Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/b1f7da37-7fdd-4d04-8a10-40434b8992dc/ffc2bfbb-8c15-3a10-825c-fb51a3f67be9.roa
File:                     ffc2bfbb-8c15-3a10-825c-fb51a3f67be9.roa (raw, json)
Hash identifier:          of5o0o1BCkhor9W8FtBjyoaI5apnyg4bB87NO/o4NFo=
Subject key identifier:   BD:7C:38:67:5F:6A:B6:69:E1:BE:AA:05:0E:82:C9:E6:A4:5B:3E:7A
Certificate issuer:       /CN=b1f7da37-7fdd-4d04-8a10-40434b8992dc
Certificate serial:       010D0C9F4328584B970D02AC7CCC152DC28F5C80
Authority key identifier: 21:12:EE:09:AC:4C:FF:31:6E:61:98:E2:39:4B:80:AE:1A:0F:5A:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/b1f7da37-7fdd-4d04-8a10-40434b8992dc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/b1f7da37-7fdd-4d04-8a10-40434b8992dc/ffc2bfbb-8c15-3a10-825c-fb51a3f67be9.roa
Signing time:             Tue 21 Oct 2025 01:00:31 +0000
ROA not before:           Tue 21 Oct 2025 01:00:31 +0000
ROA not after:            Mon 19 Jan 2026 02:00:31 +0000
asID:                     16433
IP address blocks:        66.38.4.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/b1f7da37-7fdd-4d04-8a10-40434b8992dc/b1f7da37-7fdd-4d04-8a10-40434b8992dc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/b1f7da37-7fdd-4d04-8a10-40434b8992dc/b1f7da37-7fdd-4d04-8a10-40434b8992dc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/b1f7da37-7fdd-4d04-8a10-40434b8992dc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 Oct 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:97:0d:02:ac:7c:cc:15:2d:c2:8f:5c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b1f7da37-7fdd-4d04-8a10-40434b8992dc
        Validity
            Not Before: Oct 21 01:00:31 2025 GMT
            Not After : Jan 19 02:00:31 2026 GMT
        Subject: CN=fe10f14d-fc73-4ebf-a24b-800bffa73f1a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:31:36:9e:1d:45:7e:48:d8:cd:60:de:5f:44:
                    91:9e:2e:71:e5:20:52:f7:28:06:68:20:a4:c4:1c:
                    19:53:fc:0f:4e:01:88:ad:b0:e9:95:97:f0:17:9b:
                    f1:4b:b3:a2:87:72:81:e1:e4:dd:6a:8d:d6:e9:3c:
                    5d:4a:2b:42:7a:16:8e:b7:1c:92:27:73:07:2e:f5:
                    70:11:c0:14:45:df:b6:56:e7:fd:83:14:41:fa:19:
                    77:52:a1:79:ef:42:f9:45:ae:68:9f:43:c6:e8:b6:
                    f1:e7:ce:f2:20:22:ea:26:5f:ef:10:c0:6f:02:75:
                    14:ea:a9:69:de:23:11:fc:b5:ca:98:a3:c4:c0:88:
                    a3:a3:de:8b:f2:d8:a6:c2:74:13:d5:f3:7a:b4:8f:
                    41:25:db:f4:9e:bf:55:9f:06:45:22:ac:3c:de:fe:
                    ec:78:4f:e6:9f:7a:18:aa:cf:d6:22:ae:c8:81:33:
                    c5:55:93:19:3a:43:8c:d2:61:ae:63:73:c5:ae:f8:
                    42:69:6a:27:e8:a1:a5:49:48:bb:09:e9:0f:68:e2:
                    59:5a:d6:7c:2c:00:8a:87:81:18:3c:fe:db:12:87:
                    80:43:64:54:2c:e1:18:06:c4:9e:03:e9:1e:3c:17:
                    45:75:3e:3e:17:0f:11:e5:c8:63:f4:a4:41:0a:b2:
                    85:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:7C:38:67:5F:6A:B6:69:E1:BE:AA:05:0E:82:C9:E6:A4:5B:3E:7A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/b1f7da37-7fdd-4d04-8a10-40434b8992dc/ffc2bfbb-8c15-3a10-825c-fb51a3f67be9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/b1f7da37-7fdd-4d04-8a10-40434b8992dc/b1f7da37-7fdd-4d04-8a10-40434b8992dc.crl

            X509v3 Authority Key Identifier:
                keyid:21:12:EE:09:AC:4C:FF:31:6E:61:98:E2:39:4B:80:AE:1A:0F:5A:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/b1f7da37-7fdd-4d04-8a10-40434b8992dc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.38.4.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1c:ca:e9:83:f2:41:69:7c:98:b5:74:53:35:b3:14:43:e3:69:
         e3:05:2e:59:c7:10:eb:04:b4:25:60:51:37:ed:96:43:52:d6:
         95:b2:87:72:ad:98:5f:09:60:c3:48:49:54:c8:6c:ee:b5:7e:
         25:7c:a9:29:2a:f8:67:34:9e:c3:49:52:f0:e6:3b:db:ae:88:
         c8:70:5f:91:08:e0:b3:33:91:81:e9:85:0b:c1:1e:6f:f8:45:
         ea:a1:6c:9c:ee:8d:80:53:b8:8f:d1:a4:50:d4:85:84:80:7b:
         7c:20:e8:24:10:fa:6c:ef:1e:99:d9:44:9d:77:3e:77:e3:c2:
         f7:71:1b:7d:78:f7:a6:00:bb:8b:bc:65:7c:94:66:a7:80:6a:
         8f:46:f7:60:41:d9:36:74:d4:59:ed:0c:b7:5d:67:02:eb:28:
         2c:d9:92:41:59:74:3a:6e:dc:a5:a7:c8:1f:a2:14:2d:fc:6c:
         ed:e0:ba:92:2d:86:b1:b0:02:cf:82:94:3a:6a:8d:91:02:cb:
         c8:c0:58:bf:e6:c5:a5:ba:bc:c0:74:1e:2c:43:3b:1a:ca:92:
         1f:39:53:67:59:4d:27:6c:6e:89:1d:28:58:c3:8f:db:82:52:
         c5:50:c8:b4:b8:cc:b1:b6:8a:ab:1a:c5:ec:01:ba:48:de:3a:
         a2:73:56:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 07:48:09 2025 by rpki-client