-53c1-4e1e-9c7b-39f8f242418e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fc9a95e-53c1-4e1e-9c7b-39f8f242418e/eae5264b-bfc1-335c-bf7a-3cd39f9d4fc9.roa
Signing time:             Wed 06 Aug 2025 19:28:05 +0000
ROA not before:           Wed 06 Aug 2025 19:28:05 +0000
ROA not after:            Tue 04 Nov 2025 20:28:05 +0000
asID:                     13649
IP address blocks:        66.43.0.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fc9a95e-53c1-4e1e-9c7b-39f8f242418e/1fc9a95e-53c1-4e1e-9c7b-39f8f242418e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fc9a95e-53c1-4e1e-9c7b-39f8f242418e/1fc9a95e-53c1-4e1e-9c7b-39f8f242418e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fc9a95e-53c1-4e1e-9c7b-39f8f242418e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 22 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:c5:06:7e:6c:80:0d:7d:49:af:e1:f8:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1fc9a95e-53c1-4e1e-9c7b-39f8f242418e
        Validity
            Not Before: Aug  6 19:28:05 2025 GMT
            Not After : Nov  4 20:28:05 2025 GMT
        Subject: CN=8cc91775-1f4a-4a3a-982a-5c86d319f4b4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:0c:c8:70:bf:4e:d1:82:31:5a:77:6c:73:6a:
                    35:11:04:3e:e1:7d:f5:1e:9d:5d:39:a1:aa:cf:3f:
                    4b:03:ed:c5:97:78:db:30:d2:eb:a2:b4:03:72:a1:
                    15:80:10:ce:54:4b:b9:4a:ca:3f:87:0b:77:5e:b7:
                    3b:af:cf:ab:8b:fa:38:3f:e9:03:5f:59:1e:ca:64:
                    ba:78:30:99:f0:5f:03:09:6e:ad:06:24:3f:e8:ab:
                    aa:b6:4b:89:2e:eb:76:77:7c:aa:83:62:24:cf:de:
                    f7:53:a1:9b:99:5a:71:e3:89:00:c5:1f:54:1d:5a:
                    9b:bb:3d:70:d3:88:a7:bc:07:94:40:df:7d:7c:fe:
                    7a:0d:51:ca:37:2c:3a:3f:5c:86:ee:2c:3b:7f:9b:
                    ff:29:b9:6b:68:a8:5c:b3:a5:7f:80:c2:d2:0f:77:
                    54:c1:1e:82:ae:8e:63:43:63:6e:57:27:f4:bd:ca:
                    70:dd:28:4d:63:94:8a:c5:11:76:18:aa:a8:5f:0a:
                    f1:a5:5f:97:25:f0:b8:8c:9a:06:c2:62:30:6c:94:
                    3e:c2:cd:88:d6:f8:19:03:e0:49:be:3f:03:a2:2e:
                    42:09:7e:81:46:3d:1c:24:5b:36:73:45:74:10:06:
                    86:80:5f:99:8b:5e:e7:6b:b4:da:36:90:d6:28:05:
                    3c:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:D2:44:24:81:28:0B:74:7D:B6:F9:B4:C9:CF:FF:35:46:DF:BD:75
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fc9a95e-53c1-4e1e-9c7b-39f8f242418e/eae5264b-bfc1-335c-bf7a-3cd39f9d4fc9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fc9a95e-53c1-4e1e-9c7b-39f8f242418e/1fc9a95e-53c1-4e1e-9c7b-39f8f242418e.crl

            X509v3 Authority Key Identifier:
                keyid:BF:B8:47:5A:5F:33:6D:B7:0B:DE:C4:4B:99:00:36:AC:67:40:D0:DE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fc9a95e-53c1-4e1e-9c7b-39f8f242418e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.43.0.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3a:fe:25:31:d3:f0:07:3f:27:4d:e9:ad:5c:b8:54:21:93:5e:
         b7:f8:d3:12:95:77:24:01:0a:7d:e7:e4:9b:3d:75:d9:cc:e3:
         67:a1:b0:99:3c:42:1e:20:5b:e1:7f:ca:9a:2b:9d:31:cf:26:
         c4:4e:80:ad:fc:82:1a:da:4b:10:6c:7d:c8:ea:3f:73:b2:a4:
         69:e9:65:1b:80:a0:6c:98:8f:71:cf:53:2a:bd:fe:db:20:04:
         01:89:df:27:fb:0a:85:de:af:3a:92:bb:54:64:5e:63:1d:d7:
         31:62:ae:41:5e:62:0e:a7:98:a0:96:0d:66:06:26:7d:2b:4b:
         63:57:6b:50:5e:02:87:c3:07:08:a8:40:ad:5e:49:2a:91:09:
         6b:72:e8:d1:4d:af:ee:ed:15:5d:c2:12:9a:bb:cb:76:e1:11:
         2c:7f:f7:05:a7:92:43:4c:50:14:6d:22:aa:17:e7:da:76:bf:
         4a:c4:a0:6d:df:f0:cc:14:ca:70:43:5f:5a:0f:72:44:1d:28:
         af:8e:75:e7:f3:5d:c5:fb:52:33:d5:a0:dc:f4:06:2b:0c:cc:
         a9:66:ce:56:47:19:ef:dc:95:e2:4d:51:b4:d3:aa:62:66:d2:
         bf:bd:60:21:2e:c2:82:d8:f4:5a:d2:f9:a6:c0:2c:a6:98:de:
         4f:d8:30:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 21 03:50:50 2025 by rpki-client