Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fc9a95e-53c1-4e1e-9c7b-39f8f242418e/f8a715bd-7121-3011-90e1-e6726bcf1bcd.roa
File:                     f8a715bd-7121-3011-90e1-e6726bcf1bcd.roa (raw, json)
Hash identifier:          btwGw0xgAo92MrKAAVqUzH55YAgTd02L/tDDtuIxPO8=
Subject key identifier:   30:27:E7:C2:16:C7:FB:02:2A:A5:8F:63:E1:69:5B:6D:0C:B5:17:83
Certificate issuer:       /CN=1fc9a95e-53c1-4e1e-9c7b-39f8f242418e
Certificate serial:       010D0C9F4328584AB91B9F429CF3F6F1106EE880
Authority key identifier: BF:B8:47:5A:5F:33:6D:B7:0B:DE:C4:4B:99:00:36:AC:67:40:D0:DE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fc9a95e-53c1-4e1e-9c7b-39f8f242418e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fc9a95e-53c1-4e1e-9c7b-39f8f242418e/f8a715bd-7121-3011-90e1-e6726bcf1bcd.roa
Signing time:             Sat 02 Aug 2025 13:00:41 +0000
ROA not before:           Sat 02 Aug 2025 13:00:41 +0000
ROA not after:            Fri 31 Oct 2025 13:00:41 +0000
asID:                     396982
IP address blocks:        66.43.2.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fc9a95e-53c1-4e1e-9c7b-39f8f242418e/1fc9a95e-53c1-4e1e-9c7b-39f8f242418e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fc9a95e-53c1-4e1e-9c7b-39f8f242418e/1fc9a95e-53c1-4e1e-9c7b-39f8f242418e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fc9a95e-53c1-4e1e-9c7b-39f8f242418e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 07 Aug 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:b9:1b:9f:42:9c:f3:f6:f1:10:6e:e8:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1fc9a95e-53c1-4e1e-9c7b-39f8f242418e
        Validity
            Not Before: Aug  2 13:00:41 2025 GMT
            Not After : Oct 31 13:00:41 2025 GMT
        Subject: CN=b3128054-603f-4c14-8918-6621505b29ab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:81:8c:be:17:fa:3c:02:03:b9:41:e3:71:73:
                    c4:60:34:57:30:a1:48:7e:39:8b:13:38:e9:ed:77:
                    09:68:e3:24:d9:89:6e:59:8b:f0:1e:7a:2d:49:ad:
                    32:a9:a3:30:3f:e4:bb:35:c5:41:54:ea:1d:3e:5d:
                    a3:35:ea:5c:1a:e6:c9:98:22:29:f7:f7:e4:30:d3:
                    a7:90:fd:9c:02:e4:c8:15:75:e6:c2:8d:d1:47:ee:
                    b1:30:be:e4:e2:4c:3b:7c:ab:ba:75:1a:c3:c6:9f:
                    07:8b:ad:63:3a:4c:26:51:68:5c:66:39:f4:05:cd:
                    3d:83:26:c5:63:b6:b8:7c:5b:ce:36:da:14:1e:83:
                    a6:0e:e1:0f:d8:8b:c8:73:1c:31:52:83:8b:51:ca:
                    67:95:9b:ca:40:c0:22:31:15:f8:8a:75:41:db:92:
                    60:9f:36:cf:59:43:2c:6d:82:0b:3a:52:66:1c:86:
                    cf:82:83:d3:21:94:d9:ed:c8:92:08:4b:10:de:16:
                    83:7c:53:ee:d5:b5:5a:a8:03:2e:89:a3:b3:1c:84:
                    4c:9f:2f:cc:6b:ef:bb:28:e7:4a:57:cd:c6:20:ee:
                    1d:36:75:d1:b6:0a:4f:bf:08:99:c1:c1:71:2d:fc:
                    2d:d1:0c:f6:44:3f:5b:09:66:41:71:39:92:4c:6d:
                    b6:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:27:E7:C2:16:C7:FB:02:2A:A5:8F:63:E1:69:5B:6D:0C:B5:17:83
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fc9a95e-53c1-4e1e-9c7b-39f8f242418e/f8a715bd-7121-3011-90e1-e6726bcf1bcd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fc9a95e-53c1-4e1e-9c7b-39f8f242418e/1fc9a95e-53c1-4e1e-9c7b-39f8f242418e.crl

            X509v3 Authority Key Identifier:
                keyid:BF:B8:47:5A:5F:33:6D:B7:0B:DE:C4:4B:99:00:36:AC:67:40:D0:DE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fc9a95e-53c1-4e1e-9c7b-39f8f242418e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.43.2.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4a:3d:23:3f:b8:0e:3a:1a:23:66:33:00:7a:77:ea:70:40:ae:
         05:58:62:71:45:f0:6c:39:13:07:d2:dc:a7:f7:14:cc:d8:a8:
         e2:7a:de:c8:b6:69:30:03:fe:c8:fe:3c:af:be:88:65:92:e7:
         6d:a5:7f:74:00:06:c4:3b:45:24:02:bb:fc:4a:ce:6a:63:ad:
         bf:31:ab:a0:f0:2e:53:ed:ec:70:39:03:8a:86:89:a3:9b:32:
         13:60:ff:18:21:5a:6a:ed:5b:95:00:03:db:38:3b:90:12:89:
         40:89:af:c0:65:f5:57:1a:93:6d:14:17:4a:9c:01:f7:87:45:
         e1:45:5c:c7:f6:fe:55:23:bd:c1:81:63:5e:95:0c:a4:a2:98:
         70:28:c6:d9:19:91:6e:05:dc:6e:f1:aa:a8:6a:5e:4d:6e:c7:
         a6:5a:0e:e1:ed:3d:f3:1b:bd:d5:7b:57:d8:fa:fa:51:5a:d9:
         a1:a8:4b:28:13:43:da:8f:24:dd:97:41:69:a9:7e:c4:dd:4e:
         c6:1d:a7:6b:f2:ec:8d:2f:4d:4f:b0:ff:43:11:27:be:2b:43:
         f8:4e:bc:98:cc:c3:e0:00:27:06:7e:b6:0a:8c:36:3e:f2:eb:
         b0:88:d4:44:dc:b8:85:6f:96:7d:dd:03:c5:e7:7d:8a:5c:77:
         44:66:ea:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 09:37:34 2025 by rpki-client