Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/41415190-afe9-4f90-902f-9102f69180fb/cb4f080b-8492-382c-a6f0-31da9b024c67.roa
File:                     cb4f080b-8492-382c-a6f0-31da9b024c67.roa (raw, json)
Hash identifier:          vRrJN5pB8PUrI7emY3J3DqD/vU189NxA8O4KUQFCT+Q=
Subject key identifier:   A1:7B:33:C1:CF:65:89:A6:E9:F7:87:09:A0:9B:45:C0:14:5B:66:2D
Certificate issuer:       /CN=41415190-afe9-4f90-902f-9102f69180fb
Certificate serial:       010D0C9F4328584B0E41495EB3A89EC8C17ED780
Authority key identifier: 9D:32:13:D8:0E:43:8D:3C:78:6F:3D:1C:D7:25:FA:9C:22:59:69:FA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/41415190-afe9-4f90-902f-9102f69180fb.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/41415190-afe9-4f90-902f-9102f69180fb/cb4f080b-8492-382c-a6f0-31da9b024c67.roa
Signing time:             Tue 02 Sep 2025 01:00:32 +0000
ROA not before:           Tue 02 Sep 2025 01:00:32 +0000
ROA not after:            Mon 01 Dec 2025 02:00:32 +0000
asID:                     968
IP address blocks:        66.248.235.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/41415190-afe9-4f90-902f-9102f69180fb/41415190-afe9-4f90-902f-9102f69180fb.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/41415190-afe9-4f90-902f-9102f69180fb/41415190-afe9-4f90-902f-9102f69180fb.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/41415190-afe9-4f90-902f-9102f69180fb.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 Oct 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:0e:41:49:5e:b3:a8:9e:c8:c1:7e:d7:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=41415190-afe9-4f90-902f-9102f69180fb
        Validity
            Not Before: Sep  2 01:00:32 2025 GMT
            Not After : Dec  1 02:00:32 2025 GMT
        Subject: CN=979b5dab-6ec1-47fb-b4bc-e77d68045ef1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:46:97:5a:35:bf:85:95:ac:9d:87:40:a2:f1:
                    53:e2:e1:b2:6b:97:65:e1:90:d5:5e:5d:6d:0d:5b:
                    02:ed:2a:0c:03:f6:86:17:d0:3d:e2:03:f7:f0:ee:
                    61:cd:88:f0:9e:ef:86:47:cf:08:ac:97:9f:62:ac:
                    f3:d8:89:ff:1b:8a:c0:1c:bb:4b:af:66:7c:29:8b:
                    15:b1:c0:24:a3:fa:60:d2:3e:5a:85:8c:f3:3c:d4:
                    05:ba:0e:70:f4:c3:fc:91:72:e4:ac:ca:3e:27:1a:
                    36:47:fe:6a:91:12:1a:b8:3c:a2:69:6c:5b:5d:76:
                    32:3a:2c:0a:40:21:77:a8:d1:9a:a7:76:79:96:64:
                    12:1e:4b:42:33:1b:77:49:88:27:4d:7b:d6:a0:45:
                    e8:98:cc:a9:8f:44:7a:87:4d:84:da:c8:86:e6:3f:
                    0c:4c:ab:b8:bf:5e:b5:d5:a4:c9:35:03:66:25:dd:
                    d1:eb:de:c8:38:6d:34:4c:34:13:a7:f0:06:ef:7d:
                    d7:76:3b:4c:b6:d5:85:7d:b4:98:d4:fd:8d:79:37:
                    70:8f:54:1a:6a:22:87:42:3a:98:9f:8d:7c:55:d5:
                    7f:f2:7a:9f:27:11:c0:d4:f6:b6:14:3f:c2:49:0d:
                    e6:0e:6e:20:fe:fb:c2:76:45:ca:73:45:da:73:65:
                    fc:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:7B:33:C1:CF:65:89:A6:E9:F7:87:09:A0:9B:45:C0:14:5B:66:2D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/41415190-afe9-4f90-902f-9102f69180fb/cb4f080b-8492-382c-a6f0-31da9b024c67.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/41415190-afe9-4f90-902f-9102f69180fb/41415190-afe9-4f90-902f-9102f69180fb.crl

            X509v3 Authority Key Identifier:
                keyid:9D:32:13:D8:0E:43:8D:3C:78:6F:3D:1C:D7:25:FA:9C:22:59:69:FA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/41415190-afe9-4f90-902f-9102f69180fb.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.248.235.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2d:14:60:de:2d:1a:a4:20:de:d0:88:f2:7b:22:ba:d6:43:e4:
         48:d9:30:ce:5a:df:d0:6f:00:95:57:81:28:8c:82:d7:e9:d8:
         8b:60:3c:69:ab:f8:89:78:8f:17:53:c2:70:d3:2d:d3:65:4c:
         25:09:45:6c:70:92:4d:83:2a:63:0c:5c:b1:32:2c:ef:c7:bf:
         5b:91:38:06:86:e3:43:01:ef:a0:af:99:b3:ac:09:a5:67:5f:
         e2:7e:a2:5c:d0:88:8e:01:b2:17:13:93:98:3d:69:80:bb:e2:
         85:70:49:3a:aa:f2:e2:7f:67:33:02:3c:f2:8c:fc:0b:4d:dc:
         43:6c:96:ad:d9:21:0f:5b:80:01:ed:68:bb:7e:bc:39:98:0f:
         7c:c4:33:dc:e8:e9:f3:0e:2d:8e:f7:f7:ee:b3:ff:d7:62:6c:
         fb:31:c7:48:51:99:8d:a6:1e:97:04:e8:26:f4:0b:b7:49:f7:
         af:69:16:93:d8:f0:b4:14:63:ad:0d:3e:b6:5a:b8:8c:86:08:
         0c:f8:51:71:53:2c:3c:03:a3:5a:61:15:04:7a:7d:b7:7d:fc:
         61:ef:78:cf:40:cd:14:6c:c9:86:3f:46:71:67:f3:99:cd:fc:
         d5:77:2c:a5:25:d3:ac:96:fd:66:f2:f9:1d:a7:34:70:0f:17:
         d1:cf:84:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 8 17:36:24 2025 by rpki-client