Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8424ff1-5313-4a68-a60f-9d8217567420/e14cc174-68fa-3252-9d74-713b58db3ade.roa
File:                     e14cc174-68fa-3252-9d74-713b58db3ade.roa (raw, json)
Hash identifier:          CF+JaEcVWIrFuwsKuKgH9SjhbZ5OmMV8IL5HV/R/+HU=
Subject key identifier:   F6:56:DC:B8:B7:25:09:37:4D:70:D5:81:DB:50:AB:68:3A:10:7D:91
Certificate issuer:       /CN=f8424ff1-5313-4a68-a60f-9d8217567420
Certificate serial:       010D0C9F4328584B33F1A53393EF6F3B095B5AC0
Authority key identifier: B6:A1:D1:82:72:FD:B1:36:79:17:DB:62:75:CE:17:70:37:20:5D:AA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8424ff1-5313-4a68-a60f-9d8217567420.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8424ff1-5313-4a68-a60f-9d8217567420/e14cc174-68fa-3252-9d74-713b58db3ade.roa
Signing time:             Mon 15 Sep 2025 13:00:40 +0000
ROA not before:           Mon 15 Sep 2025 13:00:40 +0000
ROA not after:            Sun 14 Dec 2025 14:00:40 +0000
asID:                     397731
IP address blocks:        66.245.172.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8424ff1-5313-4a68-a60f-9d8217567420/f8424ff1-5313-4a68-a60f-9d8217567420.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8424ff1-5313-4a68-a60f-9d8217567420/f8424ff1-5313-4a68-a60f-9d8217567420.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8424ff1-5313-4a68-a60f-9d8217567420.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Oct 2025 23:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:33:f1:a5:33:93:ef:6f:3b:09:5b:5a:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f8424ff1-5313-4a68-a60f-9d8217567420
        Validity
            Not Before: Sep 15 13:00:40 2025 GMT
            Not After : Dec 14 14:00:40 2025 GMT
        Subject: CN=84545704-721e-4e34-ad83-8a00582ae8e4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:0b:39:d8:c5:fb:7c:08:be:81:0d:a7:71:9e:
                    9e:3d:c9:59:fc:2f:02:79:c1:44:23:b4:8b:17:01:
                    54:1f:54:5d:dd:b4:b0:83:e3:91:92:fa:c3:e2:48:
                    fc:32:82:bb:8c:37:12:ca:61:75:90:32:50:da:3a:
                    75:f0:82:29:fc:77:bb:77:38:da:d7:ca:b1:a8:8c:
                    8c:ef:d7:96:8d:8e:93:57:de:c8:85:b1:0e:5b:fe:
                    8e:80:85:e6:7b:0a:0e:46:71:e3:90:ee:94:bd:51:
                    53:00:46:0d:35:00:f7:f9:df:ff:54:d8:ae:34:c1:
                    76:d1:e9:b3:43:11:a2:af:09:e8:07:83:25:a1:8f:
                    3c:18:9f:0d:27:f6:7f:aa:bb:0d:bb:aa:c3:e0:09:
                    cb:21:b5:12:58:55:7a:39:2d:10:6f:10:29:64:1b:
                    95:70:32:b9:3c:cd:5e:b6:86:37:1b:4d:77:9e:f2:
                    3f:d0:84:e8:03:ab:a9:43:1b:d5:57:9b:12:f8:43:
                    2d:3f:6f:75:c9:ad:1b:a2:9f:a4:4c:ae:ce:d7:13:
                    91:d0:b6:f2:36:99:17:02:b7:f7:35:89:1e:9f:2c:
                    6c:a3:ce:50:9a:e9:d9:c9:c7:c0:bb:65:3f:f3:b1:
                    cb:d6:32:e7:15:52:67:ba:0c:7b:f8:95:56:cf:10:
                    14:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:56:DC:B8:B7:25:09:37:4D:70:D5:81:DB:50:AB:68:3A:10:7D:91
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8424ff1-5313-4a68-a60f-9d8217567420/e14cc174-68fa-3252-9d74-713b58db3ade.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8424ff1-5313-4a68-a60f-9d8217567420/f8424ff1-5313-4a68-a60f-9d8217567420.crl

            X509v3 Authority Key Identifier:
                keyid:B6:A1:D1:82:72:FD:B1:36:79:17:DB:62:75:CE:17:70:37:20:5D:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8424ff1-5313-4a68-a60f-9d8217567420.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.245.172.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         99:c3:32:e7:5d:9b:81:5d:39:1e:90:c7:85:29:d1:98:6d:73:
         aa:b5:4e:77:1e:58:b4:43:ea:a0:4f:d1:ca:20:33:16:71:68:
         83:f4:ba:ea:6f:29:b4:b3:3d:cb:40:26:f4:e9:22:d6:d3:18:
         dd:ac:bc:f7:5d:89:6e:90:6f:1e:90:33:4b:c6:a8:a4:15:f1:
         36:6c:ad:6b:9d:3d:9c:51:e2:dc:67:a5:e8:be:7b:e6:67:df:
         dd:6e:55:55:cc:02:8c:38:ac:e0:11:e1:11:60:76:00:cb:8e:
         af:bf:33:44:81:3f:55:ad:a0:c8:ff:51:51:60:64:2c:0a:4f:
         1b:fd:ca:ec:6d:f9:c1:0b:74:d0:a2:e9:67:e8:7d:72:12:86:
         dc:44:48:ad:35:73:22:b8:34:78:5e:7d:7d:d9:ad:70:dd:d3:
         80:8c:6c:85:01:b2:28:50:ca:02:bd:60:88:e0:4c:17:42:d7:
         0d:af:70:1a:66:15:a4:05:34:97:c7:d8:6c:18:a7:bc:d0:80:
         5e:a7:f2:fd:09:92:79:1a:0a:2f:e3:5d:ca:d7:89:c4:ff:6f:
         d2:cb:45:79:30:9a:70:b9:a7:5e:5b:71:2b:0f:28:5f:f0:51:
         97:99:05:1c:c2:e1:be:23:eb:75:18:8c:65:0c:2e:35:5e:13:
         40:f9:1b:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 16 20:29:43 2025 by rpki-client