Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0d683a54-f8a5-4d4b-8878-8a9ee78ece08/484e3031-ebe0-3e55-a672-ef11f402ca1f.roa
File:                     484e3031-ebe0-3e55-a672-ef11f402ca1f.roa (raw, json)
Hash identifier:          dxXA3h4OyMiX/vdYbMlRWx/MEOkb6hu5FYIltsR5AJw=
Subject key identifier:   15:E0:74:24:B3:81:80:31:B2:8A:06:4F:4B:8B:B8:DA:99:6F:B7:38
Certificate issuer:       /CN=0d683a54-f8a5-4d4b-8878-8a9ee78ece08
Certificate serial:       010D0C9F4328584B21CC31C64C265F5926202780
Authority key identifier: 62:14:09:65:E5:B8:AB:6A:B6:A3:9B:06:70:19:CA:74:25:93:8E:AB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0d683a54-f8a5-4d4b-8878-8a9ee78ece08.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0d683a54-f8a5-4d4b-8878-8a9ee78ece08/484e3031-ebe0-3e55-a672-ef11f402ca1f.roa
Signing time:             Tue 09 Sep 2025 01:00:33 +0000
ROA not before:           Tue 09 Sep 2025 01:00:33 +0000
ROA not after:            Mon 08 Dec 2025 02:00:33 +0000
asID:                     26703
IP address blocks:        66.102.220.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0d683a54-f8a5-4d4b-8878-8a9ee78ece08/0d683a54-f8a5-4d4b-8878-8a9ee78ece08.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0d683a54-f8a5-4d4b-8878-8a9ee78ece08/0d683a54-f8a5-4d4b-8878-8a9ee78ece08.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0d683a54-f8a5-4d4b-8878-8a9ee78ece08.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 20 Sep 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:21:cc:31:c6:4c:26:5f:59:26:20:27:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0d683a54-f8a5-4d4b-8878-8a9ee78ece08
        Validity
            Not Before: Sep  9 01:00:33 2025 GMT
            Not After : Dec  8 02:00:33 2025 GMT
        Subject: CN=d88bc692-391f-46d3-bc30-d31c346c4539
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:6c:9b:e9:c1:87:32:2a:ee:d6:62:9a:ad:a9:
                    ce:8e:f3:d9:59:0d:3f:fa:55:3a:99:fa:e1:a4:a3:
                    19:66:b7:bb:73:df:fd:d9:37:bd:d1:78:9b:68:78:
                    d3:f4:39:f6:e0:8f:75:f0:f2:4b:1b:89:eb:f4:c1:
                    f6:e7:4a:50:55:ed:3c:31:a4:49:95:1b:44:2a:17:
                    ac:44:0a:b4:66:36:ab:22:dc:9e:2e:73:01:01:d2:
                    12:43:69:90:5d:5e:1b:54:fe:c3:fe:6f:98:a6:f2:
                    7c:5a:97:71:bb:ef:4b:e6:5b:09:c3:64:c5:b7:49:
                    d2:d6:76:c9:2f:23:72:6c:6a:54:27:ff:41:bc:74:
                    6d:3d:cc:2e:dd:41:39:e5:e2:58:aa:5b:80:7e:cc:
                    85:3e:41:b9:5a:31:73:60:c7:d0:a0:97:9b:08:9f:
                    6c:4c:6a:50:1f:1a:35:db:ef:a3:8c:9b:c4:f3:cb:
                    25:62:91:40:42:ae:09:89:55:98:dc:20:77:cf:19:
                    b5:67:41:f1:3a:be:9b:91:6d:2a:26:f9:e5:11:76:
                    3c:b3:af:02:b0:15:f0:57:c3:2e:6b:7f:c5:56:e5:
                    bd:48:49:00:a7:01:5a:0b:52:89:e7:f3:69:65:62:
                    24:8d:28:d6:0b:4b:08:b1:cc:06:19:6c:ca:70:30:
                    5b:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:E0:74:24:B3:81:80:31:B2:8A:06:4F:4B:8B:B8:DA:99:6F:B7:38
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0d683a54-f8a5-4d4b-8878-8a9ee78ece08/484e3031-ebe0-3e55-a672-ef11f402ca1f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0d683a54-f8a5-4d4b-8878-8a9ee78ece08/0d683a54-f8a5-4d4b-8878-8a9ee78ece08.crl

            X509v3 Authority Key Identifier:
                keyid:62:14:09:65:E5:B8:AB:6A:B6:A3:9B:06:70:19:CA:74:25:93:8E:AB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0d683a54-f8a5-4d4b-8878-8a9ee78ece08.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.102.220.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         47:21:4d:82:0d:a7:5d:66:74:2e:24:11:48:1f:13:29:96:1d:
         33:84:d7:35:e8:e0:b5:94:8a:aa:d8:7c:5c:df:fa:29:93:e6:
         a0:bc:77:ad:86:b5:85:f1:07:96:85:62:c1:22:0e:4f:94:50:
         38:60:e2:7e:94:1e:ea:d5:bb:0a:fc:48:37:ae:2f:46:3a:dc:
         eb:50:e6:33:3a:6b:0b:f9:75:92:af:ee:7b:cb:62:f1:9b:00:
         1e:ba:fe:26:3f:04:b5:11:f0:f3:b4:7f:e1:4b:55:61:0c:f8:
         e2:f2:f1:81:ac:21:dd:6f:4a:0e:12:d0:e2:4c:13:2b:a0:17:
         00:2d:90:8d:39:23:01:f0:fd:06:86:b4:6c:fe:ac:2f:93:80:
         a1:80:39:5a:99:ca:a7:2e:3e:38:5b:ed:80:74:f0:4c:3d:93:
         e1:15:bf:cf:40:70:26:e5:d5:d2:9b:e5:ae:f9:a2:4b:86:77:
         4d:e5:16:89:ef:1f:37:b1:79:10:7a:3d:0c:73:f2:7a:77:29:
         81:0d:99:47:56:00:89:31:2a:97:fd:74:c4:7a:5a:3e:8f:a7:
         31:5a:68:00:27:6f:45:a1:39:ba:52:8e:6f:7d:1a:86:d0:b5:
         b3:6e:39:02:0f:23:fc:41:3b:3e:d0:08:c2:1f:fe:d8:60:41:
         76:f0:0b:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 19 13:03:36 2025 by rpki-client