Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/de8b5430-108d-4deb-960f-6c438a23adc4/481396d5-7946-3e77-a64e-bb23720d1260.roa
File:                     481396d5-7946-3e77-a64e-bb23720d1260.roa (raw, json)
Hash identifier:          QsLz8oyXjep5zxWaMviAyvJmha4VrKUeQNov5n47xSA=
Subject key identifier:   56:E2:DB:E1:51:02:98:70:54:CC:1D:DF:A2:A4:DF:55:95:BD:B2:18
Certificate issuer:       /CN=de8b5430-108d-4deb-960f-6c438a23adc4
Certificate serial:       010D0C9F4328584A77808EBB02A4A2586148C700
Authority key identifier: 85:AD:13:A5:9E:F5:E8:3C:11:52:3F:14:C4:31:A2:9F:04:8F:DD:35
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/de8b5430-108d-4deb-960f-6c438a23adc4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/de8b5430-108d-4deb-960f-6c438a23adc4/481396d5-7946-3e77-a64e-bb23720d1260.roa
Signing time:             Thu 10 Jul 2025 01:00:51 +0000
ROA not before:           Thu 10 Jul 2025 01:00:51 +0000
ROA not after:            Wed 08 Oct 2025 01:00:51 +0000
asID:                     14618
IP address blocks:        66.132.138.0/24 maxlen: 24
                          198.73.53.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/de8b5430-108d-4deb-960f-6c438a23adc4/de8b5430-108d-4deb-960f-6c438a23adc4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/de8b5430-108d-4deb-960f-6c438a23adc4/de8b5430-108d-4deb-960f-6c438a23adc4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/de8b5430-108d-4deb-960f-6c438a23adc4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 07 Aug 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:77:80:8e:bb:02:a4:a2:58:61:48:c7:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=de8b5430-108d-4deb-960f-6c438a23adc4
        Validity
            Not Before: Jul 10 01:00:51 2025 GMT
            Not After : Oct  8 01:00:51 2025 GMT
        Subject: CN=11a0a45d-b096-44b5-9cf6-32d415128dae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:4a:8e:4b:28:1e:2a:32:a0:d5:c3:78:ac:a5:
                    d1:51:d3:9e:b1:5e:c1:98:4c:42:ea:41:08:68:de:
                    02:9f:25:3d:d0:d7:28:80:03:13:1e:1b:2f:20:28:
                    9e:9a:ef:9b:25:2b:bf:20:f2:92:31:63:8f:b5:83:
                    fe:4b:87:53:62:d0:a7:3f:59:82:b4:34:c9:41:5d:
                    d9:61:2e:e1:f1:4a:28:18:a0:a5:c7:e4:70:61:4e:
                    6f:fe:89:17:9f:14:fa:41:7a:9d:10:4d:53:49:6b:
                    26:f5:32:f2:f5:81:78:6d:fc:2c:ba:bf:23:42:27:
                    24:1a:20:51:9f:72:ca:67:14:5f:3c:b3:5a:24:84:
                    87:53:c9:b9:93:13:d2:23:80:08:cd:25:54:4e:bd:
                    82:2f:60:59:4a:8e:89:68:30:95:e1:08:bd:9c:92:
                    cc:2c:85:f2:84:69:d8:30:e6:ab:e8:f3:08:27:da:
                    47:ca:d4:5a:a7:38:63:c0:91:e1:6e:d5:a4:67:bb:
                    c1:70:cb:87:8c:98:6a:9c:d8:74:b4:28:cb:c8:a3:
                    c8:45:fd:bd:36:81:16:ed:2d:a8:e8:47:9c:ea:2c:
                    cd:ff:ab:85:cf:da:7a:47:06:6a:fc:55:bc:af:c0:
                    cb:64:56:e4:6e:06:92:6a:0f:ff:31:d9:ef:4a:a6:
                    02:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:E2:DB:E1:51:02:98:70:54:CC:1D:DF:A2:A4:DF:55:95:BD:B2:18
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/de8b5430-108d-4deb-960f-6c438a23adc4/481396d5-7946-3e77-a64e-bb23720d1260.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/de8b5430-108d-4deb-960f-6c438a23adc4/de8b5430-108d-4deb-960f-6c438a23adc4.crl

            X509v3 Authority Key Identifier:
                keyid:85:AD:13:A5:9E:F5:E8:3C:11:52:3F:14:C4:31:A2:9F:04:8F:DD:35

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/de8b5430-108d-4deb-960f-6c438a23adc4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.132.138.0/24
                  198.73.53.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         e1:ec:d7:f3:44:25:c7:3f:d2:cf:39:4c:5e:b8:99:c0:c6:4a:
         39:16:c3:36:f3:4c:6d:74:5f:e1:9f:d8:93:45:83:a2:83:7e:
         d5:25:b3:7f:86:ee:7c:b6:18:47:58:f2:e5:eb:99:fc:63:27:
         f0:b5:ff:a0:39:90:35:d7:08:30:c8:aa:55:28:76:98:a6:29:
         fd:17:db:31:a1:3c:5a:1e:cd:de:c2:37:b4:96:6a:c4:99:b7:
         6c:6c:64:64:7c:f1:03:3b:d9:7d:c2:64:ba:e2:38:8e:3a:59:
         57:4c:f3:52:c7:f6:52:5f:b3:b6:7b:f7:65:94:0d:75:f0:a3:
         0b:1e:47:6d:bb:f5:15:fa:97:c0:22:7b:03:4a:d8:0e:cd:8b:
         a5:8e:f1:92:c5:3f:db:e1:3a:48:d7:2d:21:b4:cc:94:9b:a7:
         81:bb:b5:7e:36:08:2d:d8:fe:8a:38:0d:d7:60:2a:32:a6:99:
         46:22:2d:fb:d2:34:03:9a:88:80:33:7c:64:96:49:63:68:98:
         f4:83:13:be:f2:d6:93:4b:4a:cb:3a:85:23:65:60:7b:c6:96:
         2d:9b:b9:d7:6c:7e:8a:ba:95:e0:26:b9:ba:a5:7a:40:ea:4e:
         dc:24:5a:ad:76:32:a9:34:bf:36:c5:50:a7:3c:04:9d:82:96:
         f1:70:ec:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 13:18:45 2025 by rpki-client