Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9ba8bdd0-6c7f-47b7-b427-6e2b454fa343/066b4f4e-c861-3946-a26e-9e25c56e7451.roa
File:                     066b4f4e-c861-3946-a26e-9e25c56e7451.roa (raw, json)
Hash identifier:          KrypU5NmP6895PleajKpWZlOsMGmdNV+DpZpzeYKWAk=
Subject key identifier:   8C:62:A3:4C:70:21:F1:0D:D5:D0:DD:1E:29:15:58:E8:BC:6C:2B:CB
Certificate issuer:       /CN=9ba8bdd0-6c7f-47b7-b427-6e2b454fa343
Certificate serial:       010D0C9F4328584B5F372B304156CFB4D7F86A40
Authority key identifier: B1:68:F7:B7:D0:4E:A3:97:A4:72:56:E3:33:90:A0:5D:4A:F1:2B:40
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9ba8bdd0-6c7f-47b7-b427-6e2b454fa343.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9ba8bdd0-6c7f-47b7-b427-6e2b454fa343/066b4f4e-c861-3946-a26e-9e25c56e7451.roa
Signing time:             Wed 01 Oct 2025 01:00:32 +0000
ROA not before:           Wed 01 Oct 2025 01:00:32 +0000
ROA not after:            Tue 30 Dec 2025 02:00:32 +0000
asID:                     30041
IP address blocks:        67.211.192.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9ba8bdd0-6c7f-47b7-b427-6e2b454fa343/9ba8bdd0-6c7f-47b7-b427-6e2b454fa343.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9ba8bdd0-6c7f-47b7-b427-6e2b454fa343/9ba8bdd0-6c7f-47b7-b427-6e2b454fa343.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9ba8bdd0-6c7f-47b7-b427-6e2b454fa343.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Oct 2025 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:5f:37:2b:30:41:56:cf:b4:d7:f8:6a:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9ba8bdd0-6c7f-47b7-b427-6e2b454fa343
        Validity
            Not Before: Oct  1 01:00:32 2025 GMT
            Not After : Dec 30 02:00:32 2025 GMT
        Subject: CN=8a97bab5-4562-4a01-98c3-38d834ce0775
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:b1:46:3c:f6:4c:eb:0d:cb:8a:0a:4e:6d:02:
                    18:76:30:65:6a:e3:f6:b8:b4:9d:cc:cb:f7:49:a6:
                    d7:03:4d:06:f9:e3:63:63:17:7f:0f:7d:d5:0b:c7:
                    dd:a8:54:82:fe:56:6c:a7:87:ee:93:6b:5d:f0:75:
                    86:1f:68:b0:07:0a:5a:23:1a:17:e2:3d:7f:4e:16:
                    ab:30:46:5c:f1:46:bb:09:bf:b5:e4:b6:34:d1:f8:
                    55:fa:32:8f:8a:1c:12:38:9c:c9:61:36:02:55:f6:
                    e6:de:fa:14:6a:f3:60:3a:6e:f0:07:36:76:fc:a1:
                    ef:71:16:34:38:6f:6d:36:6a:4b:a3:aa:75:25:09:
                    31:4e:10:54:2b:e9:ed:f5:20:4a:e5:37:e0:e1:f4:
                    2d:09:ab:8e:3b:c8:be:ef:76:f9:c4:81:5e:63:c5:
                    a5:c0:3c:27:70:6d:f4:18:20:27:b1:75:8a:1b:f9:
                    06:c8:84:95:2d:b3:5a:3f:69:0a:19:79:63:87:b1:
                    6e:1c:e7:c0:3e:99:19:13:a3:80:3b:f9:32:04:b2:
                    38:c5:25:84:48:3a:15:da:01:74:b0:d7:7d:a1:df:
                    df:e4:4d:4f:23:77:13:90:5c:9c:fa:93:ae:ff:40:
                    59:41:ad:42:37:56:c2:75:71:d9:76:02:e6:91:5e:
                    32:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:62:A3:4C:70:21:F1:0D:D5:D0:DD:1E:29:15:58:E8:BC:6C:2B:CB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9ba8bdd0-6c7f-47b7-b427-6e2b454fa343/066b4f4e-c861-3946-a26e-9e25c56e7451.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9ba8bdd0-6c7f-47b7-b427-6e2b454fa343/9ba8bdd0-6c7f-47b7-b427-6e2b454fa343.crl

            X509v3 Authority Key Identifier:
                keyid:B1:68:F7:B7:D0:4E:A3:97:A4:72:56:E3:33:90:A0:5D:4A:F1:2B:40

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9ba8bdd0-6c7f-47b7-b427-6e2b454fa343.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.211.192.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3f:1a:cf:67:71:e9:cc:36:44:78:1d:d4:b9:36:67:33:21:e6:
         f7:2d:74:3e:73:bc:bc:82:2b:ae:55:0d:b9:d4:6c:8a:e0:51:
         da:f9:4f:8e:18:62:19:84:79:42:7e:ff:d9:75:3a:b6:24:12:
         c3:10:64:b8:a0:31:f2:29:87:a4:e0:59:fa:3a:e6:c2:b0:99:
         a7:60:33:cc:95:b3:3e:d6:a6:88:51:ed:0f:f4:40:3c:d5:b4:
         39:c6:03:72:b5:9f:dd:1e:31:0b:52:22:9a:e2:a4:a7:93:be:
         90:ca:e7:f1:bc:ef:58:6e:63:79:f7:0e:1d:f7:00:45:70:c0:
         53:56:79:cb:25:35:a3:0c:ab:24:2c:1a:b0:a7:d5:dd:da:07:
         a3:97:e0:98:30:57:0c:d5:5f:41:e5:cb:1d:af:b0:b0:a8:0e:
         04:7a:37:e3:8b:2f:8a:df:bc:5f:a9:a7:7a:2f:19:d8:f6:b4:
         9c:dd:1f:2e:4d:c6:83:8c:f3:34:96:cd:a4:cb:a0:97:a3:c6:
         73:25:ef:83:21:9c:e3:e3:3b:c6:e6:78:94:72:cd:ae:02:6d:
         c8:86:c4:9f:fe:18:2b:c8:f2:bf:f5:a3:23:d3:5b:89:64:08:
         6b:d5:81:e3:af:d1:d3:91:56:5f:ac:fe:df:2f:77:e2:40:63:
         31:38:d8:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 18:36:17 2025 by rpki-client