Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e7ec087a-afbe-4e15-92d3-ababccc0bbe0/ab9e7db4-8e02-3c06-aaab-c4aebece6929.roa
File:                     ab9e7db4-8e02-3c06-aaab-c4aebece6929.roa (raw, json)
Hash identifier:          BAQrfBWJ4hulxY387V3m3r4+KEnnoRVbYYVofX0BnR0=
Subject key identifier:   3F:7D:70:8C:FD:F2:E8:97:6D:06:0F:5A:3B:88:8C:01:40:25:CE:62
Certificate issuer:       /CN=e7ec087a-afbe-4e15-92d3-ababccc0bbe0
Certificate serial:       010D0C9F4328584B1C372B3AFE4888A1559EB1A0
Authority key identifier: F7:09:2F:B9:C4:2D:7E:01:35:91:1E:A9:DD:ED:D5:EB:B6:9B:82:62
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e7ec087a-afbe-4e15-92d3-ababccc0bbe0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e7ec087a-afbe-4e15-92d3-ababccc0bbe0/ab9e7db4-8e02-3c06-aaab-c4aebece6929.roa
Signing time:             Sun 07 Sep 2025 01:00:33 +0000
ROA not before:           Sun 07 Sep 2025 01:00:33 +0000
ROA not after:            Sat 06 Dec 2025 02:00:33 +0000
asID:                     32688
IP address blocks:        66.6.195.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e7ec087a-afbe-4e15-92d3-ababccc0bbe0/e7ec087a-afbe-4e15-92d3-ababccc0bbe0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e7ec087a-afbe-4e15-92d3-ababccc0bbe0/e7ec087a-afbe-4e15-92d3-ababccc0bbe0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e7ec087a-afbe-4e15-92d3-ababccc0bbe0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:1c:37:2b:3a:fe:48:88:a1:55:9e:b1:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e7ec087a-afbe-4e15-92d3-ababccc0bbe0
        Validity
            Not Before: Sep  7 01:00:33 2025 GMT
            Not After : Dec  6 02:00:33 2025 GMT
        Subject: CN=89dc8e95-93a8-4320-bc11-a7617fb17ac6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:61:21:04:05:92:c5:29:bd:60:15:e6:52:f7:
                    c6:f8:8c:7e:4d:ae:95:72:7b:98:40:ad:a7:d1:13:
                    3c:b9:1a:85:1c:8a:64:90:bd:a7:ea:a5:8c:80:95:
                    8a:67:eb:72:e4:a5:d6:b0:38:b3:d4:a6:3b:ef:bf:
                    63:0b:bd:15:ae:91:ac:bc:7f:18:a9:d0:69:ed:1b:
                    2e:2c:4f:b8:fd:0a:06:50:a4:9d:f8:5b:36:f5:52:
                    b5:14:8c:03:04:fa:34:1e:27:14:10:7b:19:dc:64:
                    f6:9f:03:7b:31:82:d2:29:d5:14:43:9c:eb:7d:09:
                    d9:54:4b:26:9f:79:22:ef:2e:c7:b3:3b:55:d5:6c:
                    6d:49:47:18:53:f7:b8:3b:49:d5:02:42:2c:d6:b4:
                    4f:48:73:1e:74:16:4d:93:e0:b5:08:b5:34:7e:a5:
                    ae:1f:3d:a3:2f:71:e6:fa:d6:b9:b0:5a:d2:b3:72:
                    ca:b5:d1:68:a5:60:11:d5:45:a4:ed:58:a3:f1:21:
                    e4:3e:64:e5:26:3a:df:e2:4b:5e:20:b1:e6:99:b3:
                    a7:d4:47:79:a0:38:bc:81:c7:3b:53:b0:8f:d2:c4:
                    69:af:9c:08:c0:25:31:72:9f:d7:fc:7a:67:d0:a2:
                    54:55:09:6f:6b:81:0b:9c:51:a8:46:64:67:4f:ae:
                    d7:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:7D:70:8C:FD:F2:E8:97:6D:06:0F:5A:3B:88:8C:01:40:25:CE:62
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e7ec087a-afbe-4e15-92d3-ababccc0bbe0/ab9e7db4-8e02-3c06-aaab-c4aebece6929.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e7ec087a-afbe-4e15-92d3-ababccc0bbe0/e7ec087a-afbe-4e15-92d3-ababccc0bbe0.crl

            X509v3 Authority Key Identifier:
                keyid:F7:09:2F:B9:C4:2D:7E:01:35:91:1E:A9:DD:ED:D5:EB:B6:9B:82:62

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e7ec087a-afbe-4e15-92d3-ababccc0bbe0.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.6.195.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         24:f3:46:fb:e9:17:9e:57:64:ab:03:88:6c:34:8d:c0:8b:b4:
         f1:61:f3:b5:7b:6f:c8:4c:f6:54:ae:00:bf:c4:dd:bc:dd:a7:
         5f:45:27:f4:a2:97:dc:8e:b6:ff:6b:97:2e:5b:0f:a7:7f:7d:
         eb:db:cb:57:9f:08:7b:9f:93:77:76:7e:71:e3:15:6c:60:24:
         4c:51:7d:81:cd:96:59:b0:5a:c0:b3:2c:20:6f:7c:6f:56:82:
         06:d3:30:63:f6:a6:5f:00:82:48:5f:82:be:bc:99:12:6c:81:
         9c:d6:7f:9f:d0:04:11:fb:7d:73:8b:bf:95:f5:8a:61:58:f4:
         9c:25:54:a9:06:dc:e8:04:53:a8:de:96:8b:86:5a:9f:e0:50:
         ad:86:32:3c:ea:cd:e6:76:b3:f7:9f:69:5e:41:15:8a:07:bd:
         23:99:66:6f:59:43:9d:ae:0a:ec:dc:1c:cb:00:3f:1b:88:7d:
         b0:a9:bc:dd:e0:78:7d:c5:f4:4d:76:5c:4e:d3:36:33:b9:2f:
         a7:60:ba:28:12:49:06:1b:06:a1:e7:c2:5a:94:69:57:e8:09:
         60:73:06:ec:7b:a5:e2:a0:36:8e:4d:1b:ee:d4:c3:72:e1:0a:
         d9:ee:a1:05:66:e3:fd:56:8c:1d:86:b7:02:1b:6e:38:b4:02:
         5f:b6:d3:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 22 15:39:41 2025 by rpki-client