Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0eee8d2b-8dbc-4819-9142-4b1b45d5a094/bc1dc676-856e-3925-859e-d0df77285299.roa
File:                     bc1dc676-856e-3925-859e-d0df77285299.roa (raw, json)
Hash identifier:          ivtIPrz2MWkpppb+G/LLu4MQ0AEP9sfbFHpYMw26hGA=
Subject key identifier:   87:72:40:5C:B5:44:0F:90:56:CF:AD:C1:86:33:F5:3D:D5:37:98:81
Certificate issuer:       /CN=0eee8d2b-8dbc-4819-9142-4b1b45d5a094
Certificate serial:       010D0C9F4328584B715CA713438F1F89B7D82C00
Authority key identifier: 9B:3A:51:CD:D1:B6:39:CD:DA:B9:7D:D2:65:BA:8C:2A:83:84:BF:B4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0eee8d2b-8dbc-4819-9142-4b1b45d5a094.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0eee8d2b-8dbc-4819-9142-4b1b45d5a094/bc1dc676-856e-3925-859e-d0df77285299.roa
Signing time:             Tue 07 Oct 2025 13:00:37 +0000
ROA not before:           Tue 07 Oct 2025 13:00:37 +0000
ROA not after:            Mon 05 Jan 2026 14:00:37 +0000
asID:                     23227
IP address blocks:        66.11.133.0/24 maxlen: 24
                          66.11.134.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0eee8d2b-8dbc-4819-9142-4b1b45d5a094/0eee8d2b-8dbc-4819-9142-4b1b45d5a094.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0eee8d2b-8dbc-4819-9142-4b1b45d5a094/0eee8d2b-8dbc-4819-9142-4b1b45d5a094.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0eee8d2b-8dbc-4819-9142-4b1b45d5a094.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:71:5c:a7:13:43:8f:1f:89:b7:d8:2c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0eee8d2b-8dbc-4819-9142-4b1b45d5a094
        Validity
            Not Before: Oct  7 13:00:37 2025 GMT
            Not After : Jan  5 14:00:37 2026 GMT
        Subject: CN=6b25d531-6ac6-49cb-8cca-878d172c71d6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:8f:d4:db:15:72:96:d7:ad:b5:ed:ae:7f:6c:
                    2a:81:20:31:fe:b6:ab:e1:51:12:aa:a2:b5:52:b5:
                    38:2b:cf:a4:23:ac:ff:4a:f7:74:21:55:35:72:eb:
                    51:fa:ae:74:45:8c:fd:91:d3:48:aa:5a:71:ce:7c:
                    f9:57:ce:ed:d7:dd:ba:5f:77:b2:1e:61:dc:f8:e7:
                    4b:3c:fe:a7:a8:59:35:7b:9d:b6:67:1c:06:ee:eb:
                    6b:fb:47:9c:a5:08:67:ee:53:00:9a:f3:1f:a7:7f:
                    5e:54:cc:2b:85:02:a4:0d:45:4d:a8:f6:ab:43:3e:
                    8c:6d:1b:2e:0b:27:8c:ef:92:9f:db:d0:4a:d2:41:
                    2e:8a:0b:fe:6a:3c:6a:c7:09:94:7d:62:99:4b:00:
                    6a:0a:47:1b:84:6c:7f:fa:44:9a:af:bd:c6:81:95:
                    81:cd:fc:06:fb:23:41:c3:66:3f:38:ec:43:e3:eb:
                    a2:f5:dc:b8:55:e1:e8:a2:59:0a:01:90:a1:21:9c:
                    84:1d:1f:00:f7:7a:ff:90:68:da:ad:e8:1f:1a:07:
                    4b:77:e7:48:d7:d8:3c:7d:35:05:7f:81:83:cc:63:
                    76:bd:74:07:d7:9b:ee:e6:80:07:6f:94:0d:0d:d8:
                    0b:7a:a9:a1:55:9e:9e:5e:96:2e:de:1f:31:88:3b:
                    cb:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:72:40:5C:B5:44:0F:90:56:CF:AD:C1:86:33:F5:3D:D5:37:98:81
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0eee8d2b-8dbc-4819-9142-4b1b45d5a094/bc1dc676-856e-3925-859e-d0df77285299.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0eee8d2b-8dbc-4819-9142-4b1b45d5a094/0eee8d2b-8dbc-4819-9142-4b1b45d5a094.crl

            X509v3 Authority Key Identifier:
                keyid:9B:3A:51:CD:D1:B6:39:CD:DA:B9:7D:D2:65:BA:8C:2A:83:84:BF:B4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0eee8d2b-8dbc-4819-9142-4b1b45d5a094.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.11.133.0-66.11.134.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6a:bb:f9:2d:a1:1c:fa:b4:f8:63:ef:dd:19:12:da:2f:7c:49:
         fc:d3:ea:3c:f6:96:a9:22:dc:7d:fa:47:ff:6e:9d:d5:fe:e0:
         b0:1d:9e:be:2e:61:29:90:b6:e7:7f:b4:10:2b:73:fe:ee:01:
         6e:04:49:b6:d0:09:56:94:2e:bd:c6:91:9c:c8:91:fd:f1:e7:
         0e:10:ab:6a:b8:2b:eb:78:cd:a9:9d:15:34:23:cd:6d:de:dc:
         49:bc:f1:eb:39:03:1b:f2:04:95:cd:f2:f4:7c:51:85:0d:2b:
         ac:88:1e:02:05:13:59:ba:d0:1b:28:a8:ea:42:60:08:42:dc:
         95:4c:59:0d:02:fe:ca:11:f7:3f:98:96:75:a7:c6:bd:47:c4:
         b9:52:a4:82:06:25:9d:f4:40:9d:49:6e:60:da:ff:99:e1:75:
         e1:06:7b:36:dd:e7:30:18:4a:4a:77:e6:19:4d:e5:02:81:4f:
         60:e8:0d:13:57:c3:1c:70:68:cc:3f:0e:d4:94:c8:c8:df:9d:
         c4:c3:b7:0a:1a:52:56:c3:ad:40:52:41:78:64:fd:f4:a9:1e:
         30:ab:77:04:66:6f:f4:72:52:ca:da:9e:b2:a1:13:f2:3e:5f:
         01:c9:85:54:37:79:b8:eb:9c:9e:44:46:96:04:57:70:de:77:
         11:d4:04:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 19:11:54 2025 by rpki-client