Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/06ec7975-08d6-3ae5-b849-eb78311f177c.roa
File:                     06ec7975-08d6-3ae5-b849-eb78311f177c.roa (raw, json)
Hash identifier:          YbdQxwqDAUvWV7yfZA8V27Ec56G/2OXvtGCx0a9MGZI=
Subject key identifier:   E4:ED:24:2B:F0:A0:6F:09:89:6F:5F:FD:BE:1F:16:A9:62:8D:07:2E
Certificate issuer:       /CN=93458135-7183-45e8-9dbc-dd82d2ffa119
Certificate serial:       010D0C9F4328584B970CECDDF149E96CEFB11900
Authority key identifier: EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/06ec7975-08d6-3ae5-b849-eb78311f177c.roa
Signing time:             Tue 21 Oct 2025 01:00:31 +0000
ROA not before:           Tue 21 Oct 2025 01:00:31 +0000
ROA not after:            Mon 19 Jan 2026 02:00:31 +0000
asID:                     22969
IP address blocks:        66.213.136.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:97:0c:ec:dd:f1:49:e9:6c:ef:b1:19:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93458135-7183-45e8-9dbc-dd82d2ffa119
        Validity
            Not Before: Oct 21 01:00:31 2025 GMT
            Not After : Jan 19 02:00:31 2026 GMT
        Subject: CN=f7326129-67ca-4c27-8877-f58d26ab87ea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:07:21:b6:f5:32:f2:17:b0:36:e7:4c:6f:e5:
                    76:71:b5:09:7e:14:30:be:8a:67:d4:6b:56:20:bf:
                    d0:a2:85:8c:a8:dc:da:1c:0f:5a:de:85:a6:e5:b4:
                    9a:9b:06:66:a4:bf:8a:3c:68:1c:cd:be:e0:e5:54:
                    17:df:a6:2a:66:f1:8e:2d:ea:6c:41:e5:57:f7:04:
                    8d:3b:51:46:ba:dc:76:3e:c1:eb:5f:25:5f:99:f8:
                    6b:19:aa:57:9b:9f:be:75:ad:24:2a:95:7c:86:29:
                    a7:51:bd:20:7c:bf:db:fb:cc:c0:cf:18:93:a4:bd:
                    5f:a8:3b:51:7e:e8:4a:5c:dc:5e:8a:aa:c5:cb:96:
                    02:19:19:39:5a:bd:7f:32:4c:25:d6:18:c4:20:16:
                    8a:a7:8e:84:1a:ef:f5:ff:12:dc:b2:c6:61:7d:ba:
                    7c:ed:62:c4:94:2c:91:05:ee:7e:30:d7:a3:8a:a4:
                    33:d6:69:a2:e3:6a:56:9b:90:93:55:e6:c1:6c:c9:
                    6c:33:41:7b:3c:80:49:83:1b:47:8b:cd:0c:9b:fa:
                    46:c2:53:2b:0c:d9:ab:a6:5a:cf:2b:aa:af:1c:c3:
                    86:eb:73:1a:b5:83:ea:a5:02:b0:8b:ae:e9:11:ec:
                    5e:e5:16:4a:71:09:c5:24:88:35:ed:90:72:24:bb:
                    39:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:ED:24:2B:F0:A0:6F:09:89:6F:5F:FD:BE:1F:16:A9:62:8D:07:2E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/06ec7975-08d6-3ae5-b849-eb78311f177c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl

            X509v3 Authority Key Identifier:
                keyid:EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.213.136.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2d:86:35:fd:fb:ea:e6:ce:61:83:47:50:8f:21:35:bd:bc:4b:
         f0:c1:c4:72:27:e6:12:62:b0:f9:f8:7c:9d:84:99:38:7a:30:
         52:08:db:43:b8:fd:4b:4d:ed:1a:0d:60:28:4a:fc:40:0f:eb:
         eb:d2:c1:3e:7c:3a:08:61:a2:80:73:89:8c:21:0b:bb:fa:72:
         7f:67:49:98:3c:47:be:90:a5:7d:0a:36:8d:4e:db:69:e4:d3:
         dd:6a:02:5c:e7:23:0d:05:22:06:be:af:f6:b4:58:19:f1:87:
         20:e7:fd:e8:12:31:99:76:3a:50:b5:d6:4b:37:e8:e1:9d:48:
         cd:ec:1d:f6:40:a3:e8:ae:4b:68:e6:d5:8a:30:88:d4:b9:f5:
         e3:72:58:35:e5:43:bd:54:d0:37:eb:cb:b6:66:48:98:66:24:
         a2:2b:06:4f:3d:98:3b:28:ba:b9:ce:2a:e4:2f:26:34:0b:0d:
         0e:cf:47:e9:35:43:00:39:0f:a2:76:45:ba:5e:8d:c8:3a:5c:
         d1:8a:78:72:6b:88:cc:1f:e0:53:e1:9f:04:4b:24:ef:6e:d0:
         1c:db:bc:42:6e:e8:02:80:ae:c2:51:f4:95:43:b1:8a:e7:e7:
         42:8e:c0:2b:da:51:2d:98:1e:16:c0:29:d0:5f:7e:35:63:b9:
         20:42:96:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 04:32:33 2025 by rpki-client