Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ce0acc85-4dc1-4ddc-8ebb-598f3cbc0efb/9c49d00c-cbbe-3c4e-834f-b93958dcee69.roa
File:                     9c49d00c-cbbe-3c4e-834f-b93958dcee69.roa (raw, json)
Hash identifier:          B2z2EmzoGmz0QbL/FvTUsjwMyM7uoR3QLQO3xuMsySg=
Subject key identifier:   E1:E2:74:2D:A7:FD:1B:C0:CA:FE:34:49:4A:EE:4E:45:13:02:71:7B
Certificate issuer:       /CN=ce0acc85-4dc1-4ddc-8ebb-598f3cbc0efb
Certificate serial:       010D0C9F4328584B6F074E55A5D6EAF300920700
Authority key identifier: 3E:74:CA:C3:2A:55:30:FC:12:F0:74:86:AC:0C:26:F3:75:48:5A:8D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ce0acc85-4dc1-4ddc-8ebb-598f3cbc0efb.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ce0acc85-4dc1-4ddc-8ebb-598f3cbc0efb/9c49d00c-cbbe-3c4e-834f-b93958dcee69.roa
Signing time:             Mon 06 Oct 2025 16:57:09 +0000
ROA not before:           Mon 06 Oct 2025 16:57:09 +0000
ROA not after:            Sun 04 Jan 2026 17:57:09 +0000
asID:                     32595
IP address blocks:        66.235.108.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ce0acc85-4dc1-4ddc-8ebb-598f3cbc0efb/ce0acc85-4dc1-4ddc-8ebb-598f3cbc0efb.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ce0acc85-4dc1-4ddc-8ebb-598f3cbc0efb/ce0acc85-4dc1-4ddc-8ebb-598f3cbc0efb.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ce0acc85-4dc1-4ddc-8ebb-598f3cbc0efb.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:6f:07:4e:55:a5:d6:ea:f3:00:92:07:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ce0acc85-4dc1-4ddc-8ebb-598f3cbc0efb
        Validity
            Not Before: Oct  6 16:57:09 2025 GMT
            Not After : Jan  4 17:57:09 2026 GMT
        Subject: CN=b9cb3a7d-f270-46e9-800b-bd67267cb1fc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:19:c6:f6:ff:14:90:c4:02:07:67:cb:0d:4a:
                    f8:c6:96:2c:15:88:9e:6e:bf:b3:54:5b:2f:ba:91:
                    e3:62:23:4d:24:1e:60:0a:03:41:10:be:05:8a:7b:
                    cb:4e:72:8b:24:5e:b4:92:8c:2c:f7:db:cf:97:d5:
                    ae:0e:59:9a:11:0e:f7:58:5b:71:c9:fa:7d:74:d1:
                    d3:e7:2f:2d:d3:df:78:4b:15:04:d6:a7:aa:39:e5:
                    cc:d0:fa:1d:2d:84:ea:f4:e4:c1:4a:9a:85:e8:e5:
                    fe:47:2a:b5:8a:2a:0c:3c:ac:c6:ea:ac:41:20:e1:
                    99:18:92:07:fa:28:32:b5:26:f9:cf:97:83:ae:56:
                    28:0d:94:ae:a8:07:69:7f:bc:31:e8:0b:9c:cc:cf:
                    b1:50:69:94:23:a5:64:32:c3:73:be:32:fb:a1:fe:
                    28:67:bb:1f:52:3f:ec:a9:b4:7a:5b:0b:ad:9b:ec:
                    5b:3d:e6:2f:6b:c0:ad:d1:ba:43:26:13:14:23:63:
                    66:f9:ab:1d:75:4f:64:2a:0f:f7:4b:a8:c8:ea:45:
                    40:6b:49:de:5e:e9:69:e5:c3:2d:42:d7:1f:85:f2:
                    23:a7:bd:f4:44:dc:bd:d5:49:53:1a:82:4e:1a:e1:
                    aa:d0:37:d1:aa:71:bb:f0:be:71:74:96:a4:d8:6a:
                    95:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:E2:74:2D:A7:FD:1B:C0:CA:FE:34:49:4A:EE:4E:45:13:02:71:7B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ce0acc85-4dc1-4ddc-8ebb-598f3cbc0efb/9c49d00c-cbbe-3c4e-834f-b93958dcee69.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ce0acc85-4dc1-4ddc-8ebb-598f3cbc0efb/ce0acc85-4dc1-4ddc-8ebb-598f3cbc0efb.crl

            X509v3 Authority Key Identifier:
                keyid:3E:74:CA:C3:2A:55:30:FC:12:F0:74:86:AC:0C:26:F3:75:48:5A:8D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ce0acc85-4dc1-4ddc-8ebb-598f3cbc0efb.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.235.108.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         09:f8:06:31:5b:e5:be:39:95:04:b7:ce:f0:87:e7:11:f9:aa:
         b3:b1:00:12:f0:ba:a2:49:64:1f:36:da:63:c0:14:50:e1:68:
         f1:17:86:46:6b:5a:1d:4f:ab:f0:0d:41:7f:02:f2:e6:8c:87:
         ad:83:09:0c:91:bc:13:5a:b5:68:87:a8:94:45:5e:d3:94:a1:
         04:e5:4a:82:ae:24:a2:bc:64:41:e8:4b:e5:b1:51:9c:e6:14:
         e5:4b:48:9a:17:bf:ed:ba:2f:2e:ee:32:c1:23:0c:f3:80:a3:
         38:df:00:1e:cb:f5:28:41:15:0e:8f:dc:3b:97:d6:20:22:7d:
         e2:4e:8c:0f:e8:16:58:0c:28:e1:50:7a:f3:69:12:71:0d:70:
         27:54:aa:5c:7d:80:64:d9:5d:d0:4b:89:bd:d9:0a:bd:66:b1:
         11:de:83:69:4e:c1:2b:9e:58:7b:0b:fd:e6:01:de:29:9e:8e:
         2f:92:1a:42:07:ad:df:8b:16:c1:eb:e0:6d:b9:72:85:0f:83:
         48:cb:04:af:2a:da:9a:1c:e6:fd:67:f6:a3:c2:5a:41:8d:7f:
         15:80:95:d1:5d:71:9d:c6:6a:e0:fc:af:4f:23:ba:24:69:a6:
         66:cf:ac:41:74:5d:65:4f:86:6d:43:a4:17:07:26:0a:de:aa:
         0d:1c:e8:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 22:12:42 2025 by rpki-client