Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d170fca2-5f74-4408-8dc9-597ba031cfe2/0b33cf08-268d-3b07-8613-bc9a49c3894d.roa
File:                     0b33cf08-268d-3b07-8613-bc9a49c3894d.roa (raw, json)
Hash identifier:          AETgtp4LincaYgZyey4/V4wXaXKqMOjcHSiIo5EZxes=
Subject key identifier:   84:81:C9:D9:F4:60:BF:48:A5:41:37:1E:73:49:2A:32:57:88:8E:7F
Certificate issuer:       /CN=d170fca2-5f74-4408-8dc9-597ba031cfe2
Certificate serial:       010D0C9F4328584AADF12078FCDA4E7E8BD4F9E0
Authority key identifier: FF:28:BA:9B:42:6B:7A:24:D9:A4:AB:B7:91:4D:BD:B3:6F:3F:62:9E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d170fca2-5f74-4408-8dc9-597ba031cfe2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d170fca2-5f74-4408-8dc9-597ba031cfe2/0b33cf08-268d-3b07-8613-bc9a49c3894d.roa
Signing time:             Tue 29 Jul 2025 13:01:04 +0000
ROA not before:           Tue 29 Jul 2025 13:01:04 +0000
ROA not after:            Mon 27 Oct 2025 13:01:04 +0000
asID:                     14618
IP address blocks:        66.178.135.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d170fca2-5f74-4408-8dc9-597ba031cfe2/d170fca2-5f74-4408-8dc9-597ba031cfe2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d170fca2-5f74-4408-8dc9-597ba031cfe2/d170fca2-5f74-4408-8dc9-597ba031cfe2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d170fca2-5f74-4408-8dc9-597ba031cfe2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 06 Aug 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:ad:f1:20:78:fc:da:4e:7e:8b:d4:f9:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d170fca2-5f74-4408-8dc9-597ba031cfe2
        Validity
            Not Before: Jul 29 13:01:04 2025 GMT
            Not After : Oct 27 13:01:04 2025 GMT
        Subject: CN=9efa5b96-2418-43c3-9d5f-9a3203abdf5e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:a8:64:84:ad:4e:f9:82:53:5b:c6:1b:ac:fc:
                    87:a3:75:b5:9d:ec:95:2f:80:81:17:6c:50:40:c5:
                    77:6b:a1:ea:1b:be:49:c6:d7:09:df:4a:1a:58:65:
                    e3:cb:28:cb:ef:5a:18:b8:52:79:16:58:d0:9e:94:
                    d1:d2:69:dd:98:4d:2d:27:cd:ef:80:41:25:f6:da:
                    28:e9:da:47:5c:b3:2f:2e:a8:ad:b8:1c:9b:d4:27:
                    f5:97:88:e1:ec:52:d1:fa:c7:a4:e0:24:18:06:ef:
                    a8:6f:e4:a1:23:e8:e2:15:02:78:dd:73:11:f2:3f:
                    d1:a5:45:70:6b:aa:05:69:31:ab:5c:86:28:9e:8c:
                    01:63:8c:85:4a:a4:17:59:b8:78:4b:18:e4:21:ca:
                    f8:d3:ad:df:91:fa:b4:11:6b:84:ff:c6:4c:af:4f:
                    49:76:18:4e:7b:b4:ea:ce:72:00:0b:23:8d:45:59:
                    c2:bc:65:b9:b8:50:07:e0:57:c4:c9:e3:99:7c:41:
                    8b:79:4b:de:83:a8:6d:66:92:96:e0:b9:ad:34:7e:
                    c2:8d:81:af:85:2d:52:3f:59:8c:ad:f6:33:bc:07:
                    66:e8:78:15:2b:cf:78:be:af:e0:74:cf:71:67:9b:
                    b4:71:af:61:d9:e5:6c:2e:61:09:24:83:5d:25:7c:
                    55:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:81:C9:D9:F4:60:BF:48:A5:41:37:1E:73:49:2A:32:57:88:8E:7F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d170fca2-5f74-4408-8dc9-597ba031cfe2/0b33cf08-268d-3b07-8613-bc9a49c3894d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d170fca2-5f74-4408-8dc9-597ba031cfe2/d170fca2-5f74-4408-8dc9-597ba031cfe2.crl

            X509v3 Authority Key Identifier:
                keyid:FF:28:BA:9B:42:6B:7A:24:D9:A4:AB:B7:91:4D:BD:B3:6F:3F:62:9E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d170fca2-5f74-4408-8dc9-597ba031cfe2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.178.135.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c3:77:23:67:0e:1b:1a:11:fb:3e:7a:e2:c4:81:79:81:63:4b:
         c1:d9:fa:c9:89:59:a8:ac:af:38:86:88:b8:c9:dc:89:5a:24:
         c1:31:f9:c6:82:9f:0e:0c:92:05:74:e1:bc:1f:91:9a:e4:cf:
         02:ad:59:8a:d2:d7:6f:78:84:b7:14:8d:50:c5:b8:59:c0:c7:
         25:ce:f6:88:fc:2f:be:74:15:73:ff:3f:80:93:d5:ea:f9:1e:
         ca:f2:77:9b:9e:77:67:68:38:81:43:20:29:ac:25:a8:e9:fb:
         62:2c:0b:a7:fe:36:43:88:af:d7:63:fa:b2:fc:d2:3d:e4:3a:
         0b:44:02:a9:8a:59:34:d7:9b:22:3a:4d:e8:ea:ef:7f:95:3b:
         bd:63:37:d0:8f:92:01:25:0d:9f:70:6b:ed:a2:e7:4b:90:34:
         c3:7f:83:ea:ad:46:2e:f3:f4:ad:4c:72:11:a1:44:23:d4:25:
         d9:a1:76:f7:1c:f4:83:f0:53:66:5b:c8:fc:a3:35:55:87:ff:
         7b:0d:22:7d:2a:58:c3:2c:65:f8:aa:10:ed:6a:00:b3:67:d6:
         4d:53:a9:47:8f:78:99:8f:1c:0e:f3:c2:a2:4f:cd:90:17:69:
         b2:64:93:1f:7f:86:80:8a:74:e5:e1:fb:d4:5b:c7:ff:91:d1:
         1f:63:56:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 15:02:22 2025 by rpki-client