Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/44d29f1e-e1c4-3319-a596-bd89cee8064d.roa
File:                     44d29f1e-e1c4-3319-a596-bd89cee8064d.roa (raw, json)
Hash identifier:          JC22BAJALmnt+l+wC1ZphcHcF1TqYc+kLNjxp7YfmPc=
Subject key identifier:   89:3C:67:22:EA:D9:89:FF:19:D8:1F:91:70:58:DD:0B:62:63:2E:46
Certificate issuer:       /CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a
Certificate serial:       010D0C9F4328584BA2378F62686E88F551338EA0
Authority key identifier: 49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/44d29f1e-e1c4-3319-a596-bd89cee8064d.roa
Signing time:             Sat 25 Oct 2025 01:00:31 +0000
ROA not before:           Sat 25 Oct 2025 01:00:31 +0000
ROA not after:            Fri 23 Jan 2026 02:00:31 +0000
asID:                     23473
IP address blocks:        66.253.140.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:a2:37:8f:62:68:6e:88:f5:51:33:8e:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a
        Validity
            Not Before: Oct 25 01:00:31 2025 GMT
            Not After : Jan 23 02:00:31 2026 GMT
        Subject: CN=f6763582-1b8f-4b3c-9b85-81edbd1651de
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:bf:a5:06:2e:c9:a3:0d:24:a9:8c:70:e1:e8:
                    67:45:a4:ef:62:21:55:3f:b0:ae:47:b0:4c:7f:a7:
                    10:f5:16:dd:de:db:9e:c1:b0:ad:ad:17:a2:87:b8:
                    cd:ed:ff:19:de:5b:b2:e0:ba:78:47:cf:62:57:9a:
                    b1:61:33:a6:58:24:bc:dd:00:4e:f5:3f:29:5d:8b:
                    fb:0c:f3:98:02:42:39:fe:1e:68:f2:c4:ce:ed:87:
                    21:44:df:09:22:1f:b8:08:76:e7:e4:0c:10:e1:21:
                    d5:ca:fd:2e:30:ba:9f:81:15:82:24:31:60:dd:e0:
                    d2:42:4e:00:e1:f4:fe:f0:c7:a5:e4:7a:cd:dc:c9:
                    99:31:29:d9:82:f8:8a:22:d2:54:d0:fe:44:1c:98:
                    53:71:9e:d5:57:d6:3b:9f:ea:4f:ae:02:32:7c:39:
                    cc:07:71:74:ea:fb:8e:9c:8c:a9:1c:23:77:0e:29:
                    4b:05:fa:33:5a:41:27:4d:7f:2e:c0:1a:ce:c7:3d:
                    91:4b:92:61:4a:b5:fc:7e:19:8d:9a:a1:47:a9:18:
                    33:62:56:dd:8b:01:48:81:09:42:81:2e:8c:77:73:
                    85:18:de:bc:f0:0d:6f:64:68:ea:c3:d4:7e:9f:71:
                    74:37:e6:91:02:f6:79:6d:25:4a:ea:09:1b:15:b3:
                    69:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:3C:67:22:EA:D9:89:FF:19:D8:1F:91:70:58:DD:0B:62:63:2E:46
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/44d29f1e-e1c4-3319-a596-bd89cee8064d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl

            X509v3 Authority Key Identifier:
                keyid:49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.253.140.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         67:43:08:0a:be:ee:10:58:0d:36:bd:19:c0:2b:6e:d1:24:9b:
         a8:ea:9c:f0:88:bd:e6:09:f1:23:5c:92:38:dd:a8:4e:82:f7:
         ea:b8:78:43:99:b2:ec:a5:16:5b:29:54:9f:fe:1b:d2:42:c2:
         d8:fc:6c:b8:1b:97:42:d3:ba:6e:ea:5a:e3:24:b9:94:59:8a:
         5d:40:a4:fa:18:ae:e3:04:9d:02:14:18:aa:cd:0c:1d:43:25:
         36:f5:3d:54:6a:c9:a7:ae:e7:15:6e:df:7c:5b:56:f7:d0:e9:
         73:a3:a0:d9:db:b7:3a:55:df:e5:9f:49:64:32:9d:c3:78:fd:
         76:2d:3c:60:e4:ad:22:7d:12:ea:b0:5f:12:44:07:21:9f:bb:
         40:0f:7f:9a:6d:7f:ed:fa:36:e1:61:f7:bc:54:80:c7:f8:8f:
         21:55:e9:25:c9:92:a5:9b:15:06:39:3f:11:56:b2:e8:b9:98:
         c9:fa:11:c8:87:b8:6c:57:e6:98:e1:34:d6:cf:32:d8:12:25:
         d0:6f:38:94:04:32:83:68:ca:87:25:27:d6:de:8f:12:27:77:
         84:0e:bd:04:25:e9:28:3b:bb:ba:93:e7:39:35:2c:3f:74:15:
         5c:c0:83:b5:c7:9f:ab:e5:00:62:4b:4f:a5:23:ca:46:5b:33:
         46:30:83:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 01:06:56 2025 by rpki-client