Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758/f4a74179-bca2-3eed-8890-6681deae4ca9.roa
File:                     f4a74179-bca2-3eed-8890-6681deae4ca9.roa (raw, json)
Hash identifier:          eJTK5o9deIQquXrTqHL16V3rYb1NZTrFzkz2FJ9TdtA=
Subject key identifier:   FA:EC:34:9C:76:88:46:5B:AB:19:17:1C:94:26:5A:45:2D:5E:19:85
Certificate issuer:       /CN=286639fc-94c4-4d6a-9de1-f1b3ebb5f758
Certificate serial:       010D0C9F4328584AB220BC467AA992D3F4C0AF80
Authority key identifier: 63:C7:11:22:88:E9:0B:38:04:E5:58:20:EC:45:6D:8A:6F:96:C0:01
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758/f4a74179-bca2-3eed-8890-6681deae4ca9.roa
Signing time:             Thu 31 Jul 2025 01:00:32 +0000
ROA not before:           Thu 31 Jul 2025 01:00:32 +0000
ROA not after:            Wed 29 Oct 2025 01:00:32 +0000
asID:                     20940
IP address blocks:        66.198.8.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758/286639fc-94c4-4d6a-9de1-f1b3ebb5f758.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758/286639fc-94c4-4d6a-9de1-f1b3ebb5f758.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 07 Aug 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:b2:20:bc:46:7a:a9:92:d3:f4:c0:af:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=286639fc-94c4-4d6a-9de1-f1b3ebb5f758
        Validity
            Not Before: Jul 31 01:00:32 2025 GMT
            Not After : Oct 29 01:00:32 2025 GMT
        Subject: CN=c9bc37ec-e37e-4165-a3b2-4df2c4fca58d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:55:79:63:b2:c5:c5:d3:b9:6b:20:c8:a5:57:
                    44:94:46:a3:96:ff:5b:e2:c5:71:cc:4a:34:68:20:
                    91:48:81:28:80:61:d5:9e:db:f2:d5:be:d9:2c:db:
                    35:44:de:34:f8:ef:e9:ec:ea:ff:0a:88:30:09:b1:
                    58:fa:ea:36:88:c0:26:5b:fd:84:23:4f:8b:8b:37:
                    0d:4f:24:df:92:32:6e:27:73:7c:d6:c3:24:f8:d0:
                    a8:50:1a:9a:ff:af:85:bf:f7:83:f6:1f:cd:0c:1f:
                    1f:76:fb:7f:9e:be:e3:fa:de:4b:9c:f0:28:6d:16:
                    64:1f:db:41:e8:f6:c2:1b:37:63:c9:d7:09:40:4a:
                    06:ec:ce:eb:5c:96:0c:79:d2:2b:10:3e:d3:62:ba:
                    7b:bb:65:4d:c0:0e:58:0e:d7:51:8d:58:fd:76:42:
                    73:ca:f2:51:f9:47:f0:10:8a:e6:d9:42:6c:1c:eb:
                    51:16:a7:d7:c8:4d:21:68:f8:7b:0d:d2:f2:8a:ee:
                    9c:a6:bc:71:3e:6a:77:d3:48:13:aa:01:39:63:4f:
                    d9:58:2b:90:ca:2d:e0:d6:0f:cc:1a:2b:63:1b:04:
                    99:ff:74:d4:d7:11:fa:cb:6d:7c:c2:cc:61:49:3e:
                    ab:55:c2:62:1d:55:61:e1:22:67:8f:05:4d:10:ba:
                    24:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:EC:34:9C:76:88:46:5B:AB:19:17:1C:94:26:5A:45:2D:5E:19:85
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758/f4a74179-bca2-3eed-8890-6681deae4ca9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758/286639fc-94c4-4d6a-9de1-f1b3ebb5f758.crl

            X509v3 Authority Key Identifier:
                keyid:63:C7:11:22:88:E9:0B:38:04:E5:58:20:EC:45:6D:8A:6F:96:C0:01

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.198.8.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         02:4a:70:25:3a:42:e1:93:b0:e6:3c:db:52:32:32:b6:b3:f5:
         56:8e:13:cd:f6:f1:1f:b8:6d:0e:67:7c:1b:25:28:bf:63:c9:
         59:f9:89:11:fa:b3:8c:ca:00:46:5c:8b:3b:49:3d:94:b7:ae:
         e5:26:33:62:d2:39:1f:50:60:ba:2c:ad:9d:ca:05:da:ed:62:
         1c:b3:22:47:9e:75:1e:bf:b7:29:06:34:ee:b1:7d:8c:dd:c4:
         de:b3:d4:95:9c:3d:8c:91:6a:d0:27:81:20:32:a1:e4:19:06:
         80:ce:c3:1b:82:4d:cf:85:cc:23:b4:2c:b6:d2:4a:02:82:f3:
         1c:64:20:1a:7c:bf:f0:b6:d9:cf:e7:35:aa:ba:1f:97:38:e5:
         ec:af:36:52:65:b5:f6:bc:f3:1a:21:af:18:ad:9b:81:79:90:
         47:f0:16:54:d6:ec:f0:39:55:11:0f:5b:75:35:c4:66:99:e2:
         dd:a1:db:c9:49:af:ae:a4:71:f3:f7:31:88:60:b4:ce:1e:ab:
         3d:13:22:d1:ca:e0:99:4e:64:fd:40:08:54:e0:da:56:1d:2f:
         91:ae:2b:56:9e:f6:51:a7:15:21:6f:bd:ad:78:41:57:85:e6:
         13:3d:b4:ca:6c:04:7a:eb:84:50:7a:30:16:7c:8f:98:de:31:
         dd:1f:bd:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 13:17:38 2025 by rpki-client