Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d170fca2-5f74-4408-8dc9-597ba031cfe2/91e4fe00-5dc6-337f-b6d6-6db1c6c1210d.roa
File:                     91e4fe00-5dc6-337f-b6d6-6db1c6c1210d.roa (raw, json)
Hash identifier:          NIQmrG3+9Gh9+F/G2o9+XsKu7zDoVeZjbyDdxkq+O48=
Subject key identifier:   4D:5A:C8:11:13:E9:9D:CF:AE:3B:2A:A2:52:C7:06:1D:CA:7E:FD:AC
Certificate issuer:       /CN=d170fca2-5f74-4408-8dc9-597ba031cfe2
Certificate serial:       010D0C9F4328584BA7CCE981E45505B703700F60
Authority key identifier: FF:28:BA:9B:42:6B:7A:24:D9:A4:AB:B7:91:4D:BD:B3:6F:3F:62:9E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d170fca2-5f74-4408-8dc9-597ba031cfe2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d170fca2-5f74-4408-8dc9-597ba031cfe2/91e4fe00-5dc6-337f-b6d6-6db1c6c1210d.roa
Signing time:             Mon 27 Oct 2025 01:00:31 +0000
ROA not before:           Mon 27 Oct 2025 01:00:31 +0000
ROA not after:            Sun 25 Jan 2026 02:00:31 +0000
asID:                     16509
IP address blocks:        66.178.130.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d170fca2-5f74-4408-8dc9-597ba031cfe2/d170fca2-5f74-4408-8dc9-597ba031cfe2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d170fca2-5f74-4408-8dc9-597ba031cfe2/d170fca2-5f74-4408-8dc9-597ba031cfe2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d170fca2-5f74-4408-8dc9-597ba031cfe2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:a7:cc:e9:81:e4:55:05:b7:03:70:0f:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d170fca2-5f74-4408-8dc9-597ba031cfe2
        Validity
            Not Before: Oct 27 01:00:31 2025 GMT
            Not After : Jan 25 02:00:31 2026 GMT
        Subject: CN=cf90d04a-a72a-4571-b1bf-1e4c34352ab1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:06:bd:88:92:d8:45:4b:6f:02:ff:e8:bb:94:
                    63:f6:a0:f2:ed:1e:10:a9:77:4c:b5:b1:af:3d:e0:
                    b8:08:3d:87:0b:0f:e6:7e:79:65:d6:c9:92:71:4d:
                    a3:78:c0:e7:61:e7:74:2a:2f:6e:19:7e:ae:e0:a8:
                    ee:ba:e5:bd:0e:f3:e4:ab:68:13:f5:d0:7a:ca:e2:
                    c7:8c:b9:b7:5c:a7:39:80:1d:ac:68:ff:59:cc:c7:
                    6e:7f:98:61:c5:bd:5f:fd:3e:fa:75:93:be:cd:b2:
                    21:6e:0b:08:ae:fa:96:95:b1:b3:24:cb:af:d1:a8:
                    9e:2b:3f:6a:02:87:92:a3:f8:3e:71:97:77:e5:6c:
                    2f:2e:3a:b5:20:d0:81:d8:38:93:4e:88:96:c7:b6:
                    ca:12:dc:5d:cd:98:63:90:72:26:44:7d:6d:9d:6b:
                    3d:e3:96:37:9e:07:cf:c9:91:10:c7:15:c3:f5:63:
                    97:78:1a:48:12:0c:10:95:9c:30:3b:79:d6:85:a7:
                    5a:7d:01:22:99:3c:5a:dc:b9:bf:7c:6d:9d:94:ae:
                    c8:aa:61:3d:57:3b:ef:83:ef:97:12:a6:30:3d:96:
                    96:f9:a4:81:f4:28:cc:82:20:91:2f:47:6c:ed:cd:
                    8f:63:35:84:26:96:5e:e7:be:4f:6c:4d:41:c0:9d:
                    c8:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:5A:C8:11:13:E9:9D:CF:AE:3B:2A:A2:52:C7:06:1D:CA:7E:FD:AC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d170fca2-5f74-4408-8dc9-597ba031cfe2/91e4fe00-5dc6-337f-b6d6-6db1c6c1210d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d170fca2-5f74-4408-8dc9-597ba031cfe2/d170fca2-5f74-4408-8dc9-597ba031cfe2.crl

            X509v3 Authority Key Identifier:
                keyid:FF:28:BA:9B:42:6B:7A:24:D9:A4:AB:B7:91:4D:BD:B3:6F:3F:62:9E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d170fca2-5f74-4408-8dc9-597ba031cfe2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.178.130.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         39:f9:88:37:1a:83:0e:3a:cd:bf:94:7a:cb:23:bf:1a:39:19:
         3b:05:8f:5f:78:e3:1d:b7:97:4c:4f:05:5a:06:1c:85:0f:9e:
         dd:1d:1e:e8:50:35:98:7b:13:5d:58:29:4d:0d:20:b5:5d:c4:
         24:30:76:b4:9f:48:b5:33:40:0d:4c:90:5e:fd:68:42:6f:af:
         37:0f:55:bd:32:57:42:be:6d:d3:2a:64:28:5e:0d:d2:a0:93:
         a7:c9:18:34:e5:db:10:3e:aa:61:e5:05:9d:ea:24:21:03:22:
         25:ea:b5:00:82:41:46:f6:04:1d:ab:96:00:00:38:39:7f:9f:
         cf:42:99:0b:98:ae:fb:5d:95:58:72:90:98:67:07:7c:f8:2b:
         85:10:1a:9f:36:2f:4c:66:19:ee:f6:d8:7a:34:da:db:b0:38:
         70:62:3e:b8:89:3f:be:0c:6f:8f:9c:b8:ad:f5:1c:f5:d0:d5:
         89:67:e7:e6:27:c2:9f:54:a3:04:82:da:08:ad:f8:68:e3:93:
         3f:22:75:7f:ef:66:5e:0a:04:f1:87:0d:ab:c5:17:df:19:77:
         0b:eb:78:37:e3:00:91:70:25:ee:7f:e2:f2:bb:23:41:b5:47:
         8f:0e:ca:07:50:71:8a:48:df:a7:ea:64:61:e7:42:b1:91:23:
         eb:2e:f5:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 12:58:40 2025 by rpki-client