Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5eb81838-6cf7-4c1f-bf73-eeec087e471a/43954f82-bdfd-3e6b-bcb1-09c60ee7a41e.roa
File:                     43954f82-bdfd-3e6b-bcb1-09c60ee7a41e.roa (raw, json)
Hash identifier:          mi/IwKi3yO7+mNcydWy2jDei+IjA39a24GLOq3Hy1x0=
Subject key identifier:   4E:E0:93:A3:D2:4E:88:DE:5D:6C:8E:04:9F:DE:18:B6:D9:8D:B3:D8
Certificate issuer:       /CN=5eb81838-6cf7-4c1f-bf73-eeec087e471a
Certificate serial:       010D0C9F4328584AF951443C3F9F3E068E3887A0
Authority key identifier: 5D:78:96:26:CA:98:F9:F4:59:0D:D1:D9:DA:BA:10:1C:3F:FE:B7:FB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5eb81838-6cf7-4c1f-bf73-eeec087e471a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5eb81838-6cf7-4c1f-bf73-eeec087e471a/43954f82-bdfd-3e6b-bcb1-09c60ee7a41e.roa
Signing time:             Mon 25 Aug 2025 13:00:39 +0000
ROA not before:           Mon 25 Aug 2025 13:00:39 +0000
ROA not after:            Sun 23 Nov 2025 14:00:39 +0000
asID:                     393227
IP address blocks:        66.85.81.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5eb81838-6cf7-4c1f-bf73-eeec087e471a/5eb81838-6cf7-4c1f-bf73-eeec087e471a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5eb81838-6cf7-4c1f-bf73-eeec087e471a/5eb81838-6cf7-4c1f-bf73-eeec087e471a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5eb81838-6cf7-4c1f-bf73-eeec087e471a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 21 Sep 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:f9:51:44:3c:3f:9f:3e:06:8e:38:87:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5eb81838-6cf7-4c1f-bf73-eeec087e471a
        Validity
            Not Before: Aug 25 13:00:39 2025 GMT
            Not After : Nov 23 14:00:39 2025 GMT
        Subject: CN=1a360da4-4f66-4b00-9f27-ee217ef3b8bf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:22:6f:08:68:50:e3:25:53:d7:44:41:28:83:
                    d2:1f:ac:15:17:db:8a:32:95:14:02:48:33:90:01:
                    dd:22:69:9e:64:ba:25:df:86:9b:75:7d:c9:6e:f2:
                    72:e1:ab:ae:63:95:09:ed:9f:fd:8f:4a:a7:69:d2:
                    d0:9e:c0:89:49:06:7a:d7:cb:35:dd:cf:84:90:3b:
                    72:91:1a:df:e5:bf:a6:6f:b9:41:23:03:6a:c2:ae:
                    5e:0f:0b:c3:38:3e:99:1f:38:55:c6:85:18:66:64:
                    20:39:e1:2f:21:59:ae:59:32:3c:81:cc:9f:3d:1d:
                    94:69:8d:76:fb:be:d5:d8:26:3b:fd:80:e7:be:e9:
                    46:b9:e5:32:4b:95:a7:ab:62:d1:5f:f0:b6:50:f6:
                    1c:6d:2e:5d:99:e1:b5:83:a4:3f:1e:8b:75:55:c7:
                    bb:4d:86:fd:50:ce:88:26:f3:b9:45:06:fc:d3:aa:
                    08:f5:0a:44:13:33:db:0d:4f:b7:8b:61:24:c9:c9:
                    26:49:a7:27:2d:75:e0:03:21:25:bd:b4:9c:d6:21:
                    91:6b:62:98:8c:c4:13:d0:4d:30:4c:ee:fc:c0:a1:
                    f7:62:f7:c9:eb:fd:0a:93:00:bd:5b:21:4c:cb:ab:
                    89:03:2e:12:6c:cf:87:ca:b4:39:37:24:ab:6e:00:
                    c2:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:E0:93:A3:D2:4E:88:DE:5D:6C:8E:04:9F:DE:18:B6:D9:8D:B3:D8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5eb81838-6cf7-4c1f-bf73-eeec087e471a/43954f82-bdfd-3e6b-bcb1-09c60ee7a41e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5eb81838-6cf7-4c1f-bf73-eeec087e471a/5eb81838-6cf7-4c1f-bf73-eeec087e471a.crl

            X509v3 Authority Key Identifier:
                keyid:5D:78:96:26:CA:98:F9:F4:59:0D:D1:D9:DA:BA:10:1C:3F:FE:B7:FB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5eb81838-6cf7-4c1f-bf73-eeec087e471a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.85.81.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         34:45:50:cb:6b:d8:0c:55:55:59:46:ea:29:23:9c:30:b4:af:
         7a:f6:4e:b4:e7:77:6a:4c:0f:ec:48:8d:b1:f6:d9:f7:5e:0e:
         2e:5a:5a:2f:68:6c:e5:23:56:ab:fc:f0:1c:5f:76:ec:a4:c8:
         46:03:ba:2b:58:95:5a:e5:03:ab:98:49:de:54:39:da:c5:d6:
         33:00:fc:62:22:9e:c2:fb:a6:a4:ba:e8:a2:56:8f:dc:13:87:
         74:1d:9c:7b:db:82:fb:75:0c:be:2b:99:c4:1e:c1:a9:ab:e4:
         88:27:91:f8:12:7c:d8:75:c3:75:92:ce:39:58:94:55:92:cb:
         48:96:94:cf:b4:46:04:94:ba:b6:2f:bc:32:97:bb:ef:21:3f:
         9c:be:59:f5:4e:89:f7:d0:8e:74:46:6e:96:99:84:d5:d6:03:
         1a:11:e6:65:f7:f9:0f:98:9f:c7:53:fd:33:45:eb:8c:36:4c:
         96:70:d9:63:d7:82:32:79:8e:fb:f4:97:dd:7c:1a:72:1e:e2:
         77:3b:21:97:8c:1d:98:a6:57:b2:9f:1e:76:63:24:2c:87:29:
         03:5a:fd:c0:7f:01:a3:d2:c9:bd:35:95:c4:1a:88:c1:22:22:
         56:65:a9:dd:74:0a:40:1c:3b:7f:00:47:0c:b9:82:41:fa:7f:
         bc:be:78:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 19 19:37:09 2025 by rpki-client