Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/21a3a15f-e6ea-4382-83cd-f39cece97b2e/fe443d95-de47-3d39-8312-5fe53fbde018.roa
File:                     fe443d95-de47-3d39-8312-5fe53fbde018.roa (raw, json)
Hash identifier:          /MAhCeynvrdZTf9IRozDkAreiekzpsU2DZ9W/azHP5Q=
Subject key identifier:   7A:E2:2B:D5:2B:6B:2E:BA:DF:1C:B8:7B:8F:41:7A:4D:95:67:91:75
Certificate issuer:       /CN=21a3a15f-e6ea-4382-83cd-f39cece97b2e
Certificate serial:       010D0C9F4328584ACAE43A2B6CBB2ECD26AD2748
Authority key identifier: B6:EC:62:20:F3:F1:47:93:DB:95:88:C7:43:CC:57:DA:72:6E:0E:4B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/21a3a15f-e6ea-4382-83cd-f39cece97b2e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/21a3a15f-e6ea-4382-83cd-f39cece97b2e/fe443d95-de47-3d39-8312-5fe53fbde018.roa
Signing time:             Fri 08 Aug 2025 21:53:54 +0000
ROA not before:           Fri 08 Aug 2025 21:53:54 +0000
ROA not after:            Thu 06 Nov 2025 22:53:54 +0000
asID:                     16557
IP address blocks:        66.103.156.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/21a3a15f-e6ea-4382-83cd-f39cece97b2e/21a3a15f-e6ea-4382-83cd-f39cece97b2e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/21a3a15f-e6ea-4382-83cd-f39cece97b2e/21a3a15f-e6ea-4382-83cd-f39cece97b2e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/21a3a15f-e6ea-4382-83cd-f39cece97b2e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 21 Aug 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:ca:e4:3a:2b:6c:bb:2e:cd:26:ad:27:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=21a3a15f-e6ea-4382-83cd-f39cece97b2e
        Validity
            Not Before: Aug  8 21:53:54 2025 GMT
            Not After : Nov  6 22:53:54 2025 GMT
        Subject: CN=63e6d51d-d2a7-4a9b-be22-c97de159366f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:4f:e7:1c:f0:95:3e:c6:7f:5a:ad:b1:9b:81:
                    ea:f3:5c:76:18:bb:9e:44:0b:4c:4a:4b:d7:b7:b2:
                    38:0f:e3:bf:d9:36:bb:2a:ff:ae:76:26:bd:06:59:
                    6e:18:a0:23:8f:a3:d5:08:ac:0f:96:1a:12:d5:89:
                    a9:b0:ea:83:9f:a0:62:11:8e:ae:2e:61:5f:f2:db:
                    d7:1c:cf:cd:7d:90:69:72:7e:88:95:d4:d0:91:3e:
                    5c:35:12:7c:f6:d7:d2:b7:fc:63:74:28:82:5a:00:
                    8b:a5:d6:1d:75:5d:ac:e9:16:a3:10:8a:fe:ec:3b:
                    5c:ff:c1:ed:e6:43:ca:83:f9:13:07:10:c0:fc:8e:
                    8b:98:f1:cd:e2:4a:f0:bc:29:ba:fe:f8:e2:8b:a6:
                    75:fa:1a:5e:43:72:88:c7:b7:db:f0:9f:be:f3:eb:
                    d4:9c:b4:c1:99:96:63:a6:d7:2e:77:54:e9:c3:4c:
                    b0:dd:b8:8c:be:8b:d1:fd:c9:76:4e:64:3f:71:b1:
                    95:cc:9b:05:2d:5b:43:bf:5b:52:10:ca:4e:5b:74:
                    72:4d:4d:ba:27:f6:f4:cc:35:b0:b7:4b:2a:f7:0a:
                    b2:06:eb:35:ad:65:6a:7f:e1:df:02:74:07:7b:88:
                    18:f0:6e:16:f7:59:b3:e8:89:6e:f9:7e:aa:d5:8e:
                    5d:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:E2:2B:D5:2B:6B:2E:BA:DF:1C:B8:7B:8F:41:7A:4D:95:67:91:75
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/21a3a15f-e6ea-4382-83cd-f39cece97b2e/fe443d95-de47-3d39-8312-5fe53fbde018.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/21a3a15f-e6ea-4382-83cd-f39cece97b2e/21a3a15f-e6ea-4382-83cd-f39cece97b2e.crl

            X509v3 Authority Key Identifier:
                keyid:B6:EC:62:20:F3:F1:47:93:DB:95:88:C7:43:CC:57:DA:72:6E:0E:4B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/21a3a15f-e6ea-4382-83cd-f39cece97b2e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.103.156.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4c:61:da:55:53:7c:7c:d1:6c:e7:6b:4f:34:9d:46:0c:00:66:
         58:58:8a:6b:ee:83:cd:91:34:ec:a0:08:fa:a7:18:76:e7:e9:
         a5:2e:06:37:eb:5e:e1:bc:47:68:9b:7f:3a:1d:d3:d6:60:c2:
         39:db:3d:ab:59:ed:d1:e8:87:fb:be:1e:ac:a9:a0:01:38:c7:
         de:77:5d:d8:96:bb:2b:e3:3b:d5:38:8f:82:73:42:23:5e:26:
         0d:88:b5:72:95:a4:54:74:04:44:b0:18:40:25:74:11:ea:27:
         25:99:be:ef:ce:b1:21:f8:ac:a1:01:9c:e8:6d:f3:d6:a1:83:
         40:0f:f2:9d:5f:53:17:24:c9:da:b0:80:a2:e7:98:50:6f:99:
         79:b5:5d:38:ab:02:41:52:f1:a0:6f:24:c9:0c:36:58:e3:fa:
         64:2f:21:13:02:04:1d:a2:3a:23:71:09:17:7a:53:bc:73:9e:
         31:85:f4:91:ae:6a:32:05:6d:99:f7:53:cd:b7:52:21:ed:ae:
         31:d4:6d:24:ad:77:34:02:d1:23:70:24:24:13:d7:b6:9c:54:
         90:bc:05:3d:6f:a4:02:0f:6c:68:25:27:ef:1c:36:d3:8d:a1:
         a0:e1:94:fa:44:73:ec:9a:90:87:09:32:e0:d7:58:fb:5a:61:
         a7:be:26:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 20 03:38:01 2025 by rpki-client