Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2cc2be88-240f-418a-aea9-3c6a0776ce7a/a7109183-1584-33a4-afd9-201d6e6f0710.roa
File:                     a7109183-1584-33a4-afd9-201d6e6f0710.roa (raw, json)
Hash identifier:          cYRdVJrAh0oSx7djwWzVo+v3Z8R9SdyDp3/LcDuepIE=
Subject key identifier:   3F:2F:18:10:92:7B:2F:AD:2A:FA:43:FB:B5:D2:49:EB:2B:CC:5B:3B
Certificate issuer:       /CN=2cc2be88-240f-418a-aea9-3c6a0776ce7a
Certificate serial:       010D0C9F4328584B3556F2871499794BEDFEAE80
Authority key identifier: 9D:86:B9:F6:46:DE:03:F9:D3:9D:C0:FE:10:8D:56:8A:BA:14:9F:D0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2cc2be88-240f-418a-aea9-3c6a0776ce7a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2cc2be88-240f-418a-aea9-3c6a0776ce7a/a7109183-1584-33a4-afd9-201d6e6f0710.roa
Signing time:             Tue 16 Sep 2025 01:00:33 +0000
ROA not before:           Tue 16 Sep 2025 01:00:33 +0000
ROA not after:            Mon 15 Dec 2025 02:00:33 +0000
asID:                     23483
IP address blocks:        66.244.0.0/18 maxlen: 19
                          66.244.16.0/24 maxlen: 24
                          66.244.63.0/24 maxlen: 24
                          2602:fd01::/36 maxlen: 37
                          2602:fd01::/48 maxlen: 48
                          2602:fd01:40::/48 maxlen: 48
                          2602:fd01:fc0::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2cc2be88-240f-418a-aea9-3c6a0776ce7a/2cc2be88-240f-418a-aea9-3c6a0776ce7a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2cc2be88-240f-418a-aea9-3c6a0776ce7a/2cc2be88-240f-418a-aea9-3c6a0776ce7a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2cc2be88-240f-418a-aea9-3c6a0776ce7a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 18 Sep 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:35:56:f2:87:14:99:79:4b:ed:fe:ae:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2cc2be88-240f-418a-aea9-3c6a0776ce7a
        Validity
            Not Before: Sep 16 01:00:33 2025 GMT
            Not After : Dec 15 02:00:33 2025 GMT
        Subject: CN=66891228-b630-4080-8206-e23b8b68a6f3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:13:ed:08:4f:e0:8d:d3:0f:8e:3b:bb:05:b7:
                    3a:51:c1:3f:5b:de:b0:c2:fd:c1:10:50:ef:ac:66:
                    d0:2c:4d:ea:d4:f2:c9:16:5f:d1:f6:20:f7:4f:a8:
                    41:6c:77:58:b0:26:86:fe:80:d1:e9:0e:d1:90:92:
                    e8:d0:6f:1c:c3:cc:1e:52:e0:b1:c4:97:24:fb:88:
                    da:06:13:37:12:d3:60:1a:9a:88:3e:a2:c8:0a:f1:
                    d5:92:4e:64:66:49:ee:cf:11:95:40:2f:e4:1e:6d:
                    2b:2d:d6:ec:f3:f0:69:22:5b:28:19:21:b8:ed:4a:
                    21:3a:24:f2:fe:7a:a5:6b:cd:80:a5:22:e4:bf:2c:
                    88:f8:fb:4c:62:c2:ec:a3:a4:49:f6:a2:df:41:58:
                    ad:19:e2:56:b0:cc:11:00:14:ea:5b:80:fb:c9:72:
                    40:24:3a:35:0f:9f:0e:1e:1f:ec:87:34:a9:73:0b:
                    f3:e7:5b:08:24:84:47:5a:00:f9:fb:43:0a:44:58:
                    c7:b9:e7:60:a8:87:39:f0:6e:21:25:0c:3e:b7:fe:
                    a4:72:a1:db:65:1a:8a:f7:78:cc:07:12:aa:45:10:
                    02:b4:9f:c8:30:d9:66:09:fc:3d:c3:3c:60:d4:b8:
                    5e:a9:7a:bd:30:04:cd:f5:08:26:9b:7a:3e:6d:99:
                    87:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:2F:18:10:92:7B:2F:AD:2A:FA:43:FB:B5:D2:49:EB:2B:CC:5B:3B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2cc2be88-240f-418a-aea9-3c6a0776ce7a/a7109183-1584-33a4-afd9-201d6e6f0710.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2cc2be88-240f-418a-aea9-3c6a0776ce7a/2cc2be88-240f-418a-aea9-3c6a0776ce7a.crl

            X509v3 Authority Key Identifier:
                keyid:9D:86:B9:F6:46:DE:03:F9:D3:9D:C0:FE:10:8D:56:8A:BA:14:9F:D0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2cc2be88-240f-418a-aea9-3c6a0776ce7a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.244.0.0/18
                IPv6:
                  2602:fd01::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         69:bb:6b:0a:b7:be:f6:4f:9a:95:4d:4e:40:b4:f4:7e:48:b7:
         91:d4:b8:18:db:68:4d:f5:db:bc:a5:2a:69:01:2d:3e:a3:97:
         c4:29:c4:e2:c1:0f:49:71:00:be:a2:b6:45:d8:6c:54:8c:68:
         29:37:e0:20:94:7a:53:74:05:dd:c8:ef:0f:31:4c:bb:5f:f3:
         db:c0:33:dd:ff:99:ac:f9:f2:6a:45:9b:67:8b:77:d4:0a:dc:
         98:ae:72:7b:a0:57:d1:c2:68:c3:aa:57:58:2f:29:ba:f9:07:
         75:66:9a:3c:ee:64:02:f7:9e:ad:a6:3a:c5:64:1a:b5:31:4a:
         41:45:c1:14:e3:6d:94:f5:aa:a9:c5:57:61:21:84:61:fe:ca:
         f6:d0:76:89:61:b8:22:67:45:b2:53:e5:06:3c:9b:9a:80:72:
         d6:b0:74:ff:40:8d:b9:ca:6f:9a:70:10:6d:38:ad:e0:ca:61:
         13:69:d8:73:ad:6b:45:89:5e:fc:25:38:93:0b:ce:98:45:8d:
         12:7a:a1:70:b1:b2:96:c4:f8:6d:24:75:2e:d1:e5:05:47:5c:
         32:a6:51:d5:37:d1:7e:e5:03:bc:4b:b8:da:93:44:b9:7d:3c:
         17:12:be:c5:c6:41:7c:3f:03:39:73:e6:ae:97:61:0e:d4:15:
         6b:0a:d3:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 17 14:36:48 2025 by rpki-client