Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d438c823-e424-41a1-9631-aa3b75aea0c7/c0dd27c0-be49-30c4-aa1b-c4bc6ba84213.roa
File:                     c0dd27c0-be49-30c4-aa1b-c4bc6ba84213.roa (raw, json)
Hash identifier:          QdGzs5w1u/3Bg2YetfuswZhRy4oPX7W4nald9woqO1U=
Subject key identifier:   94:67:B0:FE:F2:F3:92:EF:22:15:EF:29:F8:30:C3:1F:0D:81:C2:B2
Certificate issuer:       /CN=d438c823-e424-41a1-9631-aa3b75aea0c7
Certificate serial:       010D0C9F4328584B65C7D6018AC60314643F5540
Authority key identifier: E3:BC:37:56:85:68:E5:91:F5:8F:9F:FD:DE:D4:16:29:A3:53:D8:93
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d438c823-e424-41a1-9631-aa3b75aea0c7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d438c823-e424-41a1-9631-aa3b75aea0c7/c0dd27c0-be49-30c4-aa1b-c4bc6ba84213.roa
Signing time:             Fri 03 Oct 2025 09:26:59 +0000
ROA not before:           Fri 03 Oct 2025 09:26:59 +0000
ROA not after:            Thu 01 Jan 2026 10:26:59 +0000
asID:                     63304
IP address blocks:        66.118.52.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d438c823-e424-41a1-9631-aa3b75aea0c7/d438c823-e424-41a1-9631-aa3b75aea0c7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d438c823-e424-41a1-9631-aa3b75aea0c7/d438c823-e424-41a1-9631-aa3b75aea0c7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d438c823-e424-41a1-9631-aa3b75aea0c7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 29 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:65:c7:d6:01:8a:c6:03:14:64:3f:55:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d438c823-e424-41a1-9631-aa3b75aea0c7
        Validity
            Not Before: Oct  3 09:26:59 2025 GMT
            Not After : Jan  1 10:26:59 2026 GMT
        Subject: CN=ad77c12c-eae6-49d3-ae81-e07deae982d5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:78:2a:39:be:74:c0:68:e1:45:1d:7f:b6:01:
                    14:cf:be:60:54:3a:e4:5b:52:70:2f:6d:e6:40:9f:
                    2f:dd:4d:e0:aa:f1:0d:6a:c4:af:3f:fd:9c:be:a4:
                    1d:ba:78:ac:26:6c:51:96:79:f5:5f:9b:41:4e:b3:
                    ed:ec:33:29:55:98:10:f6:69:db:2b:9b:cd:2e:0f:
                    58:19:35:04:08:b8:d1:00:68:21:51:12:84:15:63:
                    c7:4d:9b:bc:1b:03:70:23:07:d9:2f:1a:e0:fe:ab:
                    ae:8f:d5:4f:be:66:4d:a2:60:48:16:4e:ec:34:96:
                    63:fe:50:58:ac:59:fc:07:68:9e:97:22:94:d5:54:
                    f8:91:16:6a:2d:b7:ee:0a:7e:bf:62:24:bc:43:97:
                    d2:89:34:b4:c6:0a:ca:13:b5:0e:ac:26:91:ce:7c:
                    ab:68:91:62:06:38:da:8c:f3:cd:0b:b3:46:b5:0c:
                    f6:49:23:15:29:1f:3a:44:66:75:4f:73:8a:99:47:
                    e8:e5:5e:05:f6:44:d1:81:17:ec:21:01:32:a9:9d:
                    40:6b:2e:79:6e:09:15:c5:75:8b:48:6b:c6:5e:25:
                    c2:ac:cd:bf:9a:98:17:74:c3:14:3c:c0:37:47:e9:
                    31:13:1c:6c:1d:0e:a8:eb:db:ec:28:bf:01:38:9e:
                    ce:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:67:B0:FE:F2:F3:92:EF:22:15:EF:29:F8:30:C3:1F:0D:81:C2:B2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d438c823-e424-41a1-9631-aa3b75aea0c7/c0dd27c0-be49-30c4-aa1b-c4bc6ba84213.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d438c823-e424-41a1-9631-aa3b75aea0c7/d438c823-e424-41a1-9631-aa3b75aea0c7.crl

            X509v3 Authority Key Identifier:
                keyid:E3:BC:37:56:85:68:E5:91:F5:8F:9F:FD:DE:D4:16:29:A3:53:D8:93

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d438c823-e424-41a1-9631-aa3b75aea0c7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.118.52.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2e:d4:b8:39:be:91:8c:ff:91:59:cd:49:5d:09:8a:7f:f4:1f:
         f3:80:8a:ba:ec:1f:22:45:03:ef:51:a2:a0:20:2a:88:d6:09:
         89:9f:65:34:61:59:37:a5:7c:3e:1c:ff:b6:aa:4a:fd:59:88:
         c2:84:89:0c:91:ab:92:44:ba:c5:c6:58:6e:1b:2f:f7:75:2d:
         1d:68:c0:cc:3d:7b:f4:8b:78:19:ee:fa:b9:18:97:e4:0c:4c:
         83:ad:ce:56:96:86:bd:49:b6:9a:9c:b4:1a:c3:f3:ff:43:b2:
         68:6c:18:6b:ab:16:e7:01:d4:21:2d:d8:11:97:43:15:28:f1:
         39:76:e6:7d:d8:9b:52:b5:2e:8f:b1:30:41:18:13:b5:e3:1b:
         16:41:b2:06:e7:e8:bc:1b:ab:c5:85:e5:14:69:60:f7:8d:7e:
         01:84:d8:96:a3:aa:72:04:1e:b0:72:8e:46:cb:e6:f0:50:a4:
         fa:ae:b4:43:2c:92:40:8a:81:c8:8b:6e:bc:40:0a:6c:77:29:
         ef:dd:4d:09:2d:b9:95:0b:ba:64:0f:3e:33:7f:fe:b1:ea:fa:
         93:b3:fd:fe:30:64:c7:dd:94:f1:76:04:22:2e:9d:04:83:39:
         b5:b2:4e:d6:65:8a:c2:98:6e:ec:a6:d5:78:47:00:a2:39:aa:
         ed:1d:8d:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 28 13:14:21 2025 by rpki-client